Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rnzHpD5XxeUp5YJtUlihh6CBwoo.roa
File: rnzHpD5XxeUp5YJtUlihh6CBwoo.roa (raw, json)
Hash identifier: 76ChEFu4A0AXVEzfi32VqxSvHiEcnNNAHSiw0bPPWgo=
Subject key identifier: AE:7C:C7:A4:3E:57:C5:E5:29:E5:82:6D:52:58:A1:87:A0:81:C2:8A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0198EC5C89C88CC3DDE7AEDC5DB81ADD5AFE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rnzHpD5XxeUp5YJtUlihh6CBwoo.roa
Signing time: Wed 27 Aug 2025 16:29:04 +0000
ROA not before: Wed 27 Aug 2025 16:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 213.177.252.0/24 maxlen: 24
213.177.253.0/24 maxlen: 24
213.177.254.0/24 maxlen: 24
213.177.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ec:5c:89:c8:8c:c3:dd:e7:ae:dc:5d:b8:1a:dd:5a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 27 16:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae7cc7a43e57c5e529e5826d5258a187a081c28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:8f:a8:30:b4:d4:a2:7b:4a:07:84:7a:cb:
03:f0:56:cd:17:29:0e:f7:bf:8a:bd:c8:2b:ed:20:
0a:08:69:99:cd:ca:20:dd:5c:25:84:fa:d8:08:7e:
e2:b3:f4:81:1d:35:60:df:9e:16:a5:2c:16:eb:14:
cc:d0:66:ba:5c:85:ae:1b:ab:8b:fe:24:95:96:dc:
25:05:20:54:5f:10:2c:47:88:8f:30:bf:64:98:8a:
b0:94:54:6b:8f:97:f2:14:55:e9:d0:77:eb:56:f6:
26:ad:3e:51:5d:e1:f1:25:f6:64:c8:b4:fd:4b:5e:
f8:23:60:a1:54:86:73:73:53:48:41:58:65:ff:d7:
e9:27:6a:8d:a6:98:48:1e:0f:20:ca:74:d1:d7:df:
55:91:68:de:27:90:cf:72:89:86:9a:76:3a:0f:33:
6e:28:e7:4d:e1:fa:18:7e:b1:87:80:ed:b1:f8:27:
e6:ef:05:87:ef:4c:69:68:2a:da:6b:73:3c:92:72:
fe:8e:fd:ba:34:5c:1d:73:ee:ea:cd:31:4d:71:29:
6d:ed:62:16:3f:2b:cb:f7:07:c9:df:c1:3e:14:64:
43:d8:67:25:7c:c2:7f:a1:c1:2c:9d:61:d3:c5:83:
1c:ec:62:de:0b:11:b6:38:63:0e:a3:80:d9:9c:d4:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:C7:A4:3E:57:C5:E5:29:E5:82:6D:52:58:A1:87:A0:81:C2:8A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rnzHpD5XxeUp5YJtUlihh6CBwoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.252.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:4a:3e:0c:c1:75:a1:61:3e:c8:88:1f:56:2e:f0:ef:89:41:
b7:84:c0:af:07:28:04:a6:2a:90:df:2b:82:53:0d:2f:a0:7d:
3e:f6:15:3c:ec:7f:07:e2:39:37:07:c4:eb:4c:c7:eb:24:bd:
13:65:9c:00:9a:68:e7:11:6a:53:0c:10:ce:26:01:7e:9c:56:
84:da:ac:6f:f4:98:e1:05:60:2e:25:f2:6a:72:83:90:36:49:
15:fc:cb:92:76:4e:fa:a3:db:e2:00:a7:14:29:12:92:3c:6e:
d4:03:67:87:0a:25:71:27:4a:dd:75:d4:6f:19:b3:61:a0:09:
fc:6a:39:aa:68:5e:6c:32:59:e0:10:ed:05:00:89:24:ba:2a:
dc:41:e3:8f:47:5f:0b:d4:b7:dd:fa:ed:8a:f1:24:d9:a2:38:
bd:e5:ac:66:1b:bb:b8:a7:08:0e:f5:26:a5:67:e1:ce:01:94:
ab:58:de:a2:be:48:22:1f:af:38:03:dc:f9:74:49:34:8d:2a:
98:03:f2:45:b4:3c:f2:e1:52:a0:ae:db:59:17:3d:e8:69:97:
56:d9:ad:87:2a:bb:25:46:1f:13:07:de:e2:20:9d:9f:da:c4:
40:13:d9:9b:f0:dc:b6:38:9d:66:9c:38:19:6e:e5:df:7a:f3:
16:99:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:37:24 2025 by rpki-client