Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/s7O8RqibkuIJPqIcqWYdfMDUjoE.roa
File: s7O8RqibkuIJPqIcqWYdfMDUjoE.roa (raw, json)
Hash identifier: ykWeKMB88xTTAGzMmS7J7k6zzmZsm9kZjUOtWvaQgJI=
Subject key identifier: B3:B3:BC:46:A8:9B:92:E2:09:3E:A2:1C:A9:66:1D:7C:C0:D4:8E:81
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 01980F31A686368653196FB48015A94DFF5B
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/s7O8RqibkuIJPqIcqWYdfMDUjoE.roa
Signing time: Tue 15 Jul 2025 17:46:08 +0000
ROA not before: Tue 15 Jul 2025 17:46:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216422
IP address blocks: 176.97.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0f:31:a6:86:36:86:53:19:6f:b4:80:15:a9:4d:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Jul 15 17:46:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3b3bc46a89b92e2093ea21ca9661d7cc0d48e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:1c:3c:d3:98:36:4c:df:5b:07:b2:21:89:
d8:02:3c:56:76:91:d5:4b:dc:89:f7:85:64:d0:94:
bb:f6:7c:bb:68:f6:4b:27:0f:c1:b7:25:40:e5:9e:
b4:34:fd:77:80:be:ff:2f:06:17:be:70:8c:06:f8:
f5:9b:10:87:6e:18:75:c1:db:7f:d3:41:9b:c8:2e:
5e:19:34:51:16:fc:0d:b9:92:45:6f:84:93:bb:57:
11:bb:84:5d:d0:a5:9a:f0:d5:7c:e7:78:6b:fd:f5:
c2:d0:10:dc:01:4c:a5:4e:bf:a9:d7:06:99:be:8f:
af:26:84:5f:25:de:f7:11:f0:f2:f9:f8:24:ec:8f:
a8:a8:1a:36:3f:18:7b:59:a8:8c:3b:6c:86:c5:9a:
ee:e2:8a:99:80:69:1c:31:04:2a:5c:92:ac:d6:17:
6f:ca:1c:40:45:ab:bc:9d:86:c9:44:05:7c:1e:77:
5f:b7:32:1b:94:33:7e:d9:31:b0:66:66:0d:35:86:
c4:23:f2:35:ce:92:13:0a:85:bd:d9:7b:95:cc:14:
81:67:c6:30:b7:e8:9e:8d:a4:55:41:3f:2c:28:20:
62:92:3f:7f:10:33:2d:60:4c:d0:82:7f:60:e2:3e:
10:30:a4:70:19:77:78:cb:36:5e:63:8a:97:f2:7d:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B3:BC:46:A8:9B:92:E2:09:3E:A2:1C:A9:66:1D:7C:C0:D4:8E:81
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/s7O8RqibkuIJPqIcqWYdfMDUjoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.219.0/24
Signature Algorithm: sha256WithRSAEncryption
75:10:bc:f6:05:c3:36:dc:ec:3f:51:53:14:b8:95:71:8f:48:
89:7f:eb:47:bb:97:56:6c:4e:53:ac:f4:62:b0:63:9d:aa:1e:
91:ac:f4:2a:a5:e7:b6:e0:07:ae:cf:6a:6b:fe:ad:89:9c:85:
0b:89:b6:23:b4:f2:eb:94:12:b0:8d:67:0c:da:21:ca:09:ee:
7e:ff:89:1d:c9:c0:b9:ce:c1:13:43:39:21:2e:00:a2:ad:54:
73:91:c6:1b:c3:6d:91:6d:97:58:fa:5e:a6:09:da:3c:44:57:
be:fc:fb:6f:6b:ca:91:2c:62:ab:a5:bc:dc:1f:80:f5:3d:6f:
ac:3e:00:65:f5:46:69:b4:4f:eb:19:99:7e:92:dd:2c:7e:95:
57:5a:53:2f:c2:df:19:2f:15:d9:c8:7f:04:c7:c6:a1:3b:0f:
76:da:45:c2:96:58:e8:87:13:d6:cd:30:99:97:fe:49:10:03:
de:15:0e:e4:22:33:01:30:0b:f8:80:9e:43:8f:06:81:87:89:
8f:14:84:50:db:8f:f6:66:3d:89:83:cc:9d:bb:da:bd:33:62:
59:7b:58:10:56:0d:0d:37:5c:f2:75:af:d5:52:6f:05:4f:ca:
d0:d0:61:7b:76:d2:7e:fa:7a:f6:0b:5a:b5:73:aa:81:04:4e:
cf:ae:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:58:13 2025 by rpki-client