Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/EQ2SVjg073b9AiDrcF41Lqz1kTU.roa
File: EQ2SVjg073b9AiDrcF41Lqz1kTU.roa (raw, json)
Hash identifier: JSyAOtzeo1nrBmHRc4GeDkPp+IU8dU0x0XVp4QG7ovY=
Subject key identifier: 11:0D:92:56:38:34:EF:76:FD:02:20:EB:70:5E:35:2E:AC:F5:91:35
Certificate issuer: /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial: 01990AFF6F787D3D8C8BB75BF44C4A89EACB
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/EQ2SVjg073b9AiDrcF41Lqz1kTU.roa
Signing time: Tue 02 Sep 2025 15:15:36 +0000
ROA not before: Tue 02 Sep 2025 15:15:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213671
IP address blocks: 192.48.111.0/24 maxlen: 24
2a05:b100:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:ff:6f:78:7d:3d:8c:8b:b7:5b:f4:4c:4a:89:ea:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Validity
Not Before: Sep 2 15:15:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=110d92563834ef76fd0220eb705e352eacf59135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:bc:d5:da:d0:64:0b:c9:33:62:3a:7c:08:
b8:0e:70:24:a5:2e:1a:fa:dc:2b:ee:0c:47:92:5a:
db:68:31:0e:1a:fd:10:6b:69:26:dc:52:87:5d:8e:
a3:fb:32:f7:52:f4:10:49:1b:19:f0:36:03:2c:a3:
46:3a:43:db:f7:84:72:cb:a3:b0:b3:84:df:af:77:
db:df:70:89:a6:ce:e9:aa:40:c7:51:1d:d4:a1:53:
b9:9a:de:56:a8:24:5b:b8:10:b4:43:95:de:3c:f8:
96:91:8e:61:d1:7f:74:53:cf:43:2a:a4:3a:59:1a:
96:49:61:9f:bc:1a:be:d5:87:cf:fa:bd:db:49:ab:
06:e5:37:75:df:64:3b:86:c0:b7:da:d7:c7:18:f8:
d7:c4:0b:c9:ae:3b:85:a7:f3:c5:bb:60:48:f9:a9:
fd:32:e5:76:96:96:28:83:85:ed:f6:eb:6d:35:a3:
46:f1:a9:50:dc:06:4d:44:33:96:08:79:06:19:1f:
71:d1:02:fa:8e:70:43:3e:cc:f0:4c:68:fb:9a:2c:
f3:6e:e0:0a:3f:c0:38:9a:a2:93:54:8a:87:15:27:
2d:6f:35:7d:d9:a6:65:80:3f:a2:27:1d:d6:07:dd:
aa:d2:97:86:4c:fd:09:52:81:23:15:28:4d:e2:1a:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0D:92:56:38:34:EF:76:FD:02:20:EB:70:5E:35:2E:AC:F5:91:35
X509v3 Authority Key Identifier:
keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/EQ2SVjg073b9AiDrcF41Lqz1kTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.48.111.0/24
IPv6:
2a05:b100:2000::/36
Signature Algorithm: sha256WithRSAEncryption
50:c6:b0:01:80:ba:d4:5b:c6:bf:5b:4f:d2:11:b4:1d:b6:d7:
aa:9e:bd:88:7d:ea:3f:e1:76:83:23:71:2b:6f:55:b4:32:da:
e1:4e:95:c6:bd:d0:a5:95:e3:5d:b4:7b:e5:d3:af:60:df:a7:
71:83:d8:cc:42:a7:94:86:41:05:e4:92:a8:4b:67:ca:0c:da:
3e:74:b0:c8:69:1d:e1:e6:a0:e4:58:21:52:4e:b3:26:5c:07:
1d:ba:74:b4:7a:27:05:4b:47:df:03:b7:82:0b:20:9b:c0:08:
3a:af:52:d9:e4:94:0b:7b:41:fa:4c:fa:de:60:c7:c1:ee:40:
a1:ab:31:49:8a:2f:01:cb:06:27:ac:5e:4a:3e:ba:c5:08:d0:
8d:23:ee:bc:36:67:67:f8:f3:09:05:8b:39:2e:51:22:53:12:
f8:2e:ed:fc:35:d8:c1:b0:91:bc:a3:7b:a6:6c:40:be:57:95:
37:bb:0f:31:25:46:f8:e9:db:25:80:88:54:bc:69:53:fe:29:
41:27:6b:95:48:9a:7f:62:29:2a:b1:7a:be:6f:23:30:9f:67:
4f:8c:f8:98:18:31:d6:2d:a5:c5:cd:97:ab:29:52:94:7f:8a:
4f:fa:2c:64:61:a6:69:e6:ab:0e:c7:d0:84:03:39:00:34:cc:
cd:ce:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:59:20 2025 by rpki-client