Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eQB96jPbUk4GF5utM4p2RAbUupI.roa
File: eQB96jPbUk4GF5utM4p2RAbUupI.roa (raw, json)
Hash identifier: mrcM7wbVQPyfVbYQ1q9LKvRJ5zQq39HLLMHBFupETtI=
Subject key identifier: 79:00:7D:EA:33:DB:52:4E:06:17:9B:AD:33:8A:76:44:06:D4:BA:92
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0199E3F12FCC32A2AA615DB2D2E8E284D5D7
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eQB96jPbUk4GF5utM4p2RAbUupI.roa
Signing time: Tue 14 Oct 2025 18:17:38 +0000
ROA not before: Tue 14 Oct 2025 18:17:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214941
IP address blocks: 85.204.125.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:f1:2f:cc:32:a2:aa:61:5d:b2:d2:e8:e2:84:d5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Oct 14 18:17:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79007dea33db524e06179bad338a764406d4ba92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:40:5a:e5:a1:4d:f2:d8:2a:e2:44:d0:07:
6d:a9:27:b8:34:5f:3d:62:b8:04:2f:89:be:57:21:
63:b9:12:a0:88:5d:9c:c5:ea:47:36:d5:74:27:a9:
6a:08:dd:43:a5:99:22:5a:47:35:d6:23:ea:d7:ee:
6b:e3:bd:46:00:aa:2d:10:65:98:79:df:83:98:58:
a8:df:be:fb:dd:35:b5:a7:13:30:73:82:18:af:54:
fc:56:bd:6e:cc:25:2b:a9:60:d6:d9:0b:a4:fd:b9:
64:2b:bc:63:b0:bf:5b:d9:08:2c:a3:52:33:9e:d9:
41:49:f0:61:93:dd:52:14:fa:7d:e9:e9:1f:83:62:
06:67:69:e9:ea:c8:8a:7e:0c:d5:c4:38:6c:fc:b9:
d2:e7:7e:9e:ed:80:19:df:e1:01:9d:4f:28:3c:8c:
ac:62:4d:7d:33:37:cf:8f:63:11:9e:73:48:f0:c4:
4c:35:ea:09:69:8b:7a:52:99:02:e8:e7:fa:a8:d6:
23:63:89:c3:bc:df:81:cd:89:d1:95:71:17:c7:64:
c9:5e:e7:55:84:54:62:b2:57:03:3f:cd:a7:8c:42:
fa:3b:06:75:2f:90:51:11:85:cb:08:19:f1:16:5d:
46:34:85:24:12:90:a7:73:5e:46:5b:77:12:a2:e7:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:7D:EA:33:DB:52:4E:06:17:9B:AD:33:8A:76:44:06:D4:BA:92
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eQB96jPbUk4GF5utM4p2RAbUupI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
89.43.46.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:c2:90:2d:06:87:a1:8e:71:5d:60:df:7d:06:b3:3e:f8:ac:
cb:4e:e4:0e:74:86:eb:cb:8d:0d:e8:64:aa:3c:05:dd:44:9c:
e7:ff:9c:21:25:c8:1f:38:bf:09:fd:97:91:16:94:60:39:58:
a5:fa:9b:88:84:f6:53:a9:e2:15:f9:6b:3b:ae:02:e2:37:69:
f8:8d:8f:b4:34:88:ed:1f:f1:d0:aa:e0:60:82:49:63:a5:09:
0c:76:98:38:27:06:78:0c:82:4c:a8:9d:a1:d6:3f:5f:d7:60:
b5:31:13:df:87:39:63:90:c5:77:b5:80:00:88:08:24:72:10:
69:74:11:98:50:01:e8:a4:f7:a4:09:2d:a7:df:07:ef:b2:ee:
a7:4f:b7:0b:d7:2c:9a:3b:b9:e7:44:9c:76:e3:65:6a:18:89:
94:f5:13:c8:e1:b2:7b:81:50:c4:4e:44:99:77:43:a9:c7:28:
5c:8b:a0:1b:47:44:5c:87:7b:39:2e:76:39:3b:09:5b:4d:42:
de:64:da:dc:54:c5:2b:73:12:cd:06:cd:60:5b:44:d9:a3:37:
db:c3:e5:cd:21:1d:d8:14:ca:af:b4:d6:3d:2a:7d:ef:a5:2d:
e9:88:e3:07:f3:60:b6:e2:7c:ba:a6:90:70:02:04:3c:ee:20:
d8:27:af:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:00 2025 by rpki-client