Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/emjANyISkJRoOdzxCAt2kq4CVQE.roa
File: emjANyISkJRoOdzxCAt2kq4CVQE.roa (raw, json)
Hash identifier: 9W1oN3mBYbWV8A6Uo6B7h78llPTnM+uYRLY9fCXhQlY=
Subject key identifier: 7A:68:C0:37:22:12:90:94:68:39:DC:F1:08:0B:76:92:AE:02:55:01
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 0197FEAEAC3C06A5C02FF7B25DFA4DCB41F1
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/emjANyISkJRoOdzxCAt2kq4CVQE.roa
Signing time: Sat 12 Jul 2025 12:49:09 +0000
ROA not before: Sat 12 Jul 2025 12:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 87.248.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:ae:ac:3c:06:a5:c0:2f:f7:b2:5d:fa:4d:cb:41:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 12 12:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a68c037221290946839dcf1080b7692ae025501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:e8:46:05:49:14:df:ab:6f:0a:20:dc:d9:
05:ab:0f:32:84:35:da:61:55:aa:3a:94:a3:c7:01:
f5:e2:d5:a7:dd:cd:b1:7c:7c:60:2c:84:71:2a:36:
46:29:3f:3f:66:b1:ad:92:8a:ad:fa:9a:f7:5e:f3:
8f:8b:2f:db:52:50:fd:4c:dc:02:cb:7c:a5:ce:48:
f8:3a:e2:45:94:a2:c6:1a:7a:4c:cc:58:14:70:fa:
58:9f:d0:0a:4c:89:93:c3:28:72:c0:5d:13:63:73:
94:1b:c2:1e:e5:56:86:d3:dd:4b:75:7c:cd:7b:67:
b4:4a:c7:7b:36:95:3b:2b:fb:68:4d:ca:e4:c5:6c:
c6:62:92:82:24:f4:aa:2e:ed:ec:ea:cf:eb:ed:a7:
ef:15:6d:60:68:29:ec:3e:cf:0c:e5:a0:99:3f:cb:
29:12:ff:55:33:da:02:77:f1:b4:ec:8b:0c:49:a0:
0e:21:45:f4:1b:e4:c9:74:2a:70:fe:a3:5e:94:0c:
38:39:4f:95:2a:13:08:89:32:03:d8:ab:54:16:75:
2d:75:c9:03:00:fc:1d:75:30:6f:35:9f:c1:2e:1f:
17:ef:75:56:ee:ac:98:eb:a3:77:5a:67:67:b5:ec:
24:49:b1:e3:bf:a8:dd:b6:c1:3d:9a:98:06:0a:ad:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:68:C0:37:22:12:90:94:68:39:DC:F1:08:0B:76:92:AE:02:55:01
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/emjANyISkJRoOdzxCAt2kq4CVQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ab:c1:9d:65:8e:fd:05:5e:b9:97:de:e4:12:ec:a4:23:60:
07:11:a7:e5:2d:ce:2f:2d:9e:79:c8:0f:f1:1f:91:94:bb:91:
f6:10:4a:bb:00:38:9a:f3:07:e6:02:17:9e:51:0d:1f:71:02:
15:1e:1c:33:8d:41:c2:2a:62:56:de:07:99:03:db:ce:0c:1b:
ba:6f:6b:e1:a4:9a:1e:15:8e:87:02:7d:95:10:3e:e5:9f:d4:
93:84:2f:8e:15:61:e7:20:a3:d2:22:85:a1:4a:8e:c1:37:53:
14:d2:2a:21:94:5b:25:a1:0d:9d:58:f7:86:c0:5f:99:98:70:
a5:a5:8c:96:0c:ad:10:70:3c:2c:b0:cd:23:b5:f2:16:8e:c4:
a1:49:8a:6d:35:ca:5f:cf:3a:02:91:03:b9:c8:1f:8c:80:da:
f8:5f:6d:a7:80:b0:db:9f:37:45:87:09:0b:2a:d6:9a:dd:b0:
04:4d:e3:d2:84:34:a3:d3:73:28:f7:b0:5f:61:a8:54:4a:9c:
60:dc:d7:b0:37:2d:7b:ff:e1:d9:ae:64:f7:ed:dc:61:bf:7f:
dc:43:13:a6:d8:bb:e6:c7:ca:75:f1:5b:93:e8:83:d0:62:a1:
93:45:1d:69:68:b7:a9:44:f5:b3:e2:d7:45:47:9a:44:12:b8:
40:25:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:13:49 2025 by rpki-client