Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/cRKosgSBIX-RK4V0AEwLvPGnWiA.roa
File: cRKosgSBIX-RK4V0AEwLvPGnWiA.roa (raw, json)
Hash identifier: qLiyOi24iOLjlulI1zWhJAemiEwnwSpq2x31VMlWFzo=
Subject key identifier: 71:12:A8:B2:04:81:21:7F:91:2B:85:74:00:4C:0B:BC:F1:A7:5A:20
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 019A016971A2D135E441AD907AE359E7EF4B
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/cRKosgSBIX-RK4V0AEwLvPGnWiA.roa
Signing time: Mon 20 Oct 2025 11:37:58 +0000
ROA not before: Mon 20 Oct 2025 11:37:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50599
IP address blocks: 212.7.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:69:71:a2:d1:35:e4:41:ad:90:7a:e3:59:e7:ef:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Oct 20 11:37:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7112a8b20481217f912b8574004c0bbcf1a75a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:0c:ed:52:bd:3d:c9:80:cc:fa:95:a4:90:
8f:b5:0b:5b:f2:91:14:22:32:12:17:b9:2c:7d:b3:
24:e7:ab:32:08:fa:c4:7b:6e:e5:30:54:90:2d:47:
3c:b8:fb:4a:2e:d2:92:00:d3:16:8c:62:c3:dd:d0:
00:7e:8e:99:29:81:e7:28:82:9b:6f:1e:f2:51:50:
17:a4:6a:59:37:9b:37:c1:1c:5d:a4:9a:47:34:d2:
df:39:3b:0e:71:ab:8f:b5:47:03:2c:f0:ca:5f:fd:
0d:9a:76:fd:28:73:5f:36:6d:b2:b3:42:70:6b:6c:
c3:b1:54:d8:e1:15:e9:6b:e1:8e:a8:57:96:e5:c4:
36:c5:21:ef:c5:c3:16:e6:f1:3d:89:56:cf:9e:29:
1e:9e:2f:d7:8c:e4:1b:71:2e:4f:98:99:f6:80:1a:
56:3a:e5:11:6e:5a:c8:14:3c:ba:aa:64:cf:ea:83:
37:c0:af:6d:43:fd:ce:03:7e:2a:dd:32:8c:a0:ab:
c8:8d:b1:ef:5a:2b:7a:1c:e6:50:7a:30:93:29:a1:
62:74:ca:f7:a1:35:a9:aa:33:c6:cd:6d:4d:fc:01:
f9:dc:4e:18:3e:5e:58:4c:b0:ef:df:0c:11:83:60:
82:70:71:56:a1:bb:02:48:b3:a0:72:f1:c8:e6:05:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:12:A8:B2:04:81:21:7F:91:2B:85:74:00:4C:0B:BC:F1:A7:5A:20
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/cRKosgSBIX-RK4V0AEwLvPGnWiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.7.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a6:fe:a7:e1:34:5f:91:b7:a7:03:0e:cc:fe:1e:ee:a9:e6:
86:da:18:1c:44:e9:de:1e:e6:82:ed:60:80:0e:26:2f:64:b8:
f9:1e:48:ba:38:76:75:e4:45:c9:77:8f:68:7b:09:07:94:34:
d4:cf:ed:f1:b9:ed:bf:74:98:9b:0b:20:1a:ce:e7:a2:85:4d:
b4:f8:07:42:62:91:c3:ee:80:1d:de:df:38:62:10:24:05:e5:
21:d9:ed:c2:e6:e1:81:bc:27:90:b0:f3:10:c1:b7:be:29:56:
06:b7:7f:02:4b:96:05:76:61:8c:76:07:06:fb:4a:9c:23:c1:
13:e8:71:d7:9d:b6:ce:d6:48:ed:c0:88:91:c4:7f:93:80:40:
c7:30:0e:1a:56:61:45:8a:e6:31:3e:01:27:40:62:f5:f2:b8:
87:7d:a5:5d:77:f8:e3:9b:05:fd:41:63:b9:08:58:6d:29:b9:
87:73:35:21:73:d5:c3:eb:14:63:8f:e8:31:24:a9:c6:2e:12:
27:62:d0:89:a5:1f:e1:13:d2:55:36:2a:f6:10:58:29:ba:22:
a7:10:52:83:44:76:a2:a3:37:cb:68:f2:26:9b:ee:79:21:3f:
9c:6a:77:fa:45:d4:99:a2:9a:f3:a4:57:3b:dd:cf:e6:06:24:
56:5a:b3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:04:02 2025 by rpki-client