Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/EIwoL4bBkjzOKKCxiEjmWl3JAZ4.roa
File: EIwoL4bBkjzOKKCxiEjmWl3JAZ4.roa (raw, json)
Hash identifier: wYp626xf3qOxsiGE/nnF8dkz9Rr55Jt6Ig0NRCAEhRY=
Subject key identifier: 10:8C:28:2F:86:C1:92:3C:CE:28:A0:B1:88:48:E6:5A:5D:C9:01:9E
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 0199EDF8A42D282115DEBEF507F5D6E9D7E1
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/EIwoL4bBkjzOKKCxiEjmWl3JAZ4.roa
Signing time: Thu 16 Oct 2025 17:01:59 +0000
ROA not before: Thu 16 Oct 2025 17:01:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff00::/48 maxlen: 48
2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff08::/48 maxlen: 48
2a03:2887:ff09::/48 maxlen: 48
2a03:2887:ff0a::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff20::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff22::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff5a::/48 maxlen: 48
2a03:2887:ff5f::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
2a03:2887:ff69::/48 maxlen: 48
2a03:2887:ff6a::/48 maxlen: 48
2a03:2887:ff70::/48 maxlen: 48
2a03:2887:ff71::/48 maxlen: 48
2a03:2887:ff72::/48 maxlen: 48
2a03:2887:ff73::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:f8:a4:2d:28:21:15:de:be:f5:07:f5:d6:e9:d7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Oct 16 17:01:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=108c282f86c1923cce28a0b18848e65a5dc9019e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:77:87:b2:c3:18:69:80:72:f5:ae:a5:0c:
9d:47:40:1b:d4:39:1d:65:66:04:50:2a:a7:2f:d1:
9e:91:70:0e:25:ed:31:a1:33:e0:68:61:af:58:e3:
ca:83:d3:83:b6:44:96:28:97:77:ab:07:1d:46:a2:
58:25:62:0d:26:2f:b9:1a:54:2b:08:67:77:55:2e:
ba:eb:3c:5a:8c:1f:e0:cd:b5:98:bf:ba:07:bb:92:
01:e5:51:25:9d:7a:21:86:bd:a9:50:8b:53:a4:b0:
34:f1:dc:a4:43:84:71:40:37:eb:1b:76:45:80:a4:
95:5d:7f:ba:c4:e2:5f:28:b0:c6:f2:ba:db:70:0a:
74:28:a3:10:9c:a3:16:8e:76:2a:ac:16:bd:25:f3:
3d:75:1b:36:be:f8:97:59:c7:c8:93:3f:70:fc:2f:
4c:82:31:91:a7:a4:c4:fa:6a:c1:ce:db:92:14:6f:
35:13:b0:75:88:83:f1:d6:58:b9:9a:62:0d:b1:fc:
33:87:a6:5b:0e:87:72:71:5f:f2:c3:8d:ae:e3:24:
76:bc:39:85:98:1b:fd:ee:80:ce:bf:c5:01:2a:4b:
96:ef:62:a9:2e:d7:a1:b0:ae:f9:1f:57:5e:9c:59:
ec:4a:20:74:5d:5f:e1:9a:65:82:26:5d:be:86:3e:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:28:2F:86:C1:92:3C:CE:28:A0:B1:88:48:E6:5A:5D:C9:01:9E
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/EIwoL4bBkjzOKKCxiEjmWl3JAZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff00::/48
2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff5a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff5f::-2a03:2887:ff6a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff70::/46
Signature Algorithm: sha256WithRSAEncryption
0b:a8:20:e2:1b:f3:76:a1:d5:b3:77:cc:2c:f9:54:e8:60:ba:
f6:83:7b:41:2e:a0:e7:67:c3:64:e8:8c:2f:e7:a8:78:90:7a:
7b:ec:ec:87:83:2e:77:a5:e4:ab:bb:42:c2:49:9b:76:d8:5e:
b1:f5:8f:c1:e6:36:6f:9f:63:05:eb:95:c3:ee:ea:36:c7:0b:
8c:75:c2:91:64:81:0e:1a:57:76:1f:fc:a3:dd:d9:1f:87:d0:
f6:fb:93:f4:79:25:45:73:d1:75:d6:b1:aa:0a:0f:90:2c:1b:
43:fc:a6:a6:21:23:75:c4:a9:13:1c:bf:13:d6:44:77:01:e4:
01:0f:6b:da:95:ae:53:1d:7f:35:fb:6e:d3:6f:43:50:e9:91:
aa:99:b5:a9:2c:47:1d:7b:68:68:d1:e3:a5:a8:69:c6:59:28:
bf:45:a9:64:c5:ff:2b:66:4a:6e:88:59:0c:23:cc:7b:71:89:
ed:99:bb:4e:70:fd:d8:e8:fb:79:1e:7a:7a:ab:66:64:a7:e6:
3c:91:53:23:9d:f6:35:31:53:bb:30:79:17:48:dd:00:9d:4f:
3a:63:82:f2:99:d5:6e:93:8e:c9:d8:d8:fd:9b:68:2d:e4:88:
d0:c6:19:86:05:cb:f4:37:45:6f:5c:f7:92:50:ea:e2:bd:b1:
8f:51:f1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:24 2025 by rpki-client