Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ej6zm_VlTl4nwRocCn1cI9bhjxw.roa
File: Ej6zm_VlTl4nwRocCn1cI9bhjxw.roa (raw, json)
Hash identifier: VIgO42vTHOvWRkr3aVeGtgBHsSCDWMF0tp8+hAZPRu0=
Subject key identifier: 12:3E:B3:9B:F5:65:4E:5E:27:C1:1A:1C:0A:7D:5C:23:D6:E1:8F:1C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0198BBD4D64CE89D660925E11799A4FC56C3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ej6zm_VlTl4nwRocCn1cI9bhjxw.roa
Signing time: Mon 18 Aug 2025 06:19:04 +0000
ROA not before: Mon 18 Aug 2025 06:19:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207636
IP address blocks: 85.120.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bb:d4:d6:4c:e8:9d:66:09:25:e1:17:99:a4:fc:56:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 18 06:19:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=123eb39bf5654e5e27c11a1c0a7d5c23d6e18f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:96:89:b8:5f:42:05:6b:a3:de:bb:fa:98:
3d:7a:cb:ac:7e:69:2b:ee:ea:82:aa:18:80:50:9c:
6a:b0:94:a2:94:57:43:86:1a:24:91:a6:a3:e5:b9:
63:46:24:69:26:30:83:29:17:33:f0:e1:6c:46:79:
17:18:7d:45:bb:bf:20:d2:29:ae:57:1f:a0:f3:23:
38:7a:6f:dd:38:bb:00:f2:21:cc:ce:f0:68:90:d0:
6a:39:84:f2:43:5a:01:24:f0:53:e0:41:b5:93:e2:
e7:7d:7b:c3:91:0d:ec:48:d4:63:20:f4:20:c4:8c:
c0:56:ea:ba:49:56:d6:9c:fc:1c:ba:a6:0e:66:a3:
98:31:fe:f9:30:31:af:a4:3a:b9:dd:df:9e:65:d6:
90:27:d8:e5:32:fe:41:f3:8d:3c:de:9f:5e:5c:1e:
8d:51:6d:81:39:44:f9:52:55:00:17:b1:87:02:32:
a2:c6:11:b8:8d:31:47:0a:6c:3c:10:9b:bd:53:1e:
0e:5d:0b:8a:16:17:9f:7d:fc:22:76:fb:eb:b9:ea:
93:d9:c5:ff:d0:29:23:47:e8:51:a5:8c:8a:a5:e5:
fc:c6:12:48:d9:f9:89:88:0d:99:cf:38:16:00:7e:
9e:84:69:0e:ff:14:08:67:66:ad:b8:3a:be:48:67:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3E:B3:9B:F5:65:4E:5E:27:C1:1A:1C:0A:7D:5C:23:D6:E1:8F:1C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ej6zm_VlTl4nwRocCn1cI9bhjxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.80.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:8a:86:5f:89:7c:0b:b6:67:61:00:df:d6:82:0f:34:14:a0:
47:e3:d3:e3:e7:64:f0:b0:d0:61:e3:ad:3e:2b:63:24:64:37:
fb:43:21:d2:aa:f7:b0:e8:0e:30:09:64:e7:11:0e:ec:e0:97:
d8:31:a6:11:4a:65:cb:4c:63:ef:ad:82:2e:a4:11:93:2c:98:
39:97:27:1c:88:e8:a6:bc:46:48:ef:c5:72:69:b5:ea:8a:37:
9a:dc:22:63:dd:9f:e9:d0:e1:2f:2f:81:5c:d7:81:66:87:ac:
87:7c:42:df:61:bc:c5:11:02:2d:85:32:cb:ae:f4:c1:c3:f4:
cb:5f:3b:4b:62:61:bc:5c:ca:17:e2:60:ea:e9:6b:ee:3c:39:
a2:52:43:b6:a8:6a:60:2f:32:e3:f5:59:1b:d8:7e:1b:e8:66:
e0:0a:2d:5f:05:81:4a:c2:38:94:76:34:b2:24:d8:3d:03:c4:
12:cc:d0:04:7b:04:42:09:e8:e8:7d:2c:e2:3a:a5:62:3d:ff:
bb:99:74:e9:9f:8d:fa:24:39:b7:44:ec:6a:07:64:18:58:36:
c5:ca:8e:b7:4c:de:22:c1:05:74:a7:87:47:3d:6a:14:0b:3b:
a3:92:32:6b:5e:b2:6e:b1:1b:3f:7c:c2:47:c8:b5:7d:ac:a9:
3f:80:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:16 2025 by rpki-client