Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_c7ADB2yCG7ygmEJVKO5UMjX1Mg.roa
File: _c7ADB2yCG7ygmEJVKO5UMjX1Mg.roa (raw, json)
Hash identifier: wQQa9Mnur4vqn575tKy3l6q/9fmjlstZd96o2yaRPEI=
Subject key identifier: FD:CE:C0:0C:1D:B2:08:6E:F2:82:61:09:54:A3:B9:50:C8:D7:D4:C8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0195DC8308D8691AC55AF1E5C067FDFA41D9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_c7ADB2yCG7ygmEJVKO5UMjX1Mg.roa
Signing time: Fri 28 Mar 2025 11:28:49 +0000
ROA not before: Fri 28 Mar 2025 11:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:83:08:d8:69:1a:c5:5a:f1:e5:c0:67:fd:fa:41:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 28 11:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdcec00c1db2086ef282610954a3b950c8d7d4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:a4:7b:4f:9b:65:b2:56:a1:82:ae:8c:a7:
8e:ff:a2:df:4e:e8:a2:97:6f:72:92:0d:11:66:dd:
f7:e1:e0:36:1a:be:61:3f:d4:fc:ab:3e:61:10:01:
fa:71:fd:a8:96:3a:2b:fe:b6:1c:52:61:40:2a:8b:
1a:ec:f3:ce:87:f5:f5:a6:e4:d7:2b:44:6b:9b:95:
9f:1b:6a:10:f9:f9:95:9c:d8:54:1a:65:3d:c6:83:
cb:5b:2d:8c:33:1d:36:44:c1:79:e8:e2:b7:78:7e:
73:25:ba:90:8e:fa:97:f1:0e:51:a8:55:b6:08:ce:
82:ac:d9:c3:3c:e8:e0:2c:ef:8d:e3:bf:1d:bf:bd:
d5:7d:ce:bd:c1:a5:65:46:c8:4b:57:8e:a2:6d:37:
e7:26:70:09:86:ba:99:8a:59:98:ad:23:36:dd:bd:
d3:ce:28:46:07:fa:6e:d5:bf:56:56:d7:d8:4b:d5:
5e:fa:3a:f6:97:94:2b:9b:ed:2e:75:01:60:89:d0:
fd:5a:61:b1:99:f3:97:db:28:3c:fc:df:94:f7:e8:
8f:58:0b:42:7f:28:7f:5b:86:ae:81:6e:74:d8:42:
96:39:81:bf:20:6c:a3:60:12:2e:50:73:f2:9e:e8:
85:e8:84:fd:3f:2d:80:1a:d5:4f:a1:a4:4e:12:5b:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:C0:0C:1D:B2:08:6E:F2:82:61:09:54:A3:B9:50:C8:D7:D4:C8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_c7ADB2yCG7ygmEJVKO5UMjX1Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:2d:08:64:ef:d6:60:72:44:66:6b:2b:86:af:32:91:20:3a:
a8:05:c0:1a:01:8b:de:be:3a:f8:d3:b3:10:6b:bb:53:da:60:
68:a4:dc:9e:01:4d:47:56:58:bc:8a:57:5f:14:51:b4:c2:00:
ad:94:82:76:64:b3:f4:b8:4e:34:da:d3:bd:e6:a0:aa:2f:79:
47:85:fb:cb:a3:d5:fc:f6:ab:aa:75:30:7d:7a:be:d1:37:df:
4a:30:c7:c8:5f:8c:d5:8c:b1:bf:9b:bd:2e:97:2a:02:1f:f1:
56:10:fc:26:73:98:89:9b:f0:6e:85:48:6e:4e:de:87:ae:57:
16:ed:ea:10:58:95:19:c2:82:01:ef:ca:ea:ea:94:b2:4f:be:
e0:60:93:da:75:af:27:f1:6a:69:87:fe:cd:f7:a0:4f:6e:f5:
d5:7a:a6:07:17:84:c8:fb:c2:0c:22:6d:70:36:84:bc:b9:54:
6d:1a:59:5d:e8:b2:32:c2:12:46:68:af:bf:91:b2:7e:0a:7f:
6d:3d:fd:b0:e2:63:81:14:12:c5:1d:01:db:f5:35:88:55:fb:
23:e5:10:fb:5a:93:89:0b:2b:47:a7:bd:29:2a:72:6c:3d:29:
98:60:3b:c2:be:73:e6:2e:34:e8:a8:a3:6d:bc:25:09:51:ed:
fc:f7:9c:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZXcgwjYaRrFWvHlwGf9+kHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjUwMzI4MTEyODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGNlYzAwYzFkYjIwODZlZjI4MjYxMDk1NGEzYjk1MGM4ZDdkNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIWke0+bZbJWoYKujKeO/6LfTuii
l29ykg0RZt334eA2Gr5hP9T8qz5hEAH6cf2oljor/rYcUmFAKosa7PPOh/X1puTX
K0Rrm5WfG2oQ+fmVnNhUGmU9xoPLWy2MMx02RMF56OK3eH5zJbqQjvqX8Q5RqFW2
CM6CrNnDPOjgLO+N478dv73Vfc69waVlRshLV46ibTfnJnAJhrqZilmYrSM23b3T
zihGB/pu1b9WVtfYS9Ve+jr2l5Qrm+0udQFgidD9WmGxmfOX2yg8/N+U9+iPWAtC
fyh/W4augW502EKWOYG/IGyjYBIuUHPynuiF6IT9Py2AGtVPoaROEluAowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP3OwAwdsghu8oJhCVSjuVDI19TIMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvX2M3QURCMnlDRzd5Z21FSlZLTzVVTWpYMU1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC2U9oAwQC
2U90MA0GCSqGSIb3DQEBCwUAA4IBAQB9LQhk79ZgckRmayuGrzKRIDqoBcAaAYve
vjr407MQa7tT2mBopNyeAU1HVli8ildfFFG0wgCtlIJ2ZLP0uE402tO95qCqL3lH
hfvLo9X89quqdTB9er7RN99KMMfIX4zVjLG/m70ulyoCH/FWEPwmc5iJm/BuhUhu
Tt6HrlcW7eoQWJUZwoIB78rq6pSyT77gYJPada8n8Wpph/7N96BPbvXVeqYHF4TI
+8IMIm1wNoS8uVRtGlld6LIywhJGaK+/kbJ+Cn9tPf2w4mOBFBLFHQHb9TWIVfsj
5RD7WpOJCytHp70pKnJsPSmYYDvCvnPmLjToqKNtvCUJUe3895z3
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:46:46 2025 by rpki-client