Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/7-yY2XLWHLUd9AuKxH5IHfl175M.roa
File: 7-yY2XLWHLUd9AuKxH5IHfl175M.roa (raw, json)
Hash identifier: zG66GAnwYloqOJJfg6bZ7R9P50YwxEBbTOi0v9cAdF8=
Subject key identifier: EF:EC:98:D9:72:D6:1C:B5:1D:F4:0B:8A:C4:7E:48:1D:F9:75:EF:93
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01980953455B44913F156D1D68CF43C11D4C
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/7-yY2XLWHLUd9AuKxH5IHfl175M.roa
Signing time: Mon 14 Jul 2025 14:25:08 +0000
ROA not before: Mon 14 Jul 2025 14:25:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 80.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:53:45:5b:44:91:3f:15:6d:1d:68:cf:43:c1:1d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jul 14 14:25:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efec98d972d61cb51df40b8ac47e481df975ef93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:7e:ce:ad:a8:dd:6b:ed:03:ee:e6:a8:90:
85:f5:7b:09:c4:fc:39:0d:e7:c0:eb:d9:49:70:39:
6a:a1:21:c7:a8:17:91:34:f5:35:a5:10:df:05:2b:
79:85:8e:aa:59:96:3c:42:fe:c9:78:94:d9:9f:86:
2f:94:a1:b6:cf:53:6e:1c:a8:aa:12:3a:1c:2b:cf:
70:c7:2a:62:59:be:c1:96:ac:06:ee:77:23:f5:31:
ce:fb:e3:31:35:28:ea:d1:2d:4a:2a:ef:18:83:16:
18:59:20:73:8b:5a:7d:ec:36:70:3e:95:72:72:b6:
0c:b3:fb:22:50:82:c6:63:85:6e:22:5c:aa:28:1d:
d9:80:66:35:a9:d4:1a:df:77:a8:08:5d:f2:14:84:
2e:25:16:72:b4:16:7b:f4:ba:79:68:ca:fe:c3:80:
4b:0b:ab:86:f1:e4:bb:d1:ee:2f:fc:3d:1e:65:40:
10:c8:a7:65:ca:82:f8:a1:f4:b1:33:df:79:58:d4:
75:fb:46:17:de:17:6d:17:ac:c8:27:a8:27:bf:cc:
a5:1a:f6:74:3a:11:1b:b7:62:0e:0f:30:77:4d:8d:
ff:f5:ae:9a:db:bc:50:91:54:c0:54:a9:ef:82:ef:
34:54:c1:90:06:3a:5f:ed:88:50:d2:4c:fa:41:cf:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:98:D9:72:D6:1C:B5:1D:F4:0B:8A:C4:7E:48:1D:F9:75:EF:93
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/7-yY2XLWHLUd9AuKxH5IHfl175M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
95:32:86:81:3c:3e:56:37:a0:1d:bb:4e:5c:13:cf:34:7a:ee:
c0:c4:16:9f:0d:2d:c0:9c:50:99:ec:37:34:01:b9:f4:30:15:
65:21:9a:e9:da:ff:30:6f:58:a5:a4:8e:2c:17:2a:36:50:5a:
12:0b:bf:02:dd:d5:2c:0a:b4:9d:2d:e6:6c:31:0b:b6:91:87:
cb:f3:d7:07:08:a8:02:dc:7c:46:47:bc:c6:20:ef:32:54:64:
a3:e6:80:a4:2b:8b:64:5b:cc:a0:e6:14:98:99:4f:e3:4a:4f:
e1:01:9b:f3:52:c2:75:9f:45:28:4b:2d:4d:e8:36:f3:30:17:
94:0d:f9:0a:1c:09:7f:00:3c:22:8e:51:fc:63:a4:22:37:aa:
6e:7c:fb:45:75:d0:7c:c3:27:59:4a:8b:f8:f8:5f:80:02:73:
dc:ff:88:aa:a0:65:f6:4f:f7:9e:b5:9f:1a:3e:71:34:28:ac:
98:e3:d7:38:b3:31:21:13:a7:ad:11:15:5b:c3:dd:5f:b6:42:
a7:17:a0:83:41:79:63:a2:1f:81:86:7b:b6:94:75:d1:4f:46:
dd:b8:26:ea:1d:e5:0b:99:10:67:42:46:3d:3e:fe:02:6e:74:
4b:af:c8:a5:ae:b5:6d:35:d1:fe:e8:28:dc:85:2c:a6:c9:43:
e0:95:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:08:55 2025 by rpki-client