Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/eKppd7a_Kfev3h8hlRBbQ2NtYUs.roa
File: eKppd7a_Kfev3h8hlRBbQ2NtYUs.roa (raw, json)
Hash identifier: NmXfAvGyB/7+zxwc09ppRHJqfRj2oQfoRY71HPHH6p4=
Subject key identifier: 78:AA:69:77:B6:BF:29:F7:AF:DE:1F:21:95:10:5B:43:63:6D:61:4B
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01989200394F40F986940CFDB00CFB67A676
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/eKppd7a_Kfev3h8hlRBbQ2NtYUs.roa
Signing time: Sun 10 Aug 2025 03:22:24 +0000
ROA not before: Sun 10 Aug 2025 03:22:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 109.122.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:00:39:4f:40:f9:86:94:0c:fd:b0:0c:fb:67:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 10 03:22:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78aa6977b6bf29f7afde1f2195105b43636d614b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:f9:54:c2:5a:27:a7:6a:b0:dd:f9:20:57:
20:e0:bf:4e:ea:6f:24:03:40:52:6b:e5:dd:d6:a3:
30:91:bb:4b:88:c7:ec:f7:26:4e:7a:cf:24:9d:14:
2a:7c:4b:62:6d:cd:25:16:b0:6f:a6:2e:ae:67:c6:
f9:5a:1e:d6:49:87:97:ff:c9:08:ad:62:45:c6:4d:
d7:b1:5f:89:27:00:db:28:d0:21:6b:c7:8a:95:90:
da:6d:0a:fb:4b:5f:02:11:6d:68:c0:7c:c6:90:44:
fb:be:30:ac:23:73:0b:07:8f:7a:ad:b0:bb:43:2a:
40:5f:2d:64:34:26:81:19:e1:de:4e:46:d5:1d:b2:
94:58:15:36:b8:9f:92:e1:56:c6:a8:c9:f2:9a:40:
6e:fa:eb:2a:2e:18:4a:fe:be:39:a4:5b:80:99:fb:
d6:f9:27:b9:1a:6d:3c:4a:8f:56:52:6a:ba:87:ba:
c4:0f:de:d8:49:f6:37:8c:5d:16:25:c9:d0:e8:41:
58:e4:95:fa:64:31:9d:55:61:f7:75:9d:a9:87:c0:
32:12:e1:1c:c0:b3:93:91:d7:86:8d:c5:b1:49:e4:
c2:a6:9b:d0:bf:34:ca:ae:bb:ba:c5:76:6f:a7:b4:
10:a3:22:aa:ca:e0:a1:51:3b:67:7c:dc:73:6c:d8:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AA:69:77:B6:BF:29:F7:AF:DE:1F:21:95:10:5B:43:63:6D:61:4B
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/eKppd7a_Kfev3h8hlRBbQ2NtYUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7b:4d:65:65:1b:45:15:31:84:f4:cb:7c:fe:e1:4a:b7:0a:
a2:25:5a:8c:95:e6:42:84:e1:e0:65:4a:35:5b:e1:ef:15:6b:
4c:86:8c:a3:b8:bf:e7:2b:f8:02:7b:cd:a8:20:0a:2a:84:db:
44:c5:6e:e7:51:5b:d4:be:9e:7d:b6:d2:50:4d:a4:5d:7d:99:
17:99:27:01:7d:e8:75:a7:00:37:68:6e:dc:c9:9d:0a:84:c6:
ea:2b:6a:f4:c8:61:4f:95:c5:63:95:44:d1:6f:c2:f6:c3:ea:
0e:dc:a2:b3:da:f8:3d:2a:b5:9c:9f:83:6d:ea:98:36:b5:54:
12:02:7c:08:89:e1:82:51:4b:3b:3b:74:17:da:e6:ba:26:2d:
1f:ef:f2:66:7c:75:9f:8b:6b:1f:3f:05:63:94:64:43:e2:7d:
8d:52:3c:24:19:67:52:86:7d:5d:c1:04:2a:6d:84:18:bb:af:
91:1c:1c:81:fe:cb:52:67:2d:73:ea:be:30:97:fb:3e:a9:c8:
fe:22:b7:28:f2:fe:00:81:92:b4:74:e1:ea:e9:1d:a8:a0:c1:
2e:8c:35:64:76:5e:24:f0:c9:73:ce:c7:63:94:0b:3d:9c:78:
e6:01:b6:9e:f7:57:9c:18:1e:9b:6b:05:19:9d:95:70:f9:7b:
91:8f:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:46:15 2025 by rpki-client