Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/b7R6JAQa5S0jjYjErJyVA7ERQUs.roa
File: b7R6JAQa5S0jjYjErJyVA7ERQUs.roa (raw, json)
Hash identifier: ZT6m5lWjg9gU85ZTooiiGt4AAwwJFXpnhBt+b7/N/wk=
Subject key identifier: 6F:B4:7A:24:04:1A:E5:2D:23:8D:88:C4:AC:9C:95:03:B1:11:41:4B
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E251BED47B6E68ECC49DB263F12E9650
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/b7R6JAQa5S0jjYjErJyVA7ERQUs.roa
Signing time: Mon 25 Aug 2025 17:41:04 +0000
ROA not before: Mon 25 Aug 2025 17:41:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 85.203.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:51:be:d4:7b:6e:68:ec:c4:9d:b2:63:f1:2e:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:41:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fb47a24041ae52d238d88c4ac9c9503b111414b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:cf:5e:8b:b9:15:ee:29:f0:84:4c:3a:81:
80:ab:a1:60:75:f1:bd:a3:b2:d5:86:84:4d:f3:a0:
a0:0c:1a:b8:37:52:e1:ed:1d:91:35:26:4e:f1:11:
71:56:77:27:61:2b:01:cb:4a:67:2d:0e:e3:9a:c1:
37:6b:ba:4b:db:7d:30:e4:60:16:71:cd:eb:3e:88:
10:ff:61:c3:b7:89:83:8d:0b:bd:6f:3e:a3:99:72:
90:20:6a:0b:85:65:a1:f9:b9:01:1a:58:1e:b6:16:
fd:27:b5:7c:39:48:a7:a6:74:fa:be:3d:1e:f5:56:
6f:46:f2:49:5f:65:39:18:60:e9:d8:5d:0e:57:4f:
12:6f:53:a8:4a:0a:ac:3f:86:24:4a:b3:82:33:4e:
d2:0b:5a:16:cd:ce:a3:0d:bd:81:12:f7:8f:e7:e1:
8b:3f:1c:ae:ce:f9:73:e4:2a:9c:eb:a2:67:02:78:
52:92:d8:33:0e:41:50:23:1f:2e:39:2d:d4:73:8d:
fc:e2:ca:aa:52:35:ec:68:e3:96:0a:80:e1:4b:1d:
04:2e:26:23:ab:02:bd:17:07:de:f9:ee:48:7f:d2:
e6:6d:37:88:71:68:e8:fe:94:29:c0:01:44:52:6c:
a0:cc:7f:e6:0c:59:24:33:30:16:19:8e:62:b3:a1:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B4:7A:24:04:1A:E5:2D:23:8D:88:C4:AC:9C:95:03:B1:11:41:4B
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/b7R6JAQa5S0jjYjErJyVA7ERQUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:1a:95:5b:a1:c7:3e:23:7e:49:5b:f0:2b:07:a4:87:ea:ac:
85:dc:8d:47:a9:8f:6f:42:25:6d:4b:c5:39:ae:9f:76:18:15:
a1:02:00:25:a5:0c:12:80:b4:49:fd:ce:73:52:a6:ca:d3:80:
74:ee:0d:f6:de:33:97:b7:ef:b4:3a:a3:22:3f:48:12:1f:99:
1e:34:15:3a:9c:18:a2:08:e9:73:2d:43:2a:2b:19:b3:ca:fe:
58:e6:bc:dd:4b:91:40:42:15:2b:de:1b:26:69:ef:bd:45:cc:
cb:98:31:6e:66:f3:d0:03:b1:ba:07:72:45:aa:81:e6:32:04:
a9:9e:d7:4f:de:43:f4:17:e8:b7:c9:cb:9a:fc:bc:b3:fa:be:
05:d8:b1:41:13:89:7c:fa:d2:30:64:25:c1:c5:46:39:1a:22:
7f:52:06:ae:52:b1:3f:b5:76:3f:c8:cf:8d:2d:96:dc:4f:2d:
15:70:34:3f:9d:51:ac:64:2e:14:6c:f9:ca:ab:0b:c5:ae:c8:
b2:85:b0:78:fb:86:12:da:36:a4:5c:f3:da:30:a8:3d:52:cd:
9f:cc:b4:14:b4:c7:85:67:72:42:31:a5:d6:85:8e:b9:46:f3:
2b:96:74:a4:8c:7a:fd:ef:4f:81:9f:a0:a7:ef:0c:73:c8:59:
40:72:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:32:35 2025 by rpki-client