Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/7Pi7IgYh5vJV-DxhZs-iQBFdIZE.roa
File: 7Pi7IgYh5vJV-DxhZs-iQBFdIZE.roa (raw, json)
Hash identifier: mMqEKg8gbbKcixQMFJ/ANrO4EPfcPD9yGb46gyRhR40=
Subject key identifier: EC:F8:BB:22:06:21:E6:F2:55:F8:3C:61:66:CF:A2:40:11:5D:21:91
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 019738B99CD7745BA05E10FE2CD92FE2342E
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/7Pi7IgYh5vJV-DxhZs-iQBFdIZE.roa
Signing time: Wed 04 Jun 2025 02:16:17 +0000
ROA not before: Wed 04 Jun 2025 02:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20738
IP address blocks: 79.170.40.0/21 maxlen: 21
79.170.40.0/24 maxlen: 24
79.170.44.0/24 maxlen: 24
79.170.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:b9:9c:d7:74:5b:a0:5e:10:fe:2c:d9:2f:e2:34:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Jun 4 02:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecf8bb220621e6f255f83c6166cfa240115d2191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:f3:23:f3:d3:1a:d9:33:9d:fb:7c:14:19:
66:f8:84:9a:d3:4c:79:be:18:02:81:fe:1b:84:df:
3d:2e:b2:53:75:6c:14:50:8b:b9:ed:e0:71:25:0a:
b7:7b:e3:76:46:43:48:77:5c:6f:87:b4:ca:4c:62:
39:03:25:eb:b3:a1:19:bf:cc:52:b4:2e:26:c6:41:
70:98:16:cd:f6:ad:11:67:f2:84:09:c0:27:4e:e2:
e5:1a:5c:cc:74:75:a4:74:8c:9b:31:a9:7c:3a:24:
e5:e6:61:49:67:d0:25:6e:0d:2b:f1:a4:23:01:09:
ab:df:22:7b:79:b9:db:ae:85:4d:b2:47:d4:8d:e0:
ae:2c:d4:67:c0:0d:67:b9:6f:fb:82:04:6f:59:e0:
94:70:ee:50:20:75:46:fc:4f:a6:cf:79:09:85:5c:
e8:54:dd:14:f5:a2:8c:e5:82:81:d6:81:6f:4b:f6:
2e:d0:c6:e9:72:54:32:24:2d:1b:5c:b3:3d:c9:16:
4c:b1:e4:de:f8:51:5b:60:64:79:b9:6d:a6:29:58:
3e:30:96:50:92:46:34:b0:cc:78:6c:59:76:84:b4:
e2:22:0b:fe:fa:5f:a2:c5:45:35:b7:c3:53:eb:c1:
e2:3e:8d:53:20:db:a1:e1:0d:8a:4d:31:fc:87:9d:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F8:BB:22:06:21:E6:F2:55:F8:3C:61:66:CF:A2:40:11:5D:21:91
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/7Pi7IgYh5vJV-DxhZs-iQBFdIZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.40.0/21
Signature Algorithm: sha256WithRSAEncryption
59:76:24:37:17:ea:8c:25:a6:10:b1:ec:45:6a:f5:e7:e1:d1:
1e:76:d8:75:d2:35:0b:28:76:04:4c:37:9c:54:69:13:72:0e:
0e:d6:ef:42:e4:d9:b7:59:34:91:ec:18:02:e8:aa:46:38:28:
d7:a9:ec:4d:52:6d:ce:47:b8:d6:fb:ed:50:9a:4c:01:a8:42:
61:f7:db:52:8b:da:3f:43:35:e9:25:58:cf:88:fc:19:8c:55:
ff:7d:a5:65:36:b9:6d:ce:8f:26:0f:8c:96:c7:d9:2a:38:de:
11:55:a2:22:bd:e8:19:61:96:ed:e6:61:4c:91:8b:78:f1:91:
6d:e8:b1:0e:4e:01:2a:2d:6d:7a:84:bb:d7:f4:91:21:12:f2:
88:be:2d:8d:4c:18:f8:0c:83:4f:32:8f:23:77:a4:a5:eb:a7:
8b:07:d8:b7:aa:d0:43:f8:2a:01:a3:2d:70:78:d3:61:66:81:
a9:7a:92:87:f4:78:bc:d9:07:6a:b3:ce:db:8d:5f:49:42:3f:
18:dd:f4:2e:72:9d:dd:68:74:ad:9a:d0:47:a7:98:ce:8e:2b:
13:d5:9f:d4:2f:58:42:6a:95:a3:78:83:e7:fd:f5:84:c7:9f:
29:74:23:0c:9c:61:6f:99:67:17:0b:05:4a:4b:ce:c0:9a:35:
2e:34:24:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc4uZzXdFugXhD+LNkv4jQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0
NTExMDMwHhcNMjUwNjA0MDIxNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2Y4YmIyMjA2MjFlNmYyNTVmODNjNjE2NmNmYTI0MDExNWQyMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDPzI/PTGtkznft8FBlm+ISa00x5
vhgCgf4bhN89LrJTdWwUUIu57eBxJQq3e+N2RkNId1xvh7TKTGI5AyXrs6EZv8xS
tC4mxkFwmBbN9q0RZ/KECcAnTuLlGlzMdHWkdIybMal8OiTl5mFJZ9Albg0r8aQj
AQmr3yJ7ebnbroVNskfUjeCuLNRnwA1nuW/7ggRvWeCUcO5QIHVG/E+mz3kJhVzo
VN0U9aKM5YKB1oFvS/Yu0MbpclQyJC0bXLM9yRZMseTe+FFbYGR5uW2mKVg+MJZQ
kkY0sMx4bFl2hLTiIgv++l+ixUU1t8NT68HiPo1TINuh4Q2KTTH8h511jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOz4uyIGIebyVfg8YWbPokARXSGRMB8GA1UdIwQY
MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt
ZDRkYmQ1ZTIwNGY3LzEvN1BpN0lnWWg1dkpWLUR4aFpzLWlRQkZkSVpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3
LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDT6ooMA0G
CSqGSIb3DQEBCwUAA4IBAQBZdiQ3F+qMJaYQsexFavXn4dEedth10jULKHYETDec
VGkTcg4O1u9C5Nm3WTSR7BgC6KpGOCjXqexNUm3OR7jW++1QmkwBqEJh99tSi9o/
QzXpJVjPiPwZjFX/faVlNrltzo8mD4yWx9kqON4RVaIivegZYZbt5mFMkYt48ZFt
6LEOTgEqLW16hLvX9JEhEvKIvi2NTBj4DINPMo8jd6Sl66eLB9i3qtBD+CoBoy1w
eNNhZoGpepKH9Hi82Qdqs87bjV9JQj8Y3fQucp3daHStmtBHp5jOjisT1Z/UL1hC
apWjeIPn/fWEx58pdCMMnGFvmWcXCwVKS87AmjUuNCRO
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:34:32 2025 by rpki-client