Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/EEy6gJAmhpmEpToeahyxI211nao.roa
File: EEy6gJAmhpmEpToeahyxI211nao.roa (raw, json)
Hash identifier: bt34cvtSMhR5oe2u5pXbiTmmRNH/yvwh2lEhx2KoETw=
Subject key identifier: 10:4C:BA:80:90:26:86:99:84:A5:3A:1E:6A:1C:B1:23:6D:75:9D:AA
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 01989E4DA1F27C8D50ABB986FCAA62485163
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/EEy6gJAmhpmEpToeahyxI211nao.roa
Signing time: Tue 12 Aug 2025 12:42:24 +0000
ROA not before: Tue 12 Aug 2025 12:42:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 31.42.176.0/23 maxlen: 24
37.16.75.0/24 maxlen: 24
91.202.4.0/23 maxlen: 24
91.239.76.0/24 maxlen: 24
213.111.144.0/23 maxlen: 24
213.111.146.0/24 maxlen: 24
213.111.147.0/24 maxlen: 24
213.111.151.0/24 maxlen: 24
213.111.154.0/23 maxlen: 24
213.111.156.0/24 maxlen: 24
2a11:6100::/32 maxlen: 32
2a11:6101::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:4d:a1:f2:7c:8d:50:ab:b9:86:fc:aa:62:48:51:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Aug 12 12:42:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=104cba809026869984a53a1e6a1cb1236d759daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:2e:69:fb:00:c0:05:5e:a6:7c:6e:e7:df:
bb:9d:75:54:cd:6d:14:c1:a5:df:df:68:5b:5f:f6:
5a:91:b5:4c:93:d9:4b:3d:f8:01:c0:7f:e8:f7:57:
fb:1c:e5:cd:e3:fb:74:c1:28:d0:64:77:2c:75:21:
94:fb:31:bc:38:a8:0a:27:99:d7:c6:a8:72:3d:ad:
41:fc:61:81:63:97:a5:3b:0d:d8:90:dc:d7:7d:c3:
b0:7e:9b:56:e2:67:1b:e3:96:14:bc:93:6f:12:ea:
4c:67:c2:1a:0f:24:c5:b9:d8:f1:e3:54:2f:a3:9f:
34:a2:a5:7a:23:25:21:6d:40:ca:f9:19:63:85:5e:
0f:41:1c:d8:82:2b:93:03:9f:2c:dd:21:fa:22:4b:
ba:d7:f4:30:ce:64:f6:d5:2c:ab:8b:c9:72:36:40:
ab:b7:2b:c9:9a:a1:8a:19:78:d1:1a:9a:29:02:08:
bc:00:e2:87:49:40:98:d5:2d:e4:d2:54:2c:02:f6:
40:85:cc:2d:ff:ae:04:b7:95:35:ad:b3:57:a3:a8:
28:76:4a:bc:24:9a:47:5a:3a:79:75:72:66:56:ed:
11:bd:9b:6d:d6:22:c3:18:3b:a1:ed:69:de:74:16:
b1:d3:89:9a:5a:e7:5e:5c:af:d1:d2:5d:2a:6d:44:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4C:BA:80:90:26:86:99:84:A5:3A:1E:6A:1C:B1:23:6D:75:9D:AA
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/EEy6gJAmhpmEpToeahyxI211nao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.176.0/23
37.16.75.0/24
91.202.4.0/23
91.239.76.0/24
213.111.144.0/22
213.111.151.0/24
213.111.154.0-213.111.156.255
IPv6:
2a11:6100::/31
Signature Algorithm: sha256WithRSAEncryption
0a:96:14:4e:b9:89:c9:6b:90:50:b4:a3:ea:0d:54:4f:15:9f:
1a:29:7e:09:3f:9b:88:06:a1:84:a0:2f:f5:78:85:df:de:79:
56:45:43:ce:41:0c:ec:96:8e:9e:62:98:66:5b:02:bf:6d:6e:
7c:00:13:a5:ce:3e:ba:b0:3b:50:2f:01:02:78:b8:7d:bf:44:
a4:73:e6:41:72:3c:49:b1:e3:50:22:07:19:67:f4:16:38:26:
0e:f5:6e:7b:92:ac:ee:e5:91:1f:2b:b6:f6:fc:6b:cc:bf:25:
a6:50:cc:02:cb:24:a4:4f:49:dc:31:c0:ca:4d:1f:d6:81:2a:
70:fd:87:97:95:0d:c0:36:e2:f6:a4:66:09:50:2d:cb:15:cb:
26:d4:63:69:23:b8:ea:48:77:95:2c:ba:42:9e:29:a5:1e:44:
53:63:75:98:7b:85:f8:09:c2:b9:16:bb:81:9a:71:4a:70:5d:
c6:f5:d0:a8:7e:77:ea:f4:36:87:eb:ed:b2:31:e9:6d:60:40:
39:56:24:61:b2:c8:b3:35:73:df:52:c4:cd:dd:0b:9a:da:e9:
d8:90:c5:0a:b2:53:76:7c:89:84:50:e8:a8:d1:92:1e:7f:c4:
73:04:e4:48:2e:5e:e0:16:aa:e0:45:95:b4:75:93:ef:5d:5b:
aa:f3:b7:99
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAZieTaHyfI1Qq7mG/KpiSFFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmN2Q4YTc5YmFkNGY5ODNkMGM0OTg5NWFmNTBlYThhMDNl
YmM3MGQwHhcNMjUwODEyMTI0MjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDRjYmE4MDkwMjY4Njk5ODRhNTNhMWU2YTFjYjEyMzZkNzU5ZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujIuafsAwAVepnxu59+7nXVUzW0U
waXf32hbX/ZakbVMk9lLPfgBwH/o91f7HOXN4/t0wSjQZHcsdSGU+zG8OKgKJ5nX
xqhyPa1B/GGBY5elOw3YkNzXfcOwfptW4mcb45YUvJNvEupMZ8IaDyTFudjx41Qv
o580oqV6IyUhbUDK+RljhV4PQRzYgiuTA58s3SH6Iku61/QwzmT21Syri8lyNkCr
tyvJmqGKGXjRGpopAgi8AOKHSUCY1S3k0lQsAvZAhcwt/64Et5U1rbNXo6godkq8
JJpHWjp5dXJmVu0RvZtt1iLDGDuh7WnedBax04maWudeXK/R0l0qbUQRXQIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFBBMuoCQJoaZhKU6HmocsSNtdZ2qMB8GA1UdIwQY
MBaAFP99inm61PmD0MSYla9Q6ooD68cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2Mt
MDg3M2UzOTk0ZDBlLzEvRUV5NmdKQW1ocG1FcFRvZWFoeXhJMjExbmFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2MtMDg3M2UzOTk0ZDBl
LzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQBHyqwAwQA
JRBLAwQBW8oEAwQAW+9MAwQC1W+QAwQA1W+XMAwDBAHVb5oDBADVb5wwDQQCAAIw
BwMFASoRYQAwDQYJKoZIhvcNAQELBQADggEBAAqWFE65iclrkFC0o+oNVE8Vnxop
fgk/m4gGoYSgL/V4hd/eeVZFQ85BDOyWjp5imGZbAr9tbnwAE6XOPrqwO1AvAQJ4
uH2/RKRz5kFyPEmx41AiBxln9BY4Jg71bnuSrO7lkR8rtvb8a8y/JaZQzALLJKRP
SdwxwMpNH9aBKnD9h5eVDcA24vakZglQLcsVyybUY2kjuOpId5UsukKeKaUeRFNj
dZh7hfgJwrkWu4GacUpwXcb10Kh+d+r0Nofr7bIx6W1gQDlWJGGyyLM1c99SxM3d
C5ra6diQxQqyU3Z8iYRQ6KjRkh5/xHME5EguXuAWquBFlbR1k+9dW6rzt5k=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:52:38 2025 by rpki-client