Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ec_7sznhUDCwCUPEq50_z3K33Mw.roa
File: ec_7sznhUDCwCUPEq50_z3K33Mw.roa (raw, json)
Hash identifier: s89/DSVo7KmpBP2bs5EXyE0ELxRt4cdYZta7mrY7laQ=
Subject key identifier: 79:CF:FB:B3:39:E1:50:30:B0:09:43:C4:AB:9D:3F:CF:72:B7:DC:CC
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01980E6BEA5753DCEA0DEBE6EE9F3514EDED
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ec_7sznhUDCwCUPEq50_z3K33Mw.roa
Signing time: Tue 15 Jul 2025 14:10:09 +0000
ROA not before: Tue 15 Jul 2025 14:10:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215357
IP address blocks: 2a03:5840:128::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:6b:ea:57:53:dc:ea:0d:eb:e6:ee:9f:35:14:ed:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jul 15 14:10:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79cffbb339e15030b00943c4ab9d3fcf72b7dccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:08:0f:07:f4:4e:08:9c:c3:30:fa:ed:99:
08:79:ea:7f:ea:47:81:3d:1d:1f:09:05:b8:c2:b6:
c2:6a:55:67:1b:44:33:82:54:80:80:6d:7f:85:70:
7e:5b:4b:52:56:e8:38:51:cc:37:28:b1:8e:f9:c7:
b3:58:33:6c:23:ce:e4:14:f0:29:6b:9f:d1:13:1e:
f4:e4:a5:31:bb:67:0c:67:6b:b5:1a:4c:68:ef:4b:
fa:75:df:15:40:16:92:44:0a:d0:5c:38:fd:0c:08:
5e:e3:34:55:ac:74:24:a8:da:c2:d7:a7:cb:b2:f1:
99:10:31:c0:55:e6:2a:1b:02:7a:c6:dd:f9:42:f7:
49:a7:dc:e9:d7:eb:f7:86:3e:bc:f8:7f:c1:cd:64:
fd:07:e8:0e:d1:1c:0e:26:fc:a5:9a:9a:3b:2a:b0:
f1:9a:ba:a0:78:f0:5d:18:f4:a4:cb:d5:2c:20:18:
db:8c:e6:c0:7e:bf:45:5b:37:63:6e:0e:4f:f1:35:
31:75:89:ee:ee:7a:eb:ee:61:5d:70:a6:66:fc:a8:
27:d9:90:f2:68:2e:f0:74:e5:c0:57:4a:8a:cd:a2:
9f:48:e6:7a:7a:fd:95:f2:9e:95:de:6b:17:03:5d:
93:fc:58:b8:7a:5c:81:6e:21:11:81:07:32:43:1f:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CF:FB:B3:39:E1:50:30:B0:09:43:C4:AB:9D:3F:CF:72:B7:DC:CC
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ec_7sznhUDCwCUPEq50_z3K33Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:128::/48
Signature Algorithm: sha256WithRSAEncryption
11:98:e0:89:a4:df:02:4c:38:bf:bb:16:00:d9:62:1a:5f:f1:
85:10:84:50:d6:a1:43:2a:67:43:f4:bf:d2:2d:7b:99:75:dd:
46:e9:7c:aa:03:08:65:dc:53:c7:d4:e9:d8:96:54:27:58:31:
65:b2:7a:da:69:41:9e:85:5d:6d:49:fd:ba:f2:f3:84:5a:cc:
51:a0:7d:6e:9d:d7:bf:53:4e:84:8d:43:f6:3b:97:48:18:33:
0e:c1:d7:65:02:f0:1a:4e:c2:cf:5b:6f:ef:30:2d:85:47:d0:
3a:83:eb:d9:07:08:17:47:d3:36:e7:19:2e:bd:04:27:df:9a:
18:1c:69:8f:cd:ba:a5:c5:8f:0a:a1:a6:d8:84:85:b4:32:0a:
c5:20:09:d6:36:0f:ab:13:09:b1:ef:1d:ab:e1:a6:7d:ec:d9:
2d:01:2f:c9:09:a9:0a:d7:20:65:6e:51:49:05:aa:b6:63:34:
60:19:39:10:e8:08:ef:fd:02:7b:5f:73:a0:08:90:66:70:44:
52:43:7c:cd:88:c4:93:42:75:82:ea:02:1f:67:65:31:02:4c:
dd:a1:2f:98:b3:39:f7:24:a5:f7:ce:a0:3c:ce:91:eb:89:f1:
d3:08:12:f9:f0:50:61:8e:fb:54:c4:38:56:9d:1f:2d:fb:56:
38:b9:23:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:41:31 2025 by rpki-client