Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/07Dre1kZ1oyyZdumPkKx6qPgfFY.roa
File: 07Dre1kZ1oyyZdumPkKx6qPgfFY.roa (raw, json)
Hash identifier: RR36HXtAKDeJVmCbbh+1KLLcoMylQhGqmF8IKuf7xSg=
Subject key identifier: D3:B0:EB:7B:59:19:D6:8C:B2:65:DB:A6:3E:42:B1:EA:A3:E0:7C:56
Certificate issuer: /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial: 0197BFB1FE9549D8A51CDA90B6CFBFE37507
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/07Dre1kZ1oyyZdumPkKx6qPgfFY.roa
Signing time: Mon 30 Jun 2025 07:16:42 +0000
ROA not before: Mon 30 Jun 2025 07:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210474
IP address blocks: 194.26.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:b1:fe:95:49:d8:a5:1c:da:90:b6:cf:bf:e3:75:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Validity
Not Before: Jun 30 07:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3b0eb7b5919d68cb265dba63e42b1eaa3e07c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:b8:fb:16:46:73:d8:7b:7e:f1:e5:29:8e:
76:74:a5:52:09:f0:1a:94:b9:42:b0:c0:1d:87:4e:
fd:c2:5c:0b:f6:2d:f9:7e:71:e0:34:39:91:57:ff:
32:b6:06:e4:9a:79:5e:2d:ec:19:77:9e:e2:db:99:
bf:f8:a0:17:01:17:a5:5c:9b:ec:04:45:54:33:09:
d4:af:76:05:e1:43:86:f5:2e:25:8b:5e:9f:5b:2b:
5c:c7:1c:17:ae:ff:c9:18:6b:a6:84:d4:b9:e9:10:
67:42:63:85:76:a1:ab:99:e7:73:50:50:65:f3:d7:
65:de:42:36:29:cb:b0:68:33:5c:18:04:89:c0:25:
86:b5:21:c4:9c:09:24:06:fc:64:df:34:6e:07:45:
dd:df:56:e0:7a:80:9b:bb:56:a5:ce:6c:df:f2:12:
b3:c9:e1:30:d1:07:09:41:43:5e:3d:81:24:22:30:
2b:61:d9:1c:71:20:b2:67:d7:f0:36:f6:b6:b7:c5:
e4:1f:17:30:3e:dd:e2:98:a2:01:9a:54:cd:cd:bc:
cd:0c:47:b6:58:0a:a2:2a:d9:de:20:05:1d:79:fc:
27:fb:56:5e:d8:76:61:a7:c2:5e:4d:c7:4d:fb:8b:
19:b3:8a:29:f1:d8:7a:75:9d:af:77:20:ed:a4:4a:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B0:EB:7B:59:19:D6:8C:B2:65:DB:A6:3E:42:B1:EA:A3:E0:7C:56
X509v3 Authority Key Identifier:
keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/07Dre1kZ1oyyZdumPkKx6qPgfFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:6e:2a:8a:11:f2:35:d1:e2:d3:59:8e:c5:9e:eb:e8:80:f8:
5d:5d:89:28:4d:5c:20:5c:77:19:0f:3f:17:5a:b8:37:33:7d:
c1:c2:e7:ea:b0:fa:d4:41:be:ae:c1:41:a6:2d:6c:77:e3:e3:
79:20:6e:c5:a8:4e:4c:46:00:eb:a2:24:58:88:03:20:b1:b2:
20:ac:d9:7e:63:e4:3d:1d:81:ac:a7:74:ab:6e:2c:29:29:be:
31:b0:6d:c3:b0:1f:f1:8b:de:05:48:89:90:64:f4:84:17:99:
f2:1b:5c:72:24:2d:9e:16:db:68:9e:8d:09:5c:cc:be:de:b3:
49:94:b3:d6:72:a9:5e:9f:17:0e:20:84:6d:8b:16:9f:51:fb:
e5:6f:3a:56:7e:9a:af:8d:f5:ce:bb:81:ab:cd:b8:9d:4f:bd:
8b:f3:05:4f:cc:6f:04:74:ab:37:72:85:28:c2:4f:57:b8:7c:
01:fc:c4:0a:6d:fe:8f:28:79:b7:36:9a:9e:0e:12:c4:7d:ab:
87:97:32:16:88:e2:76:04:65:b3:e2:8a:51:ae:bc:1b:f3:da:
89:5f:04:b5:d3:d5:73:56:c5:ae:72:bb:8d:6d:77:38:97:c0:
ef:84:53:28:48:1d:69:42:e4:22:c6:10:2a:2d:4f:ca:b2:7c:
d2:99:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 01:47:03 2025 by rpki-client