Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/7-iGt4e7trCrvhjbqw5ailuotG8.roa
File: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (raw, json)
Hash identifier: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=
Subject key identifier: EF:E8:86:B7:87:BB:B6:B0:AB:BE:18:DB:AB:0E:5A:8A:5B:A8:B4:6F
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 0197EA06934FAC97B3564B302B85AE5B5471
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/7-iGt4e7trCrvhjbqw5ailuotG8.roa
Signing time: Tue 08 Jul 2025 12:33:08 +0000
ROA not before: Tue 08 Jul 2025 12:33:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35575
IP address blocks: 109.175.213.0/24 maxlen: 24
209.42.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:06:93:4f:ac:97:b3:56:4b:30:2b:85:ae:5b:54:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Jul 8 12:33:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe886b787bbb6b0abbe18dbab0e5a8a5ba8b46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:e2:3b:e8:a6:6e:7a:d4:07:fc:11:f6:7e:
48:c1:2a:3d:d7:cc:37:d6:e6:11:fc:7c:35:47:21:
74:5b:29:e3:36:5e:54:ca:d1:27:10:77:9b:fb:8c:
37:6f:2f:e7:fe:ad:b9:ce:75:20:02:f5:1a:d2:9b:
cf:e1:79:b4:9f:e8:a7:4e:3d:a6:f7:90:ce:76:68:
50:8d:4f:92:f5:56:62:78:5b:e7:16:6e:d8:56:80:
2c:18:9c:b4:f9:8b:1f:6d:42:6c:9d:de:05:8e:59:
b5:fa:33:a6:c4:91:cc:aa:71:85:1e:37:ae:ea:8f:
76:0f:7f:42:d2:fe:8d:ed:6e:5b:2d:24:b4:0b:1e:
3b:75:02:9c:40:85:d6:65:7f:b7:84:7a:5b:91:dc:
5d:15:ab:e8:88:4a:ea:be:a3:98:96:a3:fe:3c:2d:
13:cd:17:a1:48:32:b0:a2:a7:67:70:27:63:af:ba:
c4:60:26:42:4d:95:48:52:2e:68:59:39:34:3b:01:
17:88:00:26:23:68:a0:4f:2e:0d:90:87:9f:ec:35:
38:ea:48:b6:51:be:6a:67:15:54:bd:7d:3e:7e:cc:
88:fa:73:02:d7:09:3c:18:ce:12:58:a4:5e:49:a7:
e7:3a:ac:a1:2f:16:ee:14:8a:52:80:41:36:4f:ea:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E8:86:B7:87:BB:B6:B0:AB:BE:18:DB:AB:0E:5A:8A:5B:A8:B4:6F
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/7-iGt4e7trCrvhjbqw5ailuotG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.213.0/24
209.42.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c3:88:91:52:64:a7:e5:3f:47:fe:71:fd:27:58:bc:d8:a9:
4b:b5:d7:27:9f:1c:d0:54:a8:e1:7b:88:4d:e5:53:6c:7c:e4:
72:6b:57:b6:0b:f5:2b:91:e2:8c:f1:c3:ec:fe:f5:fb:63:4a:
46:df:90:60:ea:fb:5c:06:95:b8:c5:f6:d7:13:11:4e:fb:ad:
38:22:b7:d0:4e:ff:19:0c:b4:a7:b7:58:f4:02:5c:11:22:b4:
bb:d0:6e:2e:6c:c5:fa:53:02:4e:9a:97:f6:4d:0c:fd:0d:cc:
ff:f3:3a:73:17:1c:4d:bf:52:a7:2a:8e:89:ef:d3:4b:32:71:
8a:e6:ac:a3:09:e2:26:78:96:de:d0:e4:93:47:d4:4e:6a:49:
c3:6b:48:f5:fd:87:d6:04:42:56:a1:9b:7b:58:18:d3:63:89:
36:72:fb:e6:10:03:ef:9e:95:f5:3c:c3:17:6a:23:62:41:89:
ff:b9:e1:5a:21:2c:99:08:b6:1b:12:fb:d0:ee:a4:b2:44:4b:
de:94:7c:5f:89:ea:8d:5a:6e:bf:c6:d2:f3:d0:6b:30:b7:17:
66:b4:a2:2f:c7:f0:70:2d:81:8c:e5:88:a7:f9:39:9e:fd:c5:
40:87:32:e0:5e:70:e1:32:46:44:03:26:31:dd:70:60:da:50:
c2:fd:39:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZfqBpNPrJezVkswK4WuW1RxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjgxYTk4YjQ4NzAyMGM5ODEwNWQ2MzEzYmNkNjlkZTUw
YWMxN2IwHhcNMjUwNzA4MTIzMzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmU4ODZiNzg3YmJiNmIwYWJiZTE4ZGJhYjBlNWE4YTViYThiNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7niO+imbnrUB/wR9n5IwSo918w3
1uYR/Hw1RyF0WynjNl5UytEnEHeb+4w3by/n/q25znUgAvUa0pvP4Xm0n+inTj2m
95DOdmhQjU+S9VZieFvnFm7YVoAsGJy0+YsfbUJsnd4Fjlm1+jOmxJHMqnGFHjeu
6o92D39C0v6N7W5bLSS0Cx47dQKcQIXWZX+3hHpbkdxdFavoiErqvqOYlqP+PC0T
zRehSDKwoqdncCdjr7rEYCZCTZVIUi5oWTk0OwEXiAAmI2igTy4NkIef7DU46ki2
Ub5qZxVUvX0+fsyI+nMC1wk8GM4SWKReSafnOqyhLxbuFIpSgEE2T+oAtQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO/ohreHu7awq74Y26sOWopbqLRvMB8GA1UdIwQY
MBaAFHT4Gpi0hwIMmBBdYxO81p3lCsF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYt
MDFlNzEzMWFlMWRlLzEvNy1pR3Q0ZTd0ckNydmhqYnF3NWFpbHVvdEc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYtMDFlNzEzMWFlMWRl
LzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAba/VAwQA
0SoCMA0GCSqGSIb3DQEBCwUAA4IBAQBMw4iRUmSn5T9H/nH9J1i82KlLtdcnnxzQ
VKjhe4hN5VNsfORya1e2C/UrkeKM8cPs/vX7Y0pG35Bg6vtcBpW4xfbXExFO+604
IrfQTv8ZDLSnt1j0AlwRIrS70G4ubMX6UwJOmpf2TQz9Dcz/8zpzFxxNv1KnKo6J
79NLMnGK5qyjCeImeJbe0OSTR9ROaknDa0j1/YfWBEJWoZt7WBjTY4k2cvvmEAPv
npX1PMMXaiNiQYn/ueFaISyZCLYbEvvQ7qSyREvelHxfieqNWm6/xtLz0Gswtxdm
tKIvx/BwLYGM5Yin+Tme/cVAhzLgXnDhMkZEAyYx3XBg2lDC/TnM
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:17:29 2025 by rpki-client