Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/eRkgvY74-9CZJr4M-OTHxN4lqmE.roa
File: eRkgvY74-9CZJr4M-OTHxN4lqmE.roa (raw, json)
Hash identifier: AtO77YvaiyWrZoekcdWH7Xc1AuC9D9yjpPvti/VuBs4=
Subject key identifier: 79:19:20:BD:8E:F8:FB:D0:99:26:BE:0C:F8:E4:C7:C4:DE:25:AA:61
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 01989FA235D2EFB8589D3F7E01FEF2372C1E
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/eRkgvY74-9CZJr4M-OTHxN4lqmE.roa
Signing time: Tue 12 Aug 2025 18:54:24 +0000
ROA not before: Tue 12 Aug 2025 18:54:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205733
IP address blocks: 95.170.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a2:35:d2:ef:b8:58:9d:3f:7e:01:fe:f2:37:2c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Aug 12 18:54:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=791920bd8ef8fbd09926be0cf8e4c7c4de25aa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:01:06:58:2b:33:01:2a:bf:18:4c:c4:f0:
7a:80:c3:6c:31:b9:e1:d1:59:6a:7b:fe:a2:99:b0:
42:4f:40:f4:a1:df:45:0e:60:34:f7:ff:31:0b:08:
76:76:24:08:da:cc:5e:5c:5e:95:11:f6:81:1c:97:
81:c6:bb:e0:2f:4f:73:a4:fc:0b:41:c6:9e:08:21:
6f:c7:c6:54:e9:23:1a:9e:67:a0:f7:91:14:f3:46:
63:2b:42:27:49:c7:3f:3c:9f:0b:5e:f6:cf:3f:e8:
e3:cc:ae:ca:f0:bc:ce:d0:27:cc:64:44:dd:bc:3d:
05:bd:ae:03:8c:83:bf:b4:50:19:2e:b2:ae:45:6e:
11:e6:50:e2:e5:b4:1b:91:86:82:17:75:76:ed:67:
3a:53:42:2b:64:ed:8a:c1:36:29:f8:0c:ed:0e:77:
cd:af:d6:01:07:b9:5f:da:3f:3f:40:3a:07:cd:76:
0a:07:81:03:f9:2d:48:e1:31:97:ba:c3:bf:94:68:
56:b3:a4:df:e5:2a:7b:a6:fa:ec:39:a4:bb:57:3c:
2e:f0:d1:bf:e9:3e:6f:8f:0d:a1:cc:a5:e4:27:95:
3a:8c:17:f9:12:63:a1:5e:25:bf:01:4d:3b:0c:f3:
82:24:18:dd:9a:97:a1:ca:28:11:43:25:11:d2:08:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:20:BD:8E:F8:FB:D0:99:26:BE:0C:F8:E4:C7:C4:DE:25:AA:61
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/eRkgvY74-9CZJr4M-OTHxN4lqmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.25.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7d:0d:19:9b:42:81:0b:bf:bb:81:91:a1:6d:3f:7b:3b:e2:
3a:6d:6b:68:bf:53:4f:7a:02:39:1a:42:bc:09:14:08:6e:f5:
e3:36:7c:c8:b4:dc:9b:a7:ca:f1:4d:b6:93:ef:18:b3:5a:9b:
b3:10:55:b2:d7:c6:9f:0b:be:9f:0d:b9:a5:4a:49:eb:3b:a8:
a3:1c:4f:69:df:14:39:ad:e8:01:dd:27:c5:12:07:dd:e3:ce:
94:da:af:eb:7f:94:ed:c9:e6:17:2b:44:50:96:4d:6d:8a:21:
6b:1d:c7:7f:af:f4:30:69:96:1c:3c:79:98:f6:7b:96:c1:d3:
2f:68:64:82:6b:82:a9:85:a5:7c:a2:c7:09:bf:e9:c4:90:53:
31:c6:4f:a7:64:27:0d:e6:1f:21:fe:d7:06:d5:60:62:76:77:
ad:8c:fb:f2:4e:af:66:76:29:c5:cc:d3:cb:34:0f:ff:b5:d3:
0d:88:79:d8:0f:22:a4:4d:b7:3c:73:e2:30:7f:89:26:d8:e5:
53:5b:80:92:f3:aa:dc:e3:a7:d5:c6:9c:94:9f:6b:21:b1:04:
1e:d2:b0:67:59:c6:29:8a:a4:58:84:3c:87:76:c8:c7:8b:f5:
2c:a0:27:56:ac:47:bc:41:3f:80:39:ca:72:df:07:16:57:63:
ce:ad:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:19 2025 by rpki-client