Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/7gTMrYdU4UJqJMuQ-xEwFcYs56k.roa
File: 7gTMrYdU4UJqJMuQ-xEwFcYs56k.roa (raw, json)
Hash identifier: XN7N24GTzh5EqhXWpVvNOue+p1kDLNZq3OwkZwsDpXE=
Subject key identifier: EE:04:CC:AD:87:54:E1:42:6A:24:CB:90:FB:11:30:15:C6:2C:E7:A9
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0197D5A2C0DE79EAD09047961BC77D59B2DA
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/7gTMrYdU4UJqJMuQ-xEwFcYs56k.roa
Signing time: Fri 04 Jul 2025 13:31:42 +0000
ROA not before: Fri 04 Jul 2025 13:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.206.2.0/23 maxlen: 23
82.206.4.0/22 maxlen: 24
82.206.8.0/23 maxlen: 24
82.206.16.0/22 maxlen: 22
82.206.16.0/23 maxlen: 23
82.206.18.0/24 maxlen: 24
82.206.72.0/21 maxlen: 21
82.206.80.0/21 maxlen: 21
82.206.80.0/22 maxlen: 24
82.206.84.0/22 maxlen: 24
82.206.88.0/21 maxlen: 21
82.206.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:a2:c0:de:79:ea:d0:90:47:96:1b:c7:7d:59:b2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jul 4 13:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee04ccad8754e1426a24cb90fb113015c62ce7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:22:66:eb:6e:b9:50:93:23:27:1e:da:ad:
31:f4:52:fc:23:75:41:d3:44:5e:85:ce:b1:be:9a:
c2:58:9a:89:e5:d1:49:cb:9a:6d:d6:f5:8e:21:2a:
41:9e:dd:15:b6:1a:e3:1b:d5:9c:bb:02:b9:ee:6e:
22:1f:da:bc:c7:73:50:6c:bd:45:19:b0:5b:ba:5a:
52:96:56:fb:af:1f:47:b0:dc:91:1c:cf:bc:fe:ac:
69:d8:2d:9a:df:6c:3c:cd:40:57:84:76:6a:a0:7d:
a0:8e:04:42:8b:7a:f0:ff:d5:9d:07:7f:6d:a1:40:
d0:6b:be:1f:92:ee:5f:3f:97:62:02:fb:ff:cb:c7:
45:d1:c4:cb:ea:d6:50:d3:07:94:df:6f:81:33:8f:
6a:13:a0:52:3a:59:70:22:76:41:f2:76:3f:80:25:
0a:f0:46:3f:c6:6e:b6:93:1e:0c:7d:e4:b3:6c:39:
3a:83:d1:4b:93:1a:8e:03:06:61:58:9a:89:56:8f:
fa:49:29:ad:d5:7e:9e:6a:fe:6c:e1:56:b5:62:d6:
6c:fc:ea:07:71:64:db:cf:c9:6f:b4:59:c5:7b:01:
77:c3:58:cd:4f:83:0a:a5:24:1f:ff:2d:8c:19:a6:
58:30:9b:fc:86:cd:b6:b0:46:db:06:50:58:cd:c9:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:04:CC:AD:87:54:E1:42:6A:24:CB:90:FB:11:30:15:C6:2C:E7:A9
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/7gTMrYdU4UJqJMuQ-xEwFcYs56k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0-82.206.9.255
82.206.16.0/22
82.206.72.0-82.206.111.255
Signature Algorithm: sha256WithRSAEncryption
77:38:5b:11:37:d8:21:05:65:15:c6:c3:77:98:78:b4:b8:d6:
a5:8e:92:50:dd:d9:5c:fb:22:55:93:45:13:bc:f5:93:42:f1:
6e:f1:13:98:f9:d9:e8:86:d0:b9:97:62:e7:15:3c:5a:be:7a:
88:06:91:ca:31:cc:c7:f7:1e:7f:a9:e6:5c:e4:c9:4c:cd:4e:
2a:a7:14:46:41:17:e0:8a:77:20:0f:23:50:ef:0d:98:dd:cc:
28:92:a1:4c:38:32:2b:5a:d1:25:e3:9a:4a:ba:04:67:da:b6:
21:dd:6e:3f:91:f0:b2:9f:87:ad:7b:89:08:59:29:10:46:dc:
3a:12:3f:73:12:6e:03:2d:c9:40:3a:4c:de:1b:0c:8c:28:bb:
d6:95:8c:46:32:62:01:b3:41:c5:8b:ab:09:d5:67:43:8f:bb:
4b:44:6d:07:fa:24:da:24:d6:74:18:6b:34:a1:14:e7:c9:09:
c8:29:08:cf:de:61:cb:75:07:5a:3d:6d:64:0d:ed:dd:46:7f:
73:ab:cb:b3:84:5d:e6:76:05:45:a9:3e:b5:00:8e:cc:ec:1c:
31:73:cd:a9:db:1a:8b:9e:36:01:5d:9c:09:5c:9a:ab:e5:5b:
a5:55:ea:f6:3c:58:1f:74:af:5c:d9:30:76:dc:ee:76:9a:25:
c1:2d:23:36
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZfVosDeeerQkEeWG8d9WbLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjUwNzA0MTMzMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTA0Y2NhZDg3NTRlMTQyNmEyNGNiOTBmYjExMzAxNWM2MmNlN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAEiZutuuVCTIyce2q0x9FL8I3VB
00Rehc6xvprCWJqJ5dFJy5pt1vWOISpBnt0VthrjG9WcuwK57m4iH9q8x3NQbL1F
GbBbulpSllb7rx9HsNyRHM+8/qxp2C2a32w8zUBXhHZqoH2gjgRCi3rw/9WdB39t
oUDQa74fku5fP5diAvv/y8dF0cTL6tZQ0weU32+BM49qE6BSOllwInZB8nY/gCUK
8EY/xm62kx4MfeSzbDk6g9FLkxqOAwZhWJqJVo/6SSmt1X6eav5s4Va1YtZs/OoH
cWTbz8lvtFnFewF3w1jNT4MKpSQf/y2MGaZYMJv8hs22sEbbBlBYzckM1QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO4EzK2HVOFCaiTLkPsRMBXGLOepMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvN2dUTXJZZFU0VUpxSk11US14RXdGY1lzNTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAFSzgID
BAFSzggDBAJSzhAwDAMEA1LOSAMEBFLOYDANBgkqhkiG9w0BAQsFAAOCAQEAdzhb
ETfYIQVlFcbDd5h4tLjWpY6SUN3ZXPsiVZNFE7z1k0LxbvETmPnZ6IbQuZdi5xU8
Wr56iAaRyjHMx/cef6nmXOTJTM1OKqcURkEX4Ip3IA8jUO8NmN3MKJKhTDgyK1rR
JeOaSroEZ9q2Id1uP5Hwsp+HrXuJCFkpEEbcOhI/cxJuAy3JQDpM3hsMjCi71pWM
RjJiAbNBxYurCdVnQ4+7S0RtB/ok2iTWdBhrNKEU58kJyCkIz95hy3UHWj1tZA3t
3UZ/c6vLs4Rd5nYFRak+tQCOzOwcMXPNqdsai542AV2cCVyaq+VbpVXq9jxYH3Sv
XNkwdtzudpolwS0jNg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 20:58:20 2025 by rpki-client