Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/l7Mx8ECeMLRgOZtkKahNhfqZB_4.roa
File: l7Mx8ECeMLRgOZtkKahNhfqZB_4.roa (raw, json)
Hash identifier: hEUKFB0sE9+M5Wt+beBFFpJfarlKNek9YnFoHsLRVt4=
Subject key identifier: 97:B3:31:F0:40:9E:30:B4:60:39:9B:64:29:A8:4D:85:FA:99:07:FE
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 0197FD2B63F858416BEE1D6412DDE0562685
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/l7Mx8ECeMLRgOZtkKahNhfqZB_4.roa
Signing time: Sat 12 Jul 2025 05:46:08 +0000
ROA not before: Sat 12 Jul 2025 05:46:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211096
IP address blocks: 95.156.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fd:2b:63:f8:58:41:6b:ee:1d:64:12:dd:e0:56:26:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Jul 12 05:46:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97b331f0409e30b460399b6429a84d85fa9907fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:74:51:09:a0:00:77:80:60:d1:9c:d2:b9:68:
3a:86:db:8f:d2:fe:ce:16:4d:41:e9:e0:7f:3d:f7:
57:e6:9c:93:7e:49:15:38:1c:ad:f3:34:40:1a:a5:
87:b5:fa:03:c5:3c:10:18:71:82:f9:f8:2d:5b:52:
a5:32:21:0b:be:31:40:9d:eb:fb:f1:50:6a:7d:e9:
fb:ce:6a:03:c5:07:e8:a4:16:25:46:13:7d:86:68:
8d:36:15:f2:d9:d5:da:9a:0c:8b:fd:4a:7c:9d:7d:
11:5f:5e:11:df:9e:34:d2:63:4b:76:56:a0:ea:0e:
52:0d:b7:22:12:7a:41:10:fc:34:e8:66:93:19:64:
35:15:01:b3:46:9b:a9:6c:40:c2:ff:ec:d3:f5:e0:
8b:fc:e7:d3:f9:b3:d3:d2:1b:06:4a:db:9c:6d:d3:
96:c1:21:93:c7:b8:d7:38:e5:7f:80:1d:b1:a9:c1:
cc:7f:37:b7:85:05:e4:e1:8e:d7:4c:eb:a5:1b:76:
ea:88:a8:a6:ab:67:02:92:b8:da:fc:98:30:75:07:
c0:37:bd:4d:3d:ec:48:c5:d2:e6:9c:61:a2:34:ca:
2c:d6:b7:e3:f0:7f:e0:c6:1e:e2:91:29:14:86:60:
36:b4:59:eb:f6:92:d1:70:74:61:e2:56:fa:f2:4d:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B3:31:F0:40:9E:30:B4:60:39:9B:64:29:A8:4D:85:FA:99:07:FE
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/l7Mx8ECeMLRgOZtkKahNhfqZB_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.156.203.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c4:0d:3d:f0:d9:da:d8:37:dd:d2:44:51:08:c5:c1:b2:9c:
2a:b2:cd:9a:d7:2d:e8:a3:24:bd:d2:04:ef:0a:e8:64:cd:47:
95:8b:e9:76:e3:ea:11:48:6e:0e:8f:23:ee:bf:86:3b:c7:7d:
a4:dc:29:7e:3d:3e:1c:e6:20:bd:fd:88:05:44:c9:48:26:fd:
fb:c5:dd:ba:9a:77:58:16:6a:31:15:25:7f:8f:e8:c3:32:b6:
48:ce:f8:7a:be:2e:e7:a1:46:6e:e1:f4:bd:4f:4a:cd:25:e3:
89:65:b3:b5:f9:d8:06:cd:59:c2:94:c6:38:f4:59:04:32:49:
8b:ab:42:7f:ba:dc:30:fa:20:fa:34:0e:79:b1:a1:fe:e9:fc:
f6:5f:9f:c2:f9:4d:ba:ce:36:0c:5d:4a:dc:17:23:fa:f5:f3:
0e:55:08:9a:61:e0:d1:1e:03:a5:76:ff:0b:58:3f:d3:27:df:
1f:cd:11:a8:e4:5f:90:ae:20:63:32:13:65:09:a7:ab:73:36:
28:f3:a5:09:a8:b9:ed:30:ba:0b:fa:28:be:d6:a8:bb:c3:c2:
d4:7d:5e:15:c6:7d:f3:b2:64:77:df:40:aa:91:04:28:3f:fb:
f1:71:e3:8e:cd:8c:92:c5:97:5f:c8:46:ab:18:84:04:e8:7a:
64:74:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:27:11 2025 by rpki-client