Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/7dyKoqU_uGFj2QfjYZs5zvdLxIY.roa
File: 7dyKoqU_uGFj2QfjYZs5zvdLxIY.roa (raw, json)
Hash identifier: 0WWTmxFxwFqsreBzZrF6paaxfc63rbHSArefR/ThQ8k=
Subject key identifier: ED:DC:8A:A2:A5:3F:B8:61:63:D9:07:E3:61:9B:39:CE:F7:4B:C4:86
Certificate issuer: /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial: 0199044E7CB2E1E21CBCB344B8816C637E61
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/7dyKoqU_uGFj2QfjYZs5zvdLxIY.roa
Signing time: Mon 01 Sep 2025 08:04:36 +0000
ROA not before: Mon 01 Sep 2025 08:04:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210685
IP address blocks: 91.217.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:4e:7c:b2:e1:e2:1c:bc:b3:44:b8:81:6c:63:7e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Validity
Not Before: Sep 1 08:04:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eddc8aa2a53fb86163d907e3619b39cef74bc486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:49:78:1d:ec:45:39:11:5e:d0:39:bd:d1:
89:db:34:9f:97:eb:d6:25:65:3b:a4:ae:57:73:2b:
b7:0c:af:49:2e:16:51:85:18:27:b5:df:8b:ca:f6:
c9:c2:c8:69:27:3b:52:05:ad:e9:04:67:14:65:9b:
e7:53:1f:dd:d5:46:3b:ff:01:8f:8d:ef:7d:fc:1c:
1f:54:77:8f:fd:97:6b:b2:3d:a2:93:35:65:f5:5f:
ce:86:24:f0:2f:b9:3d:20:1c:f1:2b:9f:75:32:d4:
89:85:b9:2f:18:20:5b:71:e9:aa:bb:77:81:05:03:
8d:14:0a:f4:d7:09:bb:87:fd:d7:20:0f:68:ed:06:
23:f5:11:8a:53:22:93:00:74:05:fd:74:6f:ef:53:
39:d8:b2:8e:d5:08:97:13:1a:b0:fc:3d:db:94:53:
a9:d7:d3:1e:b1:89:bc:b4:54:a7:e5:c1:5f:c4:75:
11:38:75:67:aa:39:4f:aa:72:1b:88:19:df:e8:20:
a3:38:25:31:f5:4a:4b:92:85:bc:f2:0b:64:38:55:
d4:06:39:08:9a:46:35:80:ff:f4:5e:f1:84:93:a7:
ac:07:1f:3b:7a:d0:1a:46:e5:6f:a7:30:ec:ca:c3:
c8:14:7b:d5:ea:d7:e8:ac:9d:44:55:0a:88:49:b3:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DC:8A:A2:A5:3F:B8:61:63:D9:07:E3:61:9B:39:CE:F7:4B:C4:86
X509v3 Authority Key Identifier:
keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/7dyKoqU_uGFj2QfjYZs5zvdLxIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:49:01:cc:b2:a8:06:d5:ca:bf:4c:94:49:e0:9d:5c:26:09:
7c:e1:a4:19:ab:63:c5:19:f7:5c:01:6e:d4:03:64:bf:4b:07:
00:ec:2a:5c:e2:68:5e:6d:4d:89:dc:6f:8e:f9:73:dc:6c:db:
e2:99:a7:50:cb:a8:39:81:62:e7:32:3e:bf:fb:77:d8:2a:b6:
22:30:33:71:52:36:61:d3:fe:34:c3:b1:85:07:4f:bb:99:e9:
77:90:93:41:93:d2:5a:b1:aa:89:0e:9f:ef:10:c3:9b:aa:50:
71:5a:11:3c:49:c8:88:cf:d7:f4:ff:13:7b:de:04:58:70:58:
40:28:4c:47:4b:c2:60:25:e1:25:70:7c:1b:48:66:9a:c5:fa:
bd:59:79:b6:c8:26:1f:26:1d:5c:ec:6a:f7:be:02:81:2d:85:
e6:26:1a:c7:15:c3:68:aa:58:14:9d:f4:18:a3:20:21:a6:36:
92:5d:ed:62:04:89:3b:d0:b3:37:0b:60:d0:2a:27:88:84:85:
e4:18:15:89:20:12:14:99:0e:28:2e:7e:42:57:a9:bc:07:0e:
0f:87:cc:11:59:98:17:b9:7e:d5:8a:21:04:e6:67:b6:77:39:
34:a0:23:4a:f8:54:be:62:b9:e5:9d:93:05:1b:bb:7c:40:87:
a2:6f:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:18:17 2025 by rpki-client