Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7S2BaJTJW6yeaPDCucj1SZAJFG4.roa
File: 7S2BaJTJW6yeaPDCucj1SZAJFG4.roa (raw, json)
Hash identifier: Wf9aBK34qXhZzbB9/pJCSiZRspnt8u9OBO9lGpUw7VA=
Subject key identifier: ED:2D:81:68:94:C9:5B:AC:9E:68:F0:C2:B9:C8:F5:49:90:09:14:6E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019A11D1F376013BB50FF86BA3C80EA8B854
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7S2BaJTJW6yeaPDCucj1SZAJFG4.roa
Signing time: Thu 23 Oct 2025 16:06:03 +0000
ROA not before: Thu 23 Oct 2025 16:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215351
IP address blocks: 213.176.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:d1:f3:76:01:3b:b5:0f:f8:6b:a3:c8:0e:a8:b8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 23 16:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed2d816894c95bac9e68f0c2b9c8f5499009146e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:11:91:cd:a4:ed:21:15:71:8f:e0:9f:b6:
fe:aa:50:4a:e4:f3:f0:52:7b:57:1d:b6:91:63:55:
dd:4a:da:e5:15:0f:4d:96:c9:3f:92:ff:f1:2f:54:
30:75:46:b4:7e:75:7a:91:d6:0b:69:a7:9b:72:cf:
8d:05:76:64:90:94:96:09:8a:7b:a6:f3:2c:bb:f3:
5b:ac:3e:cd:dc:ad:92:f6:ae:bf:93:47:d7:94:68:
09:81:20:55:d1:2f:ae:ab:be:53:b8:6c:74:e8:c0:
d1:8f:c7:a8:67:47:c2:41:90:5f:04:90:d1:2c:eb:
88:81:a7:44:6b:b3:13:eb:da:a4:55:e0:ac:cc:45:
6d:87:21:5c:87:6a:aa:26:0c:f0:f2:6a:d2:58:77:
0f:f0:6a:5f:44:97:1d:9b:d3:2d:9c:6d:b0:9f:79:
06:25:f4:46:f8:a0:15:e7:1f:ba:c0:2d:c2:8b:91:
86:4a:3f:22:c9:e1:41:7b:a1:aa:6d:4c:51:dd:e2:
dd:75:9f:1d:ee:fc:66:ce:86:eb:17:c0:66:52:4a:
91:5b:e0:db:51:24:80:58:a7:bc:00:dd:9d:04:23:
0a:4f:0d:02:8d:be:91:d9:e3:39:cb:78:13:bc:22:
17:db:93:f4:87:b1:ff:69:5d:fd:cb:a4:8b:0b:87:
14:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2D:81:68:94:C9:5B:AC:9E:68:F0:C2:B9:C8:F5:49:90:09:14:6E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7S2BaJTJW6yeaPDCucj1SZAJFG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d9:65:14:16:96:9a:d9:8c:ca:1c:23:8a:60:30:8f:cd:ae:
68:b0:2a:48:90:d5:55:c7:21:be:52:25:28:7d:d2:fb:23:1c:
05:20:1c:eb:57:44:d7:3e:3c:44:a9:9e:25:02:66:d7:c5:c6:
35:99:3d:f5:45:a7:a0:d2:8d:3e:8b:07:b3:e9:9c:07:c1:ef:
1f:33:f3:76:d5:06:02:d8:22:9c:81:ce:33:85:0e:cc:b8:b9:
de:8f:e4:dc:c3:ca:5f:11:ae:1f:fe:87:54:55:24:e7:d6:9f:
36:9a:30:ee:35:12:a3:9c:cc:0c:a3:a0:44:64:64:49:d1:1d:
ca:3b:5b:41:ef:3c:92:bb:02:43:af:45:e2:14:ec:45:11:83:
fa:d0:9a:e8:44:b9:f2:d8:c4:09:54:c9:13:02:43:19:98:2e:
9a:f6:cb:79:cc:37:bc:4f:73:77:87:11:db:e5:d3:18:6b:26:
ea:f8:36:fb:fd:f3:b9:de:6a:8d:b3:97:cf:15:71:96:6f:a8:
0a:1a:17:af:c0:13:c1:e7:18:a9:e4:28:cd:b8:d5:56:71:82:
e2:64:8c:07:3e:ad:d7:98:b2:96:d4:96:d2:be:f9:d4:5a:c7:
e1:96:6a:b1:41:ac:7b:f8:4e:08:e6:a4:2a:9f:f6:5c:ea:29:
1f:36:b7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:16:03 2025 by rpki-client