Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/eSQariLNcOVONXIRBttHL2zmsmA.roa
File: eSQariLNcOVONXIRBttHL2zmsmA.roa (raw, json)
Hash identifier: BSF3F1gyfF9aY0clzhNrKkylzybNRIfIIJkR0Co2kv0=
Subject key identifier: 79:24:1A:AE:22:CD:70:E5:4E:35:72:11:06:DB:47:2F:6C:E6:B2:60
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 01988434596AB98D06946FD8055FB2223960
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/eSQariLNcOVONXIRBttHL2zmsmA.roa
Signing time: Thu 07 Aug 2025 11:04:39 +0000
ROA not before: Thu 07 Aug 2025 11:04:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 185.9.36.0/24 maxlen: 24
185.9.37.0/24 maxlen: 24
185.9.38.0/24 maxlen: 24
185.9.39.0/24 maxlen: 24
185.244.144.0/24 maxlen: 24
185.244.145.0/24 maxlen: 24
185.244.146.0/24 maxlen: 24
185.244.147.0/24 maxlen: 24
217.70.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:34:59:6a:b9:8d:06:94:6f:d8:05:5f:b2:22:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Aug 7 11:04:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79241aae22cd70e54e35721106db472f6ce6b260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:56:46:7b:5c:5f:e3:82:4e:63:14:ed:07:
d9:ad:5e:1d:05:a4:75:58:83:be:27:0c:b9:87:dd:
5b:74:67:98:38:52:cb:1f:a9:e3:16:c4:40:36:50:
b8:f5:bd:d7:75:40:77:4f:41:a5:af:94:5b:cb:9d:
be:b7:a2:07:5d:53:32:3d:e1:aa:98:41:fe:6a:b0:
f5:b6:d0:87:91:6e:5d:c7:57:22:05:0d:67:67:d3:
71:ef:85:80:d0:99:c3:e7:81:37:21:0b:8e:51:83:
3c:29:87:da:6c:bd:e5:36:98:b2:dd:fe:97:16:9b:
a7:f6:5e:3c:10:0a:61:a6:2e:de:a2:7f:12:74:12:
8f:d5:0c:42:31:52:ec:a5:75:a9:ad:bf:39:ae:ff:
01:03:3e:0f:6e:7a:e1:2e:34:8e:ae:a6:54:53:fe:
47:e9:5e:84:94:4e:2b:72:f8:06:1b:44:95:64:59:
fe:fe:ec:c3:5b:86:cf:ea:9e:f2:26:c8:43:f8:a0:
f1:2b:9c:42:e4:e9:fe:43:d0:3b:bc:92:c5:ce:6b:
06:41:0e:04:87:4d:15:16:a1:e3:df:a7:81:8e:a8:
a7:36:3e:26:9a:52:ca:e3:53:71:67:e5:1f:95:0b:
e1:5c:65:e9:75:2f:52:e5:bb:40:7d:7c:74:b2:54:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:24:1A:AE:22:CD:70:E5:4E:35:72:11:06:DB:47:2F:6C:E6:B2:60
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/eSQariLNcOVONXIRBttHL2zmsmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.36.0/22
185.244.144.0/22
217.70.10.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:2d:0b:91:a1:04:23:37:f3:8f:77:9d:2f:e9:30:37:ee:fb:
86:17:be:f6:08:2c:76:13:bb:ce:63:65:9b:77:53:fc:1b:9d:
06:9c:75:10:fb:7f:14:c7:b0:0f:d3:7d:88:11:1b:18:03:4c:
74:23:c1:f3:04:aa:96:94:d1:e5:21:d4:80:2b:48:17:54:fc:
72:fe:10:50:00:3e:47:3c:ad:46:80:ea:93:e2:83:35:62:34:
02:75:65:5c:0d:94:d3:00:d6:73:5b:d6:36:05:bc:5e:6e:45:
9f:ca:cd:ae:90:85:80:c7:6a:b7:8b:59:ea:e0:f9:9c:2e:9c:
45:6c:92:0c:57:cb:5a:44:99:bc:c1:0e:b0:8f:3c:7e:05:d7:
a8:c1:5a:a3:e2:ed:e8:fd:6f:10:d8:ff:57:82:e7:07:ba:23:
31:59:a5:ff:11:75:9c:7d:1f:5f:bc:b1:d8:2b:d2:85:e0:ea:
0e:bf:f8:a6:9e:f0:37:97:06:82:32:57:e7:93:ad:0c:32:0b:
d5:ac:97:b4:98:f5:73:63:f1:66:c8:c9:82:09:9b:48:f1:7f:
34:53:ba:95:da:49:8b:4e:c1:46:a9:41:11:d0:49:bd:21:a6:
d7:41:06:19:37:9a:ea:e3:78:93:59:c9:a9:3d:6c:50:96:f5:
23:c0:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:37 2025 by rpki-client