Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/eloma6ROlb3WGecKiAOHrBMJSNc.roa
File: eloma6ROlb3WGecKiAOHrBMJSNc.roa (raw, json)
Hash identifier: xqij8ENzmH6IHFmng7nPcmW1+/+AD15DS99+RfR6qA4=
Subject key identifier: 7A:5A:26:6B:A4:4E:95:BD:D6:19:E7:0A:88:03:87:AC:13:09:48:D7
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0199631104F67F7159EC300E4D13C5961B3E
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/eloma6ROlb3WGecKiAOHrBMJSNc.roa
Signing time: Fri 19 Sep 2025 17:41:23 +0000
ROA not before: Fri 19 Sep 2025 17:41:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 91.234.22.0/24 maxlen: 24
194.59.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:11:04:f6:7f:71:59:ec:30:0e:4d:13:c5:96:1b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Sep 19 17:41:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a5a266ba44e95bdd619e70a880387ac130948d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:5e:7d:c3:ef:61:96:a3:5a:1a:80:9b:10:
a8:00:92:79:1b:f8:36:36:14:5f:64:1a:8b:45:2e:
c5:af:d6:57:15:0a:1c:ab:14:35:59:dc:a9:c6:64:
bb:5f:c4:f4:56:b5:66:ca:ec:97:d9:a3:0a:e6:7f:
6b:4d:f5:6f:65:29:b8:0e:5a:56:8a:bc:0a:c0:64:
3b:bc:de:2a:50:70:0e:1f:51:1b:37:a2:d4:51:d7:
17:46:6e:8f:0b:06:a5:f7:63:dd:cd:0f:8f:67:75:
d7:39:c4:68:f7:3c:34:5a:a5:99:f8:10:03:0b:18:
4d:2a:28:f6:ab:7b:7b:81:1f:e4:39:1c:f0:0a:39:
26:13:47:88:5a:7b:86:aa:45:35:e2:91:85:fd:78:
18:22:40:cf:a8:6c:46:7f:ec:41:77:e0:0c:97:51:
95:1e:ed:b2:a8:6c:d3:ad:88:d6:1b:b0:bb:b0:23:
89:b2:71:d9:6d:04:25:0d:6f:0c:24:8d:ca:67:80:
8b:bd:7e:8e:74:ad:9b:a2:fb:b8:06:5f:51:d3:ac:
f9:02:aa:92:78:8e:de:d5:e7:41:26:aa:b8:b6:f4:
99:b2:55:73:7b:9f:77:e0:bb:74:d4:00:54:4e:ac:
0b:e7:1c:11:c7:61:04:6c:6a:ca:f3:c8:69:07:23:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5A:26:6B:A4:4E:95:BD:D6:19:E7:0A:88:03:87:AC:13:09:48:D7
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/eloma6ROlb3WGecKiAOHrBMJSNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.22.0/24
194.59.6.0/24
Signature Algorithm: sha256WithRSAEncryption
65:03:b9:e8:92:db:d9:54:be:78:eb:31:80:ba:fa:ab:76:fb:
12:7b:82:0a:bc:db:51:0e:cf:48:ed:e8:b0:50:2e:47:05:bc:
16:da:1c:3b:de:80:6f:fb:c4:56:a6:07:a8:2e:2c:75:43:25:
fe:e0:00:a1:8a:fc:5c:3f:f6:53:07:61:b0:58:f6:04:b9:18:
6c:be:7b:97:13:8d:be:56:2e:d6:ea:46:89:6e:56:21:ec:24:
03:ff:57:13:03:45:b0:9e:ac:4a:c7:b1:39:b9:14:9c:b4:95:
2b:ce:20:ee:5b:e6:df:e6:e6:96:57:89:0e:9f:b8:53:99:96:
65:18:6c:cd:f3:dc:e4:68:8d:da:dc:34:b6:93:e2:9b:82:ab:
78:d1:92:22:67:09:f2:1d:4c:90:a9:a4:22:74:fc:94:43:75:
43:71:5e:12:ea:c0:34:e9:48:01:ec:6e:3d:67:34:a0:d7:53:
56:50:4a:00:32:76:dd:3b:f2:2a:3a:e0:e9:10:4b:fa:b8:2f:
34:0f:75:98:2b:79:9a:61:45:ab:11:89:af:d5:ea:55:aa:bf:
9b:9d:5d:ac:b2:21:4b:53:5a:9b:3b:b8:16:1a:18:4e:94:b0:
c1:8c:d4:73:b4:c5:a9:3d:27:ec:00:ea:7a:28:fb:9c:f4:7b:
10:29:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:04 2025 by rpki-client