Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eUVNcBYf1ZAq4A9WDljKJtpY3jo.roa
File: eUVNcBYf1ZAq4A9WDljKJtpY3jo.roa (raw, json)
Hash identifier: YlOKBMWSC1F5RvPZrEJVXI0lmjLp49n2PZ6aare5F1g=
Subject key identifier: 79:45:4D:70:16:1F:D5:90:2A:E0:0F:56:0E:58:CA:26:DA:58:DE:3A
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01993CB7B3FC0FF2B298D1FF86F929A6C3DC
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eUVNcBYf1ZAq4A9WDljKJtpY3jo.roa
Signing time: Fri 12 Sep 2025 06:58:15 +0000
ROA not before: Fri 12 Sep 2025 06:58:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50360
IP address blocks: 78.128.114.0/24 maxlen: 24
78.142.35.0/24 maxlen: 24
78.142.49.0/24 maxlen: 24
79.124.40.0/24 maxlen: 24
79.124.41.0/24 maxlen: 24
79.124.45.0/24 maxlen: 24
79.124.49.0/24 maxlen: 24
79.124.56.0/24 maxlen: 24
79.124.58.0/24 maxlen: 24
79.124.59.0/24 maxlen: 24
79.124.60.0/24 maxlen: 24
79.124.62.0/24 maxlen: 24
91.148.128.0/24 maxlen: 24
91.148.129.0/24 maxlen: 24
91.148.190.0/23 maxlen: 24
91.191.220.0/24 maxlen: 24
91.191.221.0/24 maxlen: 24
91.191.222.0/24 maxlen: 24
91.191.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:b7:b3:fc:0f:f2:b2:98:d1:ff:86:f9:29:a6:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 12 06:58:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79454d70161fd5902ae00f560e58ca26da58de3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:08:09:c3:53:bf:57:38:c8:77:e9:af:09:
d0:32:88:26:5b:5e:b8:51:46:8a:d7:f2:7f:93:a7:
32:3f:f2:d3:60:66:eb:50:4b:df:99:ff:83:52:f9:
ed:fb:d6:a9:18:1c:8f:f2:74:2f:d6:89:91:60:52:
47:f1:ca:1c:d0:0b:8d:a7:55:b7:b8:aa:12:76:f1:
54:ba:7a:02:b8:e0:90:43:cf:08:48:3a:f6:5e:7b:
6b:76:9e:ff:ef:e9:2f:05:a2:ff:12:75:0c:a2:96:
ec:31:2a:8c:2a:5e:43:98:4a:9b:da:51:89:5e:d7:
c8:97:b6:50:de:8c:b5:bc:e4:d0:ff:bf:97:1c:0b:
34:b5:c1:78:e2:a0:5d:b2:3c:ea:fb:37:05:7e:4a:
b4:f1:13:02:3b:fc:b1:f0:69:06:a2:db:6e:a5:8e:
c5:d5:84:8b:82:3e:1a:06:51:5c:a3:ea:30:82:1b:
c6:dc:82:40:5f:31:c4:2c:19:16:71:1d:c1:78:30:
71:db:0a:e7:2e:d6:f3:a0:f2:a1:b9:bc:96:27:af:
1b:ff:0d:9a:fe:61:e1:26:07:9a:58:5f:24:da:34:
b8:71:5f:ef:eb:6b:2b:75:4b:3a:ae:fd:70:b1:e0:
23:90:9e:1c:e5:d9:3d:77:ae:ee:81:46:d9:17:30:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:4D:70:16:1F:D5:90:2A:E0:0F:56:0E:58:CA:26:DA:58:DE:3A
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eUVNcBYf1ZAq4A9WDljKJtpY3jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.114.0/24
78.142.35.0/24
78.142.49.0/24
79.124.40.0/23
79.124.45.0/24
79.124.49.0/24
79.124.56.0/24
79.124.58.0-79.124.60.255
79.124.62.0/24
91.148.128.0/23
91.148.190.0/23
91.191.220.0/22
Signature Algorithm: sha256WithRSAEncryption
35:69:0d:30:be:9f:0c:dd:2a:5a:8d:e3:9a:0e:5d:e7:4a:af:
cc:9c:2b:aa:4b:d5:6f:98:23:62:b8:c4:c7:ca:3a:7b:a0:34:
bd:e2:9a:29:c8:38:da:c3:5d:e7:c5:2d:2f:1f:4d:9c:a5:20:
a3:c0:96:0f:7f:dc:ae:0b:67:2e:83:9a:a1:89:24:7c:e7:d8:
15:04:ce:b4:d7:ee:f7:8a:45:29:66:65:69:a5:4b:d3:92:d3:
9e:ea:06:56:08:07:13:c8:2b:e4:7f:f8:47:18:93:2d:4f:4e:
0b:ac:84:20:7d:bc:58:0f:70:b3:39:38:0a:06:11:40:fd:11:
05:22:74:96:93:ba:43:66:a9:9e:1e:06:42:a7:7c:f0:c0:bd:
4f:e7:07:58:55:b8:7f:b8:58:05:c5:b6:13:a7:78:8b:d1:b7:
b3:d3:8b:47:9e:cb:2d:3f:9b:cb:33:6d:ee:5a:70:61:9e:34:
34:c8:20:5d:ef:0e:20:c7:11:6d:1a:48:85:80:6c:1d:8b:a8:
3e:cc:b9:dd:db:9b:a4:fd:3a:4b:f7:56:1b:24:f8:1e:17:8c:
b8:2e:68:8b:e1:96:6c:26:cc:60:6e:71:c3:d7:6d:21:bf:8b:
b6:7c:3a:f6:f1:69:7d:d9:05:56:01:c9:c1:f3:97:9b:70:42:
46:7d:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:19 2025 by rpki-client