Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/EJQRhvTA9imPwclwVgQbFkh0JFE.roa
File: EJQRhvTA9imPwclwVgQbFkh0JFE.roa (raw, json)
Hash identifier: wCSwu07TXrbn08zc7CmiqRRyHHovVOMjCdUBle99/a8=
Subject key identifier: 10:94:11:86:F4:C0:F6:29:8F:C1:C9:70:56:04:1B:16:48:74:24:51
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 01997665716F121B4D44B8D0D6A4252DE386
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/EJQRhvTA9imPwclwVgQbFkh0JFE.roa
Signing time: Tue 23 Sep 2025 11:46:23 +0000
ROA not before: Tue 23 Sep 2025 11:46:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135391
IP address blocks: 45.149.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:76:65:71:6f:12:1b:4d:44:b8:d0:d6:a4:25:2d:e3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Sep 23 11:46:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10941186f4c0f6298fc1c97056041b1648742451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:c8:83:29:b2:ad:ea:51:d8:93:a7:1b:23:
cf:58:7c:3f:45:3a:d9:1a:2b:2a:d6:6f:ea:17:7c:
74:71:d8:ff:4e:5d:1f:d0:0d:84:b3:d3:45:00:18:
5e:c0:72:19:07:86:5b:3c:d9:46:95:f6:6d:30:a8:
a4:ee:e7:c4:3e:a7:6f:78:62:b6:3f:f5:be:bf:18:
6d:e9:87:72:c3:9c:23:16:ee:b7:45:46:5b:ce:64:
66:47:79:9b:31:0e:e5:96:6c:fd:b4:32:85:d9:ea:
dd:2b:f9:b8:9e:9c:46:27:28:0f:43:ca:75:2d:d3:
bc:d0:c1:d5:05:4d:f5:1d:14:bd:1e:99:aa:b4:54:
fa:0a:c7:e8:bb:ea:67:0e:01:35:db:86:a7:6e:79:
4e:82:7e:d1:63:82:89:5e:e2:7b:68:70:17:4c:ba:
72:62:a8:1c:63:f5:a1:52:12:45:bc:60:c1:30:e8:
bb:71:eb:c5:32:26:a8:41:84:6f:f6:6e:04:16:65:
94:25:6f:17:e1:63:74:8c:bc:44:9b:ef:4b:83:2b:
44:2a:81:ff:15:51:52:d8:3e:48:be:a3:80:28:81:
c4:50:56:23:7a:d8:49:6b:f8:eb:10:78:eb:18:65:
d9:89:cf:18:c3:eb:ec:f6:bb:d7:3c:ef:c0:f1:25:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:11:86:F4:C0:F6:29:8F:C1:C9:70:56:04:1B:16:48:74:24:51
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/EJQRhvTA9imPwclwVgQbFkh0JFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.61.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6e:44:ff:6d:8a:d6:8c:30:07:45:ad:a7:8a:26:5e:99:73:
58:33:da:0e:01:a4:6f:d0:97:39:0e:a6:03:c0:7d:cf:58:89:
87:be:11:a9:e6:2a:3b:2a:c8:d2:b0:7c:e6:7a:60:8b:4b:dc:
47:e8:50:25:1f:c3:54:98:35:d1:43:e8:6e:77:1a:59:8c:5d:
f2:3a:32:ce:01:4b:b5:31:b6:11:33:6c:52:89:6d:c2:33:70:
04:c0:f2:d6:77:f1:8d:58:af:50:b4:c6:65:b1:0f:3f:c8:f3:
76:b7:9e:7f:f0:61:bc:34:79:47:8a:ec:ca:e5:27:2d:99:f3:
8e:f0:83:ea:25:9c:37:07:23:3e:10:0b:e2:45:f1:60:bb:14:
2d:ee:9a:ee:17:ee:22:80:4f:e8:f2:ec:99:2f:9c:34:fe:55:
c0:88:bf:a9:d7:1d:9e:c8:c4:ee:e1:8c:01:62:26:ec:c5:b0:
71:5b:c9:f5:ca:fb:81:e4:37:ee:06:bb:4f:da:af:b9:7d:36:
4a:0b:1c:59:0a:92:83:2c:64:69:cd:c4:2b:ed:4d:71:4f:64:
c6:e7:c1:fd:51:d3:26:2e:76:6c:2f:00:e0:5f:d9:46:c0:c8:
6b:30:ba:c6:3f:b9:60:d0:38:c8:03:21:6c:63:0a:a6:d6:00:
4e:cc:d1:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZl2ZXFvEhtNRLjQ1qQlLeOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi
ODU3NGUwHhcNMjUwOTIzMTE0NjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDk0MTE4NmY0YzBmNjI5OGZjMWM5NzA1NjA0MWIxNjQ4NzQyNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqHIgymyrepR2JOnGyPPWHw/RTrZ
Gisq1m/qF3x0cdj/Tl0f0A2Es9NFABhewHIZB4ZbPNlGlfZtMKik7ufEPqdveGK2
P/W+vxht6Ydyw5wjFu63RUZbzmRmR3mbMQ7llmz9tDKF2erdK/m4npxGJygPQ8p1
LdO80MHVBU31HRS9HpmqtFT6Csfou+pnDgE124anbnlOgn7RY4KJXuJ7aHAXTLpy
YqgcY/WhUhJFvGDBMOi7cevFMiaoQYRv9m4EFmWUJW8X4WN0jLxEm+9LgytEKoH/
FVFS2D5IvqOAKIHEUFYjethJa/jrEHjrGGXZic8Yw+vs9rvXPO/A8SVABwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBCUEYb0wPYpj8HJcFYEGxZIdCRRMB8GA1UdIwQY
MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt
NGUyMjM5MTdiODYwLzEvRUpRUmh2VEE5aW1Qd2Nsd1ZnUWJGa2gwSkZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw
LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZU9MA0G
CSqGSIb3DQEBCwUAA4IBAQBObkT/bYrWjDAHRa2niiZemXNYM9oOAaRv0Jc5DqYD
wH3PWImHvhGp5io7KsjSsHzmemCLS9xH6FAlH8NUmDXRQ+hudxpZjF3yOjLOAUu1
MbYRM2xSiW3CM3AEwPLWd/GNWK9QtMZlsQ8/yPN2t55/8GG8NHlHiuzK5SctmfOO
8IPqJZw3ByM+EAviRfFguxQt7pruF+4igE/o8uyZL5w0/lXAiL+p1x2eyMTu4YwB
YibsxbBxW8n1yvuB5DfuBrtP2q+5fTZKCxxZCpKDLGRpzcQr7U1xT2TG58H9UdMm
LnZsLwDgX9lGwMhrMLrGP7lg0DjIAyFsYwqm1gBOzNFv
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:27:01 2025 by rpki-client