Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/EUM1aJwtUikB8Y65_LlAJqn1yzA.roa
File: EUM1aJwtUikB8Y65_LlAJqn1yzA.roa (raw, json)
Hash identifier: sBgbUqT6oAOJIMXxII7LF7GW+tMnc6VUu6aJMAgCWpA=
Subject key identifier: 11:43:35:68:9C:2D:52:29:01:F1:8E:B9:FC:B9:40:26:A9:F5:CB:30
Certificate issuer: /CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Certificate serial: 0198BD45F046BBF3E5A05FC533176D838337
Authority key identifier: 7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/EUM1aJwtUikB8Y65_LlAJqn1yzA.roa
Signing time: Mon 18 Aug 2025 13:02:13 +0000
ROA not before: Mon 18 Aug 2025 13:02:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211468
IP address blocks: 185.190.38.0/24 maxlen: 24
188.241.55.0/24 maxlen: 24
194.169.166.0/24 maxlen: 24
194.169.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:45:f0:46:bb:f3:e5:a0:5f:c5:33:17:6d:83:83:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Validity
Not Before: Aug 18 13:02:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=114335689c2d522901f18eb9fcb94026a9f5cb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:86:c3:ca:2a:8b:4d:b1:a5:3e:6c:ea:59:
04:c0:8a:93:7f:8c:f3:d9:e3:31:b4:37:30:cd:a0:
de:41:d4:08:1c:fe:93:6a:e2:e6:d0:02:c1:12:f0:
36:16:88:d5:f5:18:1a:4e:7e:0b:9b:ca:87:32:12:
58:a6:ea:51:da:32:3a:8c:7c:97:4e:28:ea:3b:25:
59:ed:b1:46:7d:aa:00:0c:e3:2e:df:b6:d9:1a:ef:
4d:9f:a8:d8:64:b5:8f:47:47:63:6b:3d:27:c5:ad:
a4:97:89:bd:d2:be:33:01:d8:bf:0a:67:44:f3:bc:
59:26:ef:8a:91:e8:9e:62:bb:21:ef:f5:50:d2:ec:
e3:e3:fc:2f:a6:ce:7a:ad:ed:51:fb:5b:ce:bd:04:
5f:3e:63:80:c8:bb:9c:67:ee:69:9c:d1:3e:71:b0:
ba:47:54:20:64:4c:8c:a7:ff:78:8d:71:81:89:9d:
01:8e:5a:d3:f9:cc:6b:0d:a9:84:d6:57:0b:33:69:
1d:1d:e1:10:4d:38:ec:86:71:9c:af:ee:28:98:62:
30:38:38:dc:f2:cd:e5:4b:84:7a:0c:81:3d:84:a0:
ae:02:de:93:95:94:62:63:a2:e8:8f:33:ff:4f:d4:
b9:11:6e:af:6e:84:d9:d6:15:3d:dd:e9:7a:2f:52:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:35:68:9C:2D:52:29:01:F1:8E:B9:FC:B9:40:26:A9:F5:CB:30
X509v3 Authority Key Identifier:
keyid:7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/EUM1aJwtUikB8Y65_LlAJqn1yzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.38.0/24
188.241.55.0/24
194.169.166.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:5b:af:19:f5:14:80:34:5c:2f:07:86:7b:04:c2:47:d3:b8:
a9:d2:c8:95:32:78:f2:6e:9a:56:17:d2:43:10:2d:ea:02:e0:
2d:b6:25:ba:e9:40:83:d8:1c:ef:b6:0e:c5:a4:88:f7:7e:a5:
b2:1a:71:5d:17:9f:93:b6:15:5b:75:58:fb:66:88:9d:07:d8:
67:b1:02:b7:6e:4d:61:34:fa:d5:cc:2c:3f:27:84:f0:84:af:
44:1e:9b:62:d0:f3:42:92:bc:35:a6:d3:ac:e3:b7:0d:e6:ec:
62:83:78:67:79:c9:7d:ff:a0:17:26:99:c7:54:0c:e0:31:ed:
7d:12:82:e0:09:26:2e:6f:18:f9:c1:ca:fb:ed:ad:74:bd:f8:
a5:88:f0:a5:5a:c2:80:4f:e4:8d:f3:d5:3b:1b:95:68:59:c5:
55:52:84:06:bb:0f:c0:c4:b3:67:3d:ae:1a:64:60:a1:b0:3a:
46:bb:1e:c6:82:cd:f7:81:d5:5f:9c:00:57:60:ef:49:97:34:
93:6e:cb:76:cb:6b:91:e6:a8:43:dc:ec:2d:ff:b5:23:fe:08:
f1:fd:07:ea:1d:38:09:ad:af:54:b9:75:bc:30:b1:63:40:d1:
e0:3c:a4:0d:68:2c:c6:c3:95:ed:7a:ef:82:47:05:34:69:9b:
3a:37:92:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:42 2025 by rpki-client