Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/O7UX4edJ6hYlVYBiS4OZrl7K63A.roa
File: O7UX4edJ6hYlVYBiS4OZrl7K63A.roa (raw, json)
Hash identifier: JtTfDEewy9I+dJGbXPQpyEZ3Mh9m9KglxPSqt+x81BI=
Subject key identifier: 3B:B5:17:E1:E7:49:EA:16:25:55:80:62:4B:83:99:AE:5E:CA:EB:70
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0197BBB70274890C14DFD8F7D4CA6B4551F6
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/O7UX4edJ6hYlVYBiS4OZrl7K63A.roa
Signing time: Sun 29 Jun 2025 12:43:42 +0000
ROA not before: Sun 29 Jun 2025 12:43:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.109.45.0/24 maxlen: 24
193.168.203.0/24 maxlen: 24
207.244.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:b7:02:74:89:0c:14:df:d8:f7:d4:ca:6b:45:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jun 29 12:43:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bb517e1e749ea16255580624b8399ae5ecaeb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:b4:02:d8:28:a0:c7:89:d5:44:0e:29:57:
83:36:ed:9c:f5:ff:cf:87:ad:74:37:6d:37:97:80:
dd:9a:92:25:12:1e:01:09:29:44:ca:0b:89:6e:3a:
a5:b8:cb:c6:3b:ba:19:cc:a9:91:57:13:eb:9f:b1:
0b:42:86:7f:ff:92:83:f7:e0:c1:c3:f5:eb:f9:c6:
89:3a:0f:8b:fe:33:b2:b0:3e:91:3e:8a:67:bb:ed:
68:85:c3:5e:ff:cf:9c:43:30:4b:31:5c:d9:23:f6:
b2:84:b6:b2:98:68:19:7a:06:87:a4:89:34:39:08:
02:af:96:d3:0a:ae:52:5d:ab:10:e8:da:a9:11:a0:
04:ed:a1:75:31:8a:a1:a8:ba:f8:e8:a6:ac:e5:4a:
85:d8:55:21:6c:2a:da:be:97:97:be:29:a3:7a:53:
59:00:e6:d5:7f:3b:46:aa:d7:4d:15:45:3a:a9:64:
73:56:f1:98:6c:af:c6:bf:c1:79:9d:e2:8f:3f:5c:
20:2b:3a:08:55:18:6c:4c:9d:67:91:27:3e:68:51:
e9:99:38:4e:c2:0e:75:35:77:9a:c6:26:45:74:58:
4a:48:5c:89:c0:19:15:44:6a:77:c4:b0:89:e6:67:
60:b7:81:58:c1:d9:b9:be:30:4f:e6:97:64:2c:27:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B5:17:E1:E7:49:EA:16:25:55:80:62:4B:83:99:AE:5E:CA:EB:70
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/O7UX4edJ6hYlVYBiS4OZrl7K63A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.45.0/24
193.168.203.0/24
207.244.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a3:0f:00:9c:17:73:e5:a3:8f:3e:18:ba:83:e5:a6:6c:a8:
e9:97:a1:3e:4d:fd:c4:dd:fa:1b:f2:cf:81:55:4d:95:e2:00:
b7:2d:8b:4d:20:13:a5:a6:c7:c1:60:31:58:cb:f3:75:1b:ae:
d1:8c:41:d1:8c:e0:ea:b7:ee:b5:49:67:f4:30:b9:3d:8b:d1:
79:06:8c:5a:91:9d:99:37:de:18:d9:32:fa:d8:ff:f8:07:9a:
0b:a9:fa:5d:cc:39:df:6f:cb:ec:57:02:66:b1:e5:1d:8a:7a:
b9:b4:24:de:9b:91:b0:ec:44:71:2a:4e:e3:24:20:86:a5:2c:
a1:7d:ce:ee:71:da:b1:64:9e:96:59:2f:cc:3c:d9:84:89:1e:
26:e9:9e:53:5b:8e:d9:9a:df:b5:19:72:1d:51:b2:1d:f3:36:
ca:46:8e:1a:22:b5:ee:01:f3:83:99:8c:8b:18:70:37:b8:24:
54:8a:f5:3a:1a:ac:b3:f7:17:c6:73:aa:04:34:ea:f3:b8:cb:
0b:5a:71:6d:97:d9:39:be:41:7c:40:75:d0:a5:b9:5e:7f:0a:
6d:9b:0e:7d:2c:8a:2a:55:5a:87:4e:55:b8:ab:11:df:3d:1d:
68:3a:1b:01:93:58:f0:52:ad:16:f1:a0:d9:36:ea:05:e7:8e:
ce:bc:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:45:51 2025 by rpki-client