Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7DedS6FKqqRxhMQdTMsredCO-ec.roa
File: 7DedS6FKqqRxhMQdTMsredCO-ec.roa (raw, json)
Hash identifier: UwXIiKkoxxbOonWsbkKsBFAofpKEdgb0a8h9Hm8rEFk=
Subject key identifier: EC:37:9D:4B:A1:4A:AA:A4:71:84:C4:1D:4C:CB:2B:79:D0:8E:F9:E7
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019809336C8551EFCA7D233A117762D64DE5
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7DedS6FKqqRxhMQdTMsredCO-ec.roa
Signing time: Mon 14 Jul 2025 13:50:21 +0000
ROA not before: Mon 14 Jul 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 185.114.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:33:6c:85:51:ef:ca:7d:23:3a:11:77:62:d6:4d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 14 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec379d4ba14aaaa47184c41d4ccb2b79d08ef9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:bb:9a:1b:6f:c0:ea:3e:5f:1a:23:3f:95:
34:d8:e0:18:a7:4a:e3:e2:a4:c7:97:d8:df:73:3c:
bf:01:ee:98:f8:e1:41:59:0b:dc:1f:a8:4b:35:ba:
15:b6:c7:0b:79:9c:fd:d7:68:96:c9:3b:de:01:a7:
44:c0:8c:23:af:d5:f2:a6:35:ef:16:d1:12:26:b9:
eb:1a:56:ee:a3:3f:d1:4e:8b:b9:fa:f1:70:00:58:
4b:06:5e:a5:66:45:80:b0:ee:57:db:38:dd:44:66:
ee:b4:3a:51:e2:ef:cc:86:3a:e1:6d:a1:48:7b:ce:
9b:c2:60:a3:cf:5d:9f:e4:b7:71:89:74:0a:78:49:
34:0a:fd:f4:ac:04:32:f3:05:7f:df:81:d9:b1:27:
60:fd:04:6b:3e:36:d5:51:6b:7a:3e:06:0d:15:aa:
e1:7e:18:93:85:f6:44:0e:90:05:75:36:61:dc:a9:
ae:bb:ef:ef:d4:5e:c5:61:0a:e7:ba:2a:f6:8d:4b:
66:8b:a0:53:e0:24:14:68:30:06:5e:7e:31:dc:27:
50:bb:20:38:7d:20:10:65:74:13:83:2b:02:be:47:
01:fe:2e:59:10:53:04:c6:78:c8:5a:c9:f1:e0:f4:
60:e9:6d:97:66:8d:d9:90:d6:99:61:96:24:16:b0:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:37:9D:4B:A1:4A:AA:A4:71:84:C4:1D:4C:CB:2B:79:D0:8E:F9:E7
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7DedS6FKqqRxhMQdTMsredCO-ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:31:ac:a0:cd:52:7b:db:ce:fd:61:9e:93:7c:36:66:9e:92:
87:2c:bc:5d:fb:fa:bd:f3:eb:07:e9:ba:37:b3:f8:b0:4d:27:
00:a5:05:1a:d4:fa:dd:b7:14:1f:08:73:9d:6b:95:bd:62:98:
f4:05:f6:0e:28:d9:e5:2f:1f:3e:83:13:09:ac:fe:fb:f3:2f:
75:c3:00:b1:8c:f2:97:b4:92:05:85:d7:9c:4f:ab:b4:54:2e:
c2:1d:5b:e8:79:d1:25:66:c7:0b:52:6a:b0:11:18:ae:4d:98:
34:95:50:48:89:6b:23:77:2a:86:f4:41:59:77:43:f1:76:45:
f5:e3:7c:a6:c0:1a:55:db:9a:81:d9:44:1f:ae:40:10:b2:f0:
67:05:f8:b7:a6:17:20:8f:42:f2:2d:a2:71:29:06:ec:eb:01:
bf:b0:ab:41:66:73:8e:a9:92:b2:19:84:18:0d:d1:15:47:65:
a4:6e:da:6e:5d:1b:b4:fb:76:0f:56:f4:3d:0b:16:56:74:28:
66:c7:9c:97:47:60:c5:a8:44:37:d5:a6:aa:b5:91:0c:d7:de:
f0:70:87:7f:81:59:ab:b8:38:3b:e3:f1:ce:4e:ff:7d:51:31:
15:22:c9:72:7e:d3:a8:4c:84:c2:48:53:82:37:32:c9:50:67:
98:d3:f6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:04:17 2025 by rpki-client