Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0a6_Ejm_7e99MgeuJGsqgGpATuc.roa
File: 0a6_Ejm_7e99MgeuJGsqgGpATuc.roa (raw, json)
Hash identifier: AvKU/EQNDwLa4Hag+0aiIkmLZgW6FzMUj+/Zndnn3tE=
Subject key identifier: D1:AE:BF:12:39:BF:ED:EF:7D:32:07:AE:24:6B:2A:80:6A:40:4E:E7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01983127C1DE99435DDAC5319A1783B66E6A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0a6_Ejm_7e99MgeuJGsqgGpATuc.roa
Signing time: Tue 22 Jul 2025 08:02:25 +0000
ROA not before: Tue 22 Jul 2025 08:02:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 84.21.189.0/24 maxlen: 24
85.209.129.0/24 maxlen: 24
195.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:27:c1:de:99:43:5d:da:c5:31:9a:17:83:b6:6e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 22 08:02:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1aebf1239bfedef7d3207ae246b2a806a404ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:61:0a:a2:34:76:cb:b1:f0:1e:ad:14:0a:
4e:a9:29:9f:f9:0f:cf:a2:d3:94:2a:96:60:e8:c0:
6a:3b:14:a5:93:53:e3:d8:a2:72:a3:85:b8:f4:f3:
cb:0f:cf:10:70:b1:87:d1:cc:a8:ba:53:d7:73:4a:
5f:4d:02:71:e7:31:a2:52:22:cc:94:e2:34:67:95:
73:28:68:e8:7d:62:6b:fd:1f:35:d6:f1:f3:29:d3:
17:2f:14:8a:e1:9e:fc:d3:17:6b:4e:5a:49:58:c0:
df:02:ae:1d:84:d5:e7:5e:eb:d4:05:e8:60:35:3a:
2e:fb:d9:7d:59:d6:07:f5:11:43:8b:79:de:61:89:
84:17:ac:27:bc:c1:47:d3:8b:59:04:71:6e:93:e0:
51:8c:36:8f:fb:2e:c2:78:ee:93:c3:66:e9:3c:68:
59:ca:e6:2c:f4:3f:aa:85:07:c7:f7:06:3b:ef:71:
52:7c:97:28:c7:d3:2d:e0:68:51:82:0b:e6:d0:62:
0f:27:69:24:c0:dd:7f:60:02:9e:b9:4e:bc:ae:1c:
2e:9e:f9:4c:ea:76:42:8a:71:4d:74:30:f4:69:66:
17:76:99:98:fe:ab:bb:f3:23:14:f2:d8:70:c1:c1:
67:14:3b:f6:b9:1e:ba:8c:fb:ed:67:1d:84:fc:cb:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AE:BF:12:39:BF:ED:EF:7D:32:07:AE:24:6B:2A:80:6A:40:4E:E7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0a6_Ejm_7e99MgeuJGsqgGpATuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.189.0/24
85.209.129.0/24
195.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:42:53:ef:6d:d2:5d:c7:df:f2:b8:a4:f9:46:33:36:41:27:
15:15:16:83:4c:51:39:98:e0:69:35:34:32:8c:67:65:82:39:
14:74:5d:46:7e:41:86:bc:a6:79:de:35:d1:46:39:32:fa:c1:
7b:7f:aa:cc:6d:b0:90:67:2b:96:3a:78:4f:36:45:73:89:e4:
fb:49:5c:26:f1:e7:ec:dc:2d:08:51:ed:93:07:85:db:87:a5:
9d:d7:f0:1e:20:8c:eb:87:8c:14:25:56:77:20:b2:ed:14:85:
f4:f8:f3:f5:44:6b:46:8c:81:ad:ac:d2:f6:36:c3:e9:a1:62:
e5:e1:c9:6d:97:3f:46:98:b3:b0:6e:36:5e:59:10:dc:fe:55:
bb:d3:ed:5e:8f:b9:3d:3c:15:db:cb:2c:78:ff:d6:dc:fb:82:
3a:2c:54:0e:d8:6a:97:f0:7c:a3:41:38:5e:a1:1d:72:d9:2d:
3d:56:1f:88:18:ae:c3:ce:f2:fb:bc:d8:19:64:5b:3c:4a:b0:
84:f9:5b:35:e4:fd:21:f5:cd:03:1c:5b:1f:23:3b:00:22:13:
8a:1a:08:94:fa:bc:94:74:11:dc:0f:f4:2d:3d:d2:a2:64:eb:
3b:1b:fe:c9:5a:9c:c7:93:73:30:f7:8e:dc:06:cd:b3:b3:42:
b7:ac:9c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:26:27 2025 by rpki-client