Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EnZVUdqKeS0GBOAy7dB6u0ISkQ0.roa
File: EnZVUdqKeS0GBOAy7dB6u0ISkQ0.roa (raw, json)
Hash identifier: HS6bTOGy7fxr6/r6aU5LbUkYtorMp5avlhZAba85iE0=
Subject key identifier: 12:76:55:51:DA:8A:79:2D:06:04:E0:32:ED:D0:7A:BB:42:12:91:0D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199EDFB63355D721130C11BC25E64222DC1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EnZVUdqKeS0GBOAy7dB6u0ISkQ0.roa
Signing time: Thu 16 Oct 2025 17:04:59 +0000
ROA not before: Thu 16 Oct 2025 17:04:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 93.190.244.0/24 maxlen: 24
2a0f:1f80::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a10:3440::/29 maxlen: 29
2a12:4ac0::/29 maxlen: 29
2a13:200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:fb:63:35:5d:72:11:30:c1:1b:c2:5e:64:22:2d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 16 17:04:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12765551da8a792d0604e032edd07abb4212910d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:07:0e:1d:2f:1e:26:a5:66:53:04:7a:c3:2c:
1c:d5:6e:c0:eb:97:b8:a4:3b:61:2d:42:c1:c8:f1:
9b:69:59:45:c6:bb:71:48:bc:d7:a9:4c:3d:78:27:
ae:b0:b4:65:90:cc:1e:d7:82:21:41:14:60:43:e6:
db:0d:e7:bf:8b:ff:ef:b8:25:13:b0:70:c8:c4:84:
be:50:2d:2d:5d:3a:75:dd:34:2f:52:76:58:84:53:
b3:b9:08:8a:2c:f7:a6:7c:7d:15:61:43:32:30:00:
85:c8:2d:b5:5c:6a:b9:ba:a5:77:a7:f1:21:8a:bc:
e1:ad:fb:18:04:0e:2e:66:8d:d5:21:c7:8a:42:9b:
0d:12:79:e9:7e:27:46:06:c2:2c:cf:56:4d:b2:aa:
6d:8f:23:12:74:bb:64:da:d3:4f:0c:5a:e0:24:8c:
30:8e:f7:25:b6:60:3c:df:c4:14:98:57:2f:7a:1f:
c5:e0:43:03:a7:1b:bb:43:ec:1f:f6:ed:39:ef:a8:
65:c0:16:ef:2e:89:99:0f:dd:90:c6:1c:11:79:ff:
00:a9:05:5a:42:11:63:f2:c3:36:d0:66:8e:4a:95:
e3:ed:f2:49:c1:f8:da:d2:8e:94:b1:d8:71:13:92:
df:4e:0c:8d:ad:81:7c:13:ab:c9:6f:f7:79:46:36:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:76:55:51:DA:8A:79:2D:06:04:E0:32:ED:D0:7A:BB:42:12:91:0D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EnZVUdqKeS0GBOAy7dB6u0ISkQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.244.0/24
IPv6:
2a0f:1f80::/29
2a0f:dac0::/29
2a10:3440::/29
2a12:4ac0::/29
2a13:200::/29
Signature Algorithm: sha256WithRSAEncryption
6a:73:ce:60:2b:18:78:cc:05:dd:8c:96:78:78:86:ab:37:7e:
77:71:53:97:63:eb:bb:28:c1:88:c0:e1:3d:fb:b4:7c:06:11:
05:70:a7:a2:f0:6f:ba:17:da:25:e9:b8:c6:5a:74:00:2b:64:
21:70:87:12:8d:4a:89:3a:cb:cf:75:fb:31:4a:92:e2:73:52:
4b:37:f8:c6:7f:d7:dc:fb:77:ca:28:4b:5b:e5:37:f1:23:69:
ca:6b:30:71:9f:7f:69:5e:c3:94:c6:1e:39:dc:f3:31:99:aa:
5a:77:a5:7e:c9:b4:43:af:58:28:ac:09:c0:17:59:38:ab:a7:
30:00:98:f4:d6:35:5f:47:7f:76:12:90:5e:ee:36:b8:aa:a7:
93:e5:d4:75:5a:74:36:39:53:d3:d7:a2:9e:ae:7c:23:27:58:
98:29:5a:f5:65:a0:35:72:59:6a:8e:e2:df:29:2a:a1:5c:fd:
55:1c:37:f6:07:8d:7e:23:ea:44:c7:be:6d:86:17:79:08:33:
08:dc:01:91:a2:a1:9e:2a:3b:f8:ff:55:bc:1c:e4:8b:32:62:
e7:fb:cb:01:88:a3:18:ea:21:9a:63:91:6d:67:ef:77:ac:29:
32:c0:a2:76:13:a4:05:be:f5:a0:27:85:45:fe:01:dc:6e:b1:
db:e4:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:00 2025 by rpki-client