Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eRDw7dF55P7wHv9vfdNgciZiits.roa
File: eRDw7dF55P7wHv9vfdNgciZiits.roa (raw, json)
Hash identifier: MdrDuZVh60KAJjt7uD5dLHrckgAME9PGiYJbxXCoOHg=
Subject key identifier: 79:10:F0:ED:D1:79:E4:FE:F0:1E:FF:6F:7D:D3:60:72:26:62:8A:DB
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01985A889622DEE388AC74E974FCE2FDB000
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eRDw7dF55P7wHv9vfdNgciZiits.roa
Signing time: Wed 30 Jul 2025 08:52:37 +0000
ROA not before: Wed 30 Jul 2025 08:52:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 130.255.68.0/22 maxlen: 24
188.215.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:88:96:22:de:e3:88:ac:74:e9:74:fc:e2:fd:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 30 08:52:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7910f0edd179e4fef01eff6f7dd3607226628adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:92:f5:5e:08:60:ca:71:c8:30:d7:6d:30:
b8:2e:b0:c7:d2:1e:29:62:d2:37:3b:a1:f5:5f:bd:
bd:05:74:36:4c:3d:1a:e7:8f:63:9f:0c:99:78:44:
ba:91:07:6b:63:b6:ec:4d:f6:38:fb:30:dc:fa:aa:
aa:6d:83:08:8a:96:ee:63:b3:65:db:c9:12:e4:cc:
65:ca:38:7f:8f:33:97:82:26:43:22:e2:02:e1:17:
76:56:ae:58:18:69:b1:06:3e:5d:59:77:59:1c:16:
31:f1:31:13:39:f3:87:31:6f:3a:10:d3:ac:91:66:
24:50:31:e4:22:ce:d7:0d:18:12:1c:ce:14:62:ed:
a1:b5:18:07:97:40:c9:d6:ca:b0:84:55:50:a5:91:
f8:ab:dd:2a:79:6b:97:08:3c:42:c3:0d:18:b1:06:
0a:34:69:8a:2c:f6:8a:c6:27:59:a6:d0:a4:32:66:
01:c4:5c:4c:3f:f0:3c:27:1d:12:1a:90:46:b7:cc:
52:c2:4f:e0:b3:05:df:91:c1:5b:af:0e:f5:45:ae:
52:7f:a8:16:f3:08:0c:66:bd:7b:f9:8d:4a:01:34:
fd:bc:b2:57:14:f3:2d:fd:8c:10:b0:17:a3:cb:89:
24:3b:60:81:f4:07:f5:b3:e7:f3:58:9b:03:30:84:
c7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:10:F0:ED:D1:79:E4:FE:F0:1E:FF:6F:7D:D3:60:72:26:62:8A:DB
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eRDw7dF55P7wHv9vfdNgciZiits.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.68.0/22
188.215.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:f4:73:b6:b4:9d:9e:33:08:c3:36:56:a3:94:bd:3a:8f:f4:
8c:23:cc:e8:22:c7:4f:0c:85:cd:23:43:84:b6:4b:4a:30:b3:
c3:be:75:84:86:39:8e:30:17:bb:85:d6:07:46:f0:8a:57:48:
a7:a7:54:8f:45:87:a5:2b:a0:ea:78:7c:ee:ce:fe:e1:15:fb:
09:14:27:43:27:8f:08:db:cb:23:be:7f:52:34:18:ce:d3:dd:
e2:7c:6d:3a:ea:4f:a2:01:0a:83:97:94:85:78:2f:b5:44:f2:
3a:56:99:30:f4:79:1c:bf:8f:f2:bc:5c:61:0d:3a:77:0d:f4:
6b:23:76:72:16:88:47:90:3e:64:46:68:a9:c3:59:12:7d:00:
ee:29:6b:dd:4e:31:a2:d5:c1:5f:93:92:e6:2d:5d:f5:39:1d:
a0:76:08:47:ac:8d:1e:85:78:ae:fa:a7:4b:5f:59:94:de:4c:
53:a7:31:98:e8:8d:9c:78:c8:a1:f0:9b:7d:cd:c1:71:09:e1:
2c:dd:d5:77:16:22:d5:8b:3f:ae:4e:1b:91:65:83:72:05:c7:
73:58:52:70:6d:24:28:68:7e:90:d0:67:f3:1b:94:89:59:86:
02:5b:a9:f5:d8:6e:cc:31:7a:7d:1e:03:fe:47:61:35:69:2a:
cc:f2:5e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:36 2025 by rpki-client