Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b7QO-Z7PcC-7V2TGIfUm5NWx62U.roa
File: b7QO-Z7PcC-7V2TGIfUm5NWx62U.roa (raw, json)
Hash identifier: 8SRGk6stzI54zbuCdnpv4p5L4/baRkojiVOD7Vnxc08=
Subject key identifier: 6F:B4:0E:F9:9E:CF:70:2F:BB:57:64:C6:21:F5:26:E4:D5:B1:EB:65
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197BD32F698EA71B925C275349B00933A87
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b7QO-Z7PcC-7V2TGIfUm5NWx62U.roa
Signing time: Sun 29 Jun 2025 19:38:43 +0000
ROA not before: Sun 29 Jun 2025 19:38:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 37.252.28.0/24 maxlen: 24
79.99.149.0/24 maxlen: 24
89.213.117.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:32:f6:98:ea:71:b9:25:c2:75:34:9b:00:93:3a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 19:38:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fb40ef99ecf702fbb5764c621f526e4d5b1eb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:e6:a0:aa:55:74:5a:e6:db:9e:d0:70:68:
8d:c3:b8:3d:0e:bf:f6:df:44:7e:20:e5:7e:7e:14:
12:2b:4a:4d:2c:98:5a:92:f8:cd:da:7d:3b:31:06:
09:19:36:ec:64:bd:de:11:77:39:d3:ee:6b:c9:75:
28:80:10:83:03:ea:69:98:0f:48:5a:44:9f:10:81:
78:e2:9c:c3:72:d1:f2:8c:16:61:ff:72:4a:8b:d3:
3f:b4:9b:84:89:d3:71:58:9d:56:68:00:67:e1:a7:
64:3f:09:e7:a3:02:4d:b0:4b:cd:c5:66:72:91:82:
84:30:a1:05:66:5d:33:21:63:48:28:d2:6b:23:86:
cf:da:2e:63:1c:a1:9c:74:34:88:6f:2d:16:59:71:
10:5c:de:88:dd:70:15:c5:54:54:0b:cf:b4:59:17:
21:98:75:73:9a:54:8b:c6:cc:ed:69:b5:86:d1:ab:
13:b8:31:b2:7d:86:0c:ab:c2:86:72:af:3b:20:cc:
80:26:70:02:04:ec:93:b5:c4:38:ff:5f:33:7b:f8:
97:11:5c:ac:6b:c9:ec:9b:62:3f:ec:cb:80:3e:4c:
0f:62:e7:ab:b4:6c:ec:01:e2:72:93:76:12:10:e4:
ee:c4:a9:7d:11:00:23:da:4f:b1:1f:20:08:d2:81:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B4:0E:F9:9E:CF:70:2F:BB:57:64:C6:21:F5:26:E4:D5:B1:EB:65
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b7QO-Z7PcC-7V2TGIfUm5NWx62U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.28.0/24
79.99.149.0/24
89.213.117.0/24
89.213.169.0/24
89.213.171.0/24
89.213.176.0/24
89.213.221.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d0:64:f3:ee:a2:90:91:65:65:e7:8a:19:c6:fa:3f:96:bf:
67:78:86:92:e4:2f:30:63:8f:59:f8:9d:c3:de:f6:82:b8:05:
1e:7b:a9:09:87:b3:c4:8b:25:49:6d:33:74:2a:13:96:11:8b:
3a:51:3c:93:d7:40:ba:c9:3d:b8:b1:01:fe:f5:1e:c9:a7:49:
6c:2a:6b:62:65:ec:a4:83:86:71:9d:6c:d3:9e:b9:2f:ae:6b:
10:fb:a0:98:95:95:9a:5d:39:e8:11:78:ee:0f:7a:18:9d:f7:
2e:35:c1:f2:ed:dc:85:5a:79:a5:41:8d:bc:40:d5:41:57:27:
57:01:44:74:1c:35:71:03:4a:7d:5b:3f:24:78:28:a8:e0:a6:
82:73:30:72:7a:b6:11:89:f4:f3:37:79:63:e7:31:5e:cd:b9:
7d:3e:e4:62:55:13:4a:a8:18:67:59:9e:d6:d6:f0:a3:d9:a9:
79:1c:76:3e:13:7c:bb:dd:41:08:bf:3d:9a:7e:7e:53:6c:cf:
eb:c3:a0:21:9b:4c:86:98:89:b9:99:1b:b9:78:af:68:be:36:
9d:2f:71:30:2d:47:75:24:a0:5e:1a:2d:22:fa:b5:3b:0e:89:
a1:d3:39:cb:f2:67:04:ad:29:85:75:e9:5d:b5:de:ab:8f:7c:
d9:b2:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:25:44 2025 by rpki-client