Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/qEIvOXeJOReZ450RqGjB6EOS1CI.roa
File: qEIvOXeJOReZ450RqGjB6EOS1CI.roa (raw, json)
Hash identifier: Fk0yq1BlMLJDNsR0LsHKuSZEhch+26LuQGGBHUWFKpc=
Subject key identifier: A8:42:2F:39:77:89:39:17:99:E3:9D:11:A8:68:C1:E8:43:92:D4:22
Certificate issuer: /CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Certificate serial: 01997BC9250F9BDE96F71B51CB2F7245313B
Authority key identifier: D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/qEIvOXeJOReZ450RqGjB6EOS1CI.roa
Signing time: Wed 24 Sep 2025 12:53:23 +0000
ROA not before: Wed 24 Sep 2025 12:53:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203043
IP address blocks: 93.180.240.0/24 maxlen: 24
93.180.241.0/24 maxlen: 24
93.180.242.0/24 maxlen: 24
93.180.243.0/24 maxlen: 24
93.180.247.0/24 maxlen: 24
185.146.248.0/24 maxlen: 24
185.146.249.0/24 maxlen: 24
185.146.250.0/24 maxlen: 24
185.146.251.0/24 maxlen: 24
2a05:6c0::/36 maxlen: 36
2a05:6c0:1000::/36 maxlen: 36
2a05:6c0:2000::/36 maxlen: 36
2a05:6c0:4000::/36 maxlen: 36
2a05:6c0:5000::/36 maxlen: 36
2a05:6c0:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:c9:25:0f:9b:de:96:f7:1b:51:cb:2f:72:45:31:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Validity
Not Before: Sep 24 12:53:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8422f397789391799e39d11a868c1e84392d422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:c9:14:05:b5:c5:00:86:eb:d1:09:a7:84:
94:ac:79:a3:f0:81:a3:cf:08:9d:ec:20:26:31:98:
a6:fb:15:e8:e3:2d:ee:16:f8:3e:dc:54:72:e6:a1:
a1:3c:98:4e:f7:ec:2c:da:44:29:51:fb:c6:02:da:
c8:db:bd:05:98:94:5a:5e:1c:b4:f9:db:9f:2e:0f:
2f:a7:e2:e8:71:b2:97:6a:3d:0c:5a:b0:03:44:f9:
fc:84:6f:fe:86:f4:6e:f8:f7:87:96:21:d9:df:b4:
62:61:7a:de:6f:79:21:c1:d8:a1:f4:81:c2:4d:5a:
e4:14:2b:13:dd:2c:7f:ad:7b:98:91:49:4b:d4:4e:
67:82:2d:2e:de:55:34:0b:b0:af:e3:af:83:77:aa:
35:c8:35:39:db:f1:ac:0a:bc:3d:3c:50:b0:e9:09:
79:ca:e2:04:be:0c:53:de:02:3d:d3:7b:ed:07:53:
dc:df:55:8e:9e:47:b0:ac:aa:77:87:1d:a1:22:d8:
c4:7b:d7:23:1b:37:e7:ea:2f:13:cf:1a:74:c8:08:
e3:c4:dd:a3:0c:fc:bb:b3:43:f2:84:3a:f0:16:55:
71:5e:83:39:bb:ec:71:c3:5d:03:0b:24:b5:dc:8f:
73:81:3d:d6:2a:75:f4:c1:70:f6:84:4b:96:3f:4d:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:42:2F:39:77:89:39:17:99:E3:9D:11:A8:68:C1:E8:43:92:D4:22
X509v3 Authority Key Identifier:
keyid:D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/qEIvOXeJOReZ450RqGjB6EOS1CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.240.0/22
93.180.247.0/24
185.146.248.0/22
IPv6:
2a05:6c0::-2a05:6c0:2fff:ffff:ffff:ffff:ffff:ffff
2a05:6c0:4000::-2a05:6c0:6fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:1c:9b:bf:6a:cf:a9:e8:41:59:64:35:ab:02:b5:be:c7:f5:
51:f9:da:ef:84:cc:12:72:ef:41:ea:4f:9a:69:e8:4c:4b:2a:
40:f0:7a:5e:18:99:95:e8:ae:e5:e2:90:c8:ff:a6:18:fe:49:
75:4f:5f:87:26:51:96:a5:48:b9:ac:fe:91:b2:24:3c:44:9e:
08:e8:c6:c6:83:01:c3:0f:a8:25:f7:36:1b:2a:26:f9:82:0d:
b9:9e:6b:7a:7c:1a:d7:18:6d:47:4d:5a:f6:0b:5f:29:cc:aa:
44:95:00:e6:9c:5e:a5:b5:8c:2c:53:98:66:dd:7c:99:72:e5:
ac:60:2c:9f:04:3f:2a:f5:44:4d:91:a2:0f:1c:17:72:74:c3:
86:00:8a:58:83:60:67:2b:5f:b7:32:ef:e1:70:ee:a3:ab:09:
9d:69:c1:f2:89:e3:fd:12:15:7f:53:e4:3c:60:c1:79:40:d3:
74:f7:90:fa:84:37:63:f2:e8:95:e5:24:fd:b2:b1:78:ff:db:
09:ae:6f:10:67:84:10:65:53:1e:a0:89:01:82:21:60:6c:f6:
91:98:4d:75:f9:da:fd:c6:5e:c3:2c:61:29:6c:4f:30:b0:ff:
1d:5c:11:94:3e:0d:88:97:e7:a2:d2:a8:2a:19:cb:35:9c:26:
34:2b:83:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:38 2025 by rpki-client