Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/7TL45FNYtrXr6cYEMzlJ0xM19tA.roa
File: 7TL45FNYtrXr6cYEMzlJ0xM19tA.roa (raw, json)
Hash identifier: AkAdvmK+KKLZ/hW3c+GoX6JUBJ/Tn/r+Hpuz7kRNXhI=
Subject key identifier: ED:32:F8:E4:53:58:B6:B5:EB:E9:C6:04:33:39:49:D3:13:35:F6:D0
Certificate issuer: /CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Certificate serial: 0198E0D1376AC8EA9AFA390B98A582FED5E2
Authority key identifier: 85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/7TL45FNYtrXr6cYEMzlJ0xM19tA.roa
Signing time: Mon 25 Aug 2025 10:41:04 +0000
ROA not before: Mon 25 Aug 2025 10:41:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44383
IP address blocks: 91.201.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:d1:37:6a:c8:ea:9a:fa:39:0b:98:a5:82:fe:d5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Validity
Not Before: Aug 25 10:41:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed32f8e45358b6b5ebe9c604333949d31335f6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:50:fc:90:5a:0e:f8:dc:47:08:27:ec:af:
4d:0f:4a:93:c7:42:02:6f:a1:f6:d4:d0:9b:88:f2:
11:ee:e6:9f:a9:ba:56:aa:a4:cc:9d:77:61:2f:3b:
0f:ee:25:49:f5:a3:a3:f1:d7:8e:26:a3:ce:07:e7:
62:3a:7a:fe:aa:95:45:49:10:5a:b9:b0:a8:d0:23:
df:dc:18:ab:4d:47:a6:c4:13:94:be:6e:4f:ff:f7:
cb:33:e6:c6:a0:aa:25:14:65:12:a1:8c:99:de:33:
37:7e:85:7d:10:50:32:fa:db:b7:6d:f0:bd:b1:ee:
91:71:95:6e:7a:ee:e0:ea:dc:27:95:e8:5c:29:ca:
09:31:4b:4d:e4:d9:9a:34:93:99:ff:d1:38:8b:68:
c1:fb:6c:b4:12:d4:e3:9d:45:f6:a8:d1:bb:1d:11:
88:94:a3:a2:f4:2d:db:b6:e2:91:5c:1e:35:bb:bd:
ee:17:98:b8:db:88:1b:32:df:21:fd:10:56:07:c1:
1d:ea:93:54:fc:f9:a4:88:b3:d9:f0:b7:7a:1c:99:
47:1c:01:b0:68:fb:f4:f1:bf:f7:12:34:9e:b0:3d:
4d:31:f2:fb:db:bf:a8:f3:6e:a4:02:1e:ce:2c:95:
2c:bc:e4:0c:6c:07:eb:5b:b4:3d:61:8c:5c:ad:c5:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:32:F8:E4:53:58:B6:B5:EB:E9:C6:04:33:39:49:D3:13:35:F6:D0
X509v3 Authority Key Identifier:
keyid:85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/7TL45FNYtrXr6cYEMzlJ0xM19tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:13:14:2b:0a:0a:9d:d9:8f:0f:66:96:d6:c4:e6:14:ce:79:
e9:77:37:12:f5:0d:d7:1d:dd:e1:42:6b:3d:3f:db:91:62:fc:
08:b6:fb:62:26:62:af:ce:b8:c3:e9:ae:2d:f9:fd:40:d8:f6:
70:e7:fe:6c:48:8d:66:4e:47:69:9d:10:49:81:34:ee:0a:b5:
e1:d8:f5:48:e7:60:1b:f4:0e:61:ab:93:c2:e7:51:71:ff:2d:
46:08:fe:d6:f5:20:12:92:71:7a:e5:d9:4f:f4:3f:7f:d5:5f:
9e:8b:8d:a9:f0:15:a8:b1:30:b0:c6:84:42:50:d4:20:bf:56:
aa:fa:ba:9f:d4:a9:86:43:29:00:de:01:ad:73:0d:06:fe:70:
eb:36:1f:1b:dc:5f:9e:22:5c:6c:0a:56:be:b4:8e:52:4c:c0:
16:39:39:20:c0:24:c8:c0:04:29:83:d9:e6:e6:59:30:3c:94:
9b:c1:e3:59:f6:62:56:6c:3c:02:e9:51:9a:e0:86:d4:26:86:
d4:b2:aa:f0:73:72:d0:a4:c8:c2:0a:82:6e:52:7b:f9:8a:4e:
82:82:9f:f9:b9:fc:00:fa:86:96:34:02:87:f7:10:45:02:96:
5f:87:1d:51:e8:ea:95:c3:1c:e9:14:50:5e:0a:ab:dd:d7:06:
bf:f3:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:03 2025 by rpki-client