Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/w7eix0gnEXQ6zX0g6w8Xi2zwG0o.roa
File: w7eix0gnEXQ6zX0g6w8Xi2zwG0o.roa (raw, json)
Hash identifier: SSGhth6WIDRJqSYTGqY7w3IPURhK8Ce7E1WdpHGR9gY=
Subject key identifier: C3:B7:A2:C7:48:27:11:74:3A:CD:7D:20:EB:0F:17:8B:6C:F0:1B:4A
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 01995650F4164E1FAEA6E6493D4C18B8EC93
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/w7eix0gnEXQ6zX0g6w8Xi2zwG0o.roa
Signing time: Wed 17 Sep 2025 06:16:09 +0000
ROA not before: Wed 17 Sep 2025 06:16:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.76.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:50:f4:16:4e:1f:ae:a6:e6:49:3d:4c:18:b8:ec:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Sep 17 06:16:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3b7a2c7482711743acd7d20eb0f178b6cf01b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:44:e2:cc:72:ee:6e:1b:c2:40:1c:29:fc:
f0:75:7b:27:ca:e0:37:28:7a:7a:36:4d:79:56:bf:
c6:44:31:53:ce:d4:73:84:1e:4c:2a:f3:7c:be:16:
2e:3c:06:a3:3d:8f:7f:fe:18:ca:8e:32:2c:06:0e:
d2:15:d1:df:d1:b0:3d:e7:88:10:00:f5:31:fd:6d:
d4:5d:26:43:65:fb:79:b0:ae:14:ef:e9:07:40:b9:
7f:f3:6f:99:0a:cd:45:fe:11:7f:8b:a4:59:8c:22:
23:c4:56:e2:43:41:63:02:d5:69:c2:d1:ac:17:7a:
02:da:01:30:1d:e2:c6:c9:b3:f5:bc:35:19:36:65:
50:01:bc:59:4e:9d:8d:7b:15:08:b1:82:61:d4:d0:
eb:b6:36:2d:2d:e4:18:43:7e:f1:5a:86:07:d2:8f:
c4:8c:c9:4f:66:49:ab:64:b3:0a:cc:48:8b:bc:43:
ac:de:cf:76:d0:91:0d:57:b8:83:10:b0:9a:9a:6e:
14:72:8e:23:16:12:53:6d:de:38:64:60:73:22:3e:
5f:82:a4:af:4b:6f:cb:07:3a:0d:06:a8:eb:09:19:
47:a6:26:02:ee:a7:79:b3:5d:1d:7d:a2:34:58:8a:
b6:71:05:91:65:dc:1f:1c:38:ca:5b:d1:f6:1a:ff:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B7:A2:C7:48:27:11:74:3A:CD:7D:20:EB:0F:17:8B:6C:F0:1B:4A
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/w7eix0gnEXQ6zX0g6w8Xi2zwG0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.115.0/24
Signature Algorithm: sha256WithRSAEncryption
50:19:9d:49:f0:8a:86:4b:29:0b:52:5d:a2:6c:14:e7:d7:76:
4c:51:40:28:eb:81:34:de:3d:c7:8f:e5:3f:73:ef:23:25:d1:
c8:29:0a:cf:b6:3e:38:70:20:fa:22:7f:86:9a:85:66:11:03:
cd:4b:a4:8b:58:71:d4:91:7a:af:da:c6:11:66:d4:ca:ac:ce:
64:50:6a:50:13:53:55:cb:f8:b7:1b:f9:b9:bf:de:3b:09:c8:
55:4c:53:b3:7c:aa:4e:29:f7:1d:1d:55:02:c6:9d:af:5f:b5:
5f:d9:bd:79:bd:66:93:5f:44:8f:b4:0a:41:3e:dc:e6:6c:33:
62:b4:50:37:9e:3d:76:41:03:ae:72:3d:9f:07:a1:55:3b:96:
b0:52:26:2c:7b:d1:e7:3e:ac:3e:cd:ee:6f:1c:60:09:ab:62:
a2:43:2e:a5:44:fe:84:b0:91:49:4e:a7:56:ec:4f:37:9f:39:
e1:16:e2:22:53:e5:d3:5b:31:42:99:e5:c8:84:4c:68:45:d1:
fe:1a:65:be:e7:48:94:3b:85:20:84:7b:c8:bb:5c:37:7f:69:
2f:cd:87:ec:0f:08:17:c6:4f:55:6d:56:ce:cb:f3:14:5b:60:
b8:c2:12:10:c9:5a:1b:1a:78:76:03:11:c5:65:68:a8:18:cd:
df:e0:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:14:58 2025 by rpki-client