Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EWzjzTnMnun7dm42dJGmvnyBoZ8.roa
File: EWzjzTnMnun7dm42dJGmvnyBoZ8.roa (raw, json)
Hash identifier: U4usoWTWTzR00G3EMoi9wIZBlXX+/pCkgzxPh9oloGk=
Subject key identifier: 11:6C:E3:CD:39:CC:9E:E9:FB:76:6E:36:74:91:A6:BE:7C:81:A1:9F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019A05D1704184533580A444D597C287C836
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EWzjzTnMnun7dm42dJGmvnyBoZ8.roa
Signing time: Tue 21 Oct 2025 08:10:03 +0000
ROA not before: Tue 21 Oct 2025 08:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207223
IP address blocks: 93.120.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:d1:70:41:84:53:35:80:a4:44:d5:97:c2:87:c8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Oct 21 08:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=116ce3cd39cc9ee9fb766e367491a6be7c81a19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:2d:d1:6b:ac:2c:16:42:de:36:82:dc:44:
cd:0e:86:4c:c3:f4:a8:11:92:c6:2e:a0:b8:51:29:
83:bd:f9:0d:69:05:38:47:99:29:b7:93:93:56:1f:
9a:2d:f6:bb:c8:73:df:38:39:0f:db:be:d7:90:d0:
53:a2:69:39:20:43:f4:db:0e:f3:f5:8c:5e:96:8c:
7e:fb:89:08:6d:f3:2b:67:4e:8f:57:3c:69:bb:3c:
59:ae:03:ed:ac:46:14:30:fd:d1:35:d2:04:2c:6d:
1f:69:14:68:77:c4:69:da:cd:6c:47:2b:9c:f2:0e:
bc:d2:5b:bf:90:75:6f:08:c6:e2:55:58:02:46:2b:
20:68:81:3a:35:bb:c9:ea:c1:be:62:97:df:7a:42:
d7:ad:23:2e:a8:86:5c:49:95:9a:5c:ab:1b:80:f1:
3a:c0:55:b5:1d:de:95:04:3d:ba:e8:43:a9:3a:ad:
3a:3f:59:0f:36:13:7d:d0:38:3d:d3:4a:dd:ee:4b:
2b:3d:65:6b:d0:c5:d7:b1:88:38:37:4c:13:0b:5f:
a0:25:4d:d2:11:71:d7:c6:d8:a8:f8:cb:b5:5e:a7:
28:d7:2d:78:d8:61:8f:99:a1:0c:de:ab:4d:1c:a2:
5d:40:d7:ca:21:5e:1d:4b:66:29:22:44:c8:1f:80:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6C:E3:CD:39:CC:9E:E9:FB:76:6E:36:74:91:A6:BE:7C:81:A1:9F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EWzjzTnMnun7dm42dJGmvnyBoZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b7:f4:a6:3a:d6:14:7d:e3:e5:3f:e1:72:8e:b9:c7:f5:84:
27:91:28:11:e2:42:4c:19:83:2c:7b:bd:df:33:db:ed:f2:8e:
62:a0:1c:aa:67:94:dd:c3:d0:b4:4a:ed:4b:89:59:fb:c1:a9:
79:9d:4a:28:63:41:ff:63:1f:9d:22:3a:e1:30:20:a4:6f:6f:
04:0c:5c:ba:cd:00:ab:e9:56:cc:70:3f:99:28:13:f6:ca:41:
46:48:17:8d:d2:a4:b4:d1:ba:37:4f:e4:72:90:de:c1:9a:69:
aa:ac:a4:41:e7:9d:b9:e5:29:d2:a5:bf:4c:09:12:4a:6f:48:
4d:cf:dc:b2:01:06:e0:8d:85:9a:09:f0:40:51:d7:69:6c:98:
bc:11:d1:1d:3b:8b:91:8f:86:ff:9a:3c:a4:93:70:a3:73:d4:
c2:ff:e4:a0:e8:be:b1:be:dd:b0:df:3e:21:bf:5a:13:fa:db:
d1:40:ee:69:ab:0f:6c:51:5e:be:dc:0b:63:db:8e:57:89:e2:
65:83:bb:50:8a:2e:92:f3:90:41:79:c0:5d:d9:d9:59:c8:89:
a7:f6:7d:cf:10:00:e0:9c:17:74:a7:66:0f:f0:6c:76:1b:73:
89:f4:f3:e2:55:4d:3b:0a:37:c6:f8:5f:4e:f6:c8:4f:9c:df:
6b:71:15:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:51:38 2025 by rpki-client