Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EZmgdVaNW_ojtLIaywmVwseE1hE.roa
File: EZmgdVaNW_ojtLIaywmVwseE1hE.roa (raw, json)
Hash identifier: 4/cLiGZvN9Mgx/91ZMgvdPyvNj2WXQ+dtbmhXEtw+YA=
Subject key identifier: 11:99:A0:75:56:8D:5B:FA:23:B4:B2:1A:CB:09:95:C2:C7:84:D6:11
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0199C5535B5A458A488810628CFB6459FF35
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EZmgdVaNW_ojtLIaywmVwseE1hE.roa
Signing time: Wed 08 Oct 2025 19:36:38 +0000
ROA not before: Wed 08 Oct 2025 19:36:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214630
IP address blocks: 2a12:bec4:1c40::/44 maxlen: 48
2a12:bec4:1d50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:53:5b:5a:45:8a:48:88:10:62:8c:fb:64:59:ff:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 8 19:36:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1199a075568d5bfa23b4b21acb0995c2c784d611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:a0:f3:85:fb:28:09:91:79:87:fc:4c:07:
fd:6f:ef:c2:2a:2a:68:cc:38:5b:32:df:b1:88:02:
fa:90:7b:fd:44:a7:ba:b1:0b:62:54:61:03:50:4a:
8e:33:66:ef:a1:90:4b:f4:c8:b3:dd:8a:40:f9:ab:
31:b8:ae:96:4c:ab:74:69:ce:53:40:76:08:3f:5f:
71:ee:01:12:32:6c:38:55:6a:c6:5b:fd:0b:22:c5:
c5:a8:fb:e3:39:7b:9a:67:b5:1f:c6:68:cb:cd:55:
9c:45:b7:6f:4f:eb:8f:80:1e:3c:b8:f6:c9:08:45:
8e:ef:33:89:c1:4c:74:8e:ba:4e:61:4f:2e:d7:01:
7e:64:b8:f6:1c:5d:ab:ac:f6:b1:77:f3:6a:a7:d0:
56:46:1a:d4:dd:ad:40:e8:bd:f8:cb:85:15:a0:24:
56:80:7e:a6:27:88:67:b6:ff:76:00:3c:fb:c4:6f:
a1:76:8f:2b:ff:97:c6:e4:57:43:11:b9:ee:50:6b:
91:a7:ad:99:20:6c:57:92:56:54:5c:be:4e:08:13:
ee:f3:a9:74:d9:bc:31:e2:81:1a:4d:5b:d3:fe:15:
17:86:75:64:d0:57:95:81:ea:06:0c:f6:e2:30:9c:
63:44:6c:88:14:45:1c:ee:7a:6f:03:41:e6:3a:fd:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:A0:75:56:8D:5B:FA:23:B4:B2:1A:CB:09:95:C2:C7:84:D6:11
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EZmgdVaNW_ojtLIaywmVwseE1hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1c40::/44
2a12:bec4:1d50::/44
Signature Algorithm: sha256WithRSAEncryption
ba:d4:09:01:d4:bc:9c:66:30:62:da:38:7a:ee:d1:e3:ad:28:
e8:f5:88:bc:95:94:a6:fa:e7:a7:d1:5e:b0:ae:f0:c2:27:68:
a5:da:da:7c:c2:20:9d:35:30:13:cb:99:f9:0f:d5:95:5f:d6:
1a:08:80:cf:e3:9a:0a:37:d5:15:91:f4:3a:50:e0:af:4d:ba:
46:3f:de:7d:fa:de:22:73:56:8b:06:f7:79:18:83:8d:19:04:
b3:3d:2f:f8:64:b7:61:e7:be:ac:69:84:bb:11:45:00:ab:51:
1d:c4:48:5e:00:5a:59:24:0d:b2:7b:64:8f:13:5c:d7:81:8b:
ec:91:eb:cf:42:57:72:49:4d:4c:00:4e:a3:c7:9a:f9:0b:fb:
9e:ef:b3:52:c3:fb:56:3e:06:43:92:7e:49:33:8d:f5:b5:40:
12:77:0c:ec:d8:e8:0d:22:87:cd:cd:af:2e:a1:42:fc:d9:43:
e9:09:12:35:f9:00:a2:f4:2b:78:4f:53:00:8a:d1:dd:1d:81:
9d:9f:cb:44:b3:24:17:6c:24:5d:17:51:d2:4b:09:ea:7b:6b:
5a:22:13:4a:09:88:88:a8:d1:65:1a:e5:cf:ea:32:d6:0f:95:
b1:d7:d1:fe:38:45:9c:4c:8d:06:39:18:74:79:45:84:58:a4:
33:f6:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:07 2025 by rpki-client