Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/m7WrmCx6u03mQuCv5HV8jBx9bFo.roa
File: m7WrmCx6u03mQuCv5HV8jBx9bFo.roa (raw, json)
Hash identifier: Ha14BfkFTZRxDnv1SGkvf/k31l7c4G7JUHS2Zmnc08A=
Subject key identifier: 9B:B5:AB:98:2C:7A:BB:4D:E6:42:E0:AF:E4:75:7C:8C:1C:7D:6C:5A
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 0197D52CA63403C51981DD380CAAA1E4DD66
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/m7WrmCx6u03mQuCv5HV8jBx9bFo.roa
Signing time: Fri 04 Jul 2025 11:22:42 +0000
ROA not before: Fri 04 Jul 2025 11:22:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49418
IP address blocks: 2a01:ecc0:280::/42 maxlen: 42
2a01:ecc0:640::/42 maxlen: 42
2a01:ecc0:740::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:2c:a6:34:03:c5:19:81:dd:38:0c:aa:a1:e4:dd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Jul 4 11:22:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bb5ab982c7abb4de642e0afe4757c8c1c7d6c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:19:aa:8b:47:cd:31:b4:0b:0f:6e:b9:9c:60:
de:9c:f1:e8:a1:3e:a1:7d:b5:6e:59:6b:40:4f:81:
6f:42:01:1a:23:69:7a:c0:ca:8e:3a:f5:2f:02:3e:
e4:fd:84:cd:bf:bd:8d:6f:23:0f:4c:4c:81:bd:45:
af:88:25:25:81:8b:f7:21:24:b0:8b:bb:86:91:f3:
22:92:92:36:a2:28:f3:a2:8e:ef:c0:f8:91:f0:5c:
75:0a:90:71:79:e4:ca:d2:db:8c:1e:fd:17:f6:c0:
eb:20:ed:9b:09:4a:d8:71:1f:52:48:f0:c0:2a:33:
f1:6a:09:c7:ea:05:d5:72:18:18:a6:72:38:e9:8f:
14:4a:98:d8:17:61:9b:9f:c3:d1:3b:12:21:36:32:
a0:12:35:19:bd:e5:b6:e0:46:cc:97:33:c5:b0:67:
0a:7c:54:29:69:45:0e:75:8d:17:46:46:f1:ca:04:
88:0b:bd:97:be:e7:e5:21:15:81:3f:61:d8:24:37:
5e:14:40:1b:d4:15:f3:34:27:af:ed:1f:f2:b4:f3:
99:92:b8:b2:8d:05:67:6d:44:89:b4:af:0e:2c:63:
40:64:8d:13:93:f9:2c:69:eb:d7:f9:31:39:2a:fb:
ce:b5:6f:36:e4:fd:83:77:01:d8:b5:e3:86:fb:91:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B5:AB:98:2C:7A:BB:4D:E6:42:E0:AF:E4:75:7C:8C:1C:7D:6C:5A
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/m7WrmCx6u03mQuCv5HV8jBx9bFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:280::/42
2a01:ecc0:640::/42
2a01:ecc0:740::/42
Signature Algorithm: sha256WithRSAEncryption
1b:5e:48:d9:02:32:ff:cf:41:b6:58:d9:55:5a:a5:18:93:96:
54:59:9a:e4:d0:cd:cb:a1:64:8d:42:24:7b:42:80:cf:93:0f:
bc:54:03:59:89:ed:50:8a:66:a1:63:49:c1:10:23:7b:59:99:
fa:de:8a:b3:5c:49:3e:55:0a:df:f2:f6:74:e6:1e:0b:33:01:
ce:12:88:95:68:5d:e5:13:26:fe:40:41:17:30:d4:ef:ca:d6:
e4:f7:01:4f:85:61:7d:ee:a8:82:9e:37:85:5b:85:ba:c8:7f:
3a:f3:de:ab:69:c1:99:2f:76:ac:ed:d0:95:26:06:c1:33:44:
af:ee:21:48:ed:70:1b:a9:74:3c:5b:72:75:fa:16:98:77:9a:
85:4a:48:4e:de:cb:25:a1:5e:19:01:7d:f2:06:81:7d:8d:9b:
b4:14:ef:07:af:ea:cb:8f:cb:1e:0e:08:03:fe:e2:14:71:93:
82:4d:80:6b:d7:32:18:28:e7:d4:fd:46:8e:b1:46:21:c5:11:
49:b0:f6:ae:50:0c:73:b5:f3:de:f7:f8:02:8d:f5:03:7e:0b:
07:a3:88:94:c7:7e:37:fb:ba:f8:fa:95:a3:fd:18:12:c2:f4:
04:5a:66:88:29:74:cc:a0:63:8d:6a:5c:e9:e1:53:59:91:18:
f2:21:b0:b7
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZfVLKY0A8UZgd04DKqh5N1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0
ZWU1YmUwHhcNMjUwNzA0MTEyMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmI1YWI5ODJjN2FiYjRkZTY0MmUwYWZlNDc1N2M4YzFjN2Q2YzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hmqi0fNMbQLD265nGDenPHooT6h
fbVuWWtAT4FvQgEaI2l6wMqOOvUvAj7k/YTNv72NbyMPTEyBvUWviCUlgYv3ISSw
i7uGkfMikpI2oijzoo7vwPiR8Fx1CpBxeeTK0tuMHv0X9sDrIO2bCUrYcR9SSPDA
KjPxagnH6gXVchgYpnI46Y8USpjYF2Gbn8PROxIhNjKgEjUZveW24EbMlzPFsGcK
fFQpaUUOdY0XRkbxygSIC72XvuflIRWBP2HYJDdeFEAb1BXzNCev7R/ytPOZkriy
jQVnbUSJtK8OLGNAZI0Tk/ksaevX+TE5KvvOtW825P2DdwHYteOG+5FtewIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJu1q5gsertN5kLgr+R1fIwcfWxaMB8GA1UdIwQY
MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt
NjM0NTE1NDg5NzlkLzEvbTdXcm1DeDZ1MDNtUXVDdjVIVjhqQng5YkZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk
LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcGKgHswAKA
AwcGKgHswAZAAwcGKgHswAdAMA0GCSqGSIb3DQEBCwUAA4IBAQAbXkjZAjL/z0G2
WNlVWqUYk5ZUWZrk0M3LoWSNQiR7QoDPkw+8VANZie1QimahY0nBECN7WZn63oqz
XEk+VQrf8vZ05h4LMwHOEoiVaF3lEyb+QEEXMNTvytbk9wFPhWF97qiCnjeFW4W6
yH86896racGZL3as7dCVJgbBM0Sv7iFI7XAbqXQ8W3J1+haYd5qFSkhO3ssloV4Z
AX3yBoF9jZu0FO8Hr+rLj8seDggD/uIUcZOCTYBr1zIYKOfU/UaOsUYhxRFJsPau
UAxztfPe9/gCjfUDfgsHo4iUx343+7r4+pWj/RgSwvQEWmaIKXTMoGONalzp4VNZ
kRjyIbC3
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:17:42 2025 by rpki-client