Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/eMmTdEKMhHfhdwq777Ha_KP82bo.roa
File: eMmTdEKMhHfhdwq777Ha_KP82bo.roa (raw, json)
Hash identifier: YBC4C13Q1mBNrJGDJx43435vURQnAmXfSUtTeHdwHjk=
Subject key identifier: 78:C9:93:74:42:8C:84:77:E1:77:0A:BB:EF:B1:DA:FC:A3:FC:D9:BA
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 0199F5FC56C288E5326BFD1058903BE35D6E
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/eMmTdEKMhHfhdwq777Ha_KP82bo.roa
Signing time: Sat 18 Oct 2025 06:22:58 +0000
ROA not before: Sat 18 Oct 2025 06:22:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 109.175.210.0/24 maxlen: 24
158.94.220.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
2a01:fb07::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f5:fc:56:c2:88:e5:32:6b:fd:10:58:90:3b:e3:5d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 18 06:22:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78c99374428c8477e1770abbefb1dafca3fcd9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:0c:40:e5:05:22:5b:6a:c6:00:c3:63:19:
bd:2c:8d:0b:3d:c3:28:17:29:61:b4:ae:2b:e1:eb:
64:f3:d6:a6:2c:e8:ef:19:24:f4:51:79:60:cf:b9:
91:25:90:af:5b:c2:19:43:ad:af:24:15:7e:08:c7:
9f:40:38:d9:20:80:85:3a:73:38:02:95:a4:6f:6c:
a3:0a:8c:79:09:4d:8e:2f:cb:9a:71:c8:9f:2e:54:
82:7c:04:2a:c1:51:85:65:df:fe:76:60:f1:7d:64:
19:d1:f6:4d:9f:ee:a2:f0:17:01:2b:41:76:52:28:
43:ad:8e:10:29:ce:41:6b:03:37:70:ff:06:cb:ca:
75:52:ec:f0:62:38:3b:58:3c:de:0b:77:28:aa:39:
4b:56:86:44:1e:33:b1:cc:c9:fb:66:03:89:29:5a:
3a:23:32:05:82:5c:f5:ce:30:09:a3:02:91:2d:e0:
e7:1e:29:90:c6:73:a7:bd:f7:64:59:44:8d:dc:18:
8a:3e:df:5b:d7:3d:4b:0f:16:90:64:28:d3:45:8c:
bf:c1:7e:e0:ee:64:a2:69:6d:f6:be:e6:6b:2a:90:
d6:f1:36:d9:87:0c:69:e7:b7:af:4f:09:ad:f9:23:
a6:a4:be:06:cd:2e:d0:37:a7:28:a7:d1:91:90:fd:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:93:74:42:8C:84:77:E1:77:0A:BB:EF:B1:DA:FC:A3:FC:D9:BA
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/eMmTdEKMhHfhdwq777Ha_KP82bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.210.0/24
158.94.220.0/24
IPv6:
2a01:fb01::/32
2a01:fb07::/34
Signature Algorithm: sha256WithRSAEncryption
26:6d:1d:e7:0b:b1:82:bc:27:6e:19:1c:ed:18:62:cc:22:a9:
e0:6d:6e:b1:a3:83:2b:5d:eb:6e:4f:20:45:5d:23:de:9c:62:
25:9d:76:f4:22:ef:89:55:46:b7:16:09:9f:1d:e9:93:61:9f:
68:44:08:15:79:74:59:16:dd:f0:95:c9:8f:e9:00:10:46:ed:
a0:0a:61:8e:09:0f:76:b6:90:64:dc:8b:15:10:38:f0:d6:dc:
43:6f:bd:23:7a:0e:ba:e1:51:94:91:91:9f:1a:b7:de:4e:b5:
ea:67:be:9e:88:33:c7:50:2a:d2:7e:ef:54:7d:4b:65:f4:5c:
1e:cd:be:63:67:c1:71:83:97:5d:b4:97:d1:bb:dc:0f:41:58:
7a:7e:e6:eb:1d:fb:e1:2c:7e:9d:ae:52:17:ab:a6:60:f2:20:
fd:fa:ab:2c:e8:19:36:78:e0:da:6e:0e:61:41:ac:07:50:e4:
7d:dd:63:c8:ad:b1:11:d9:36:79:a4:09:ee:d9:85:ae:48:8c:
c7:71:dc:84:2a:75:a0:b2:37:0e:a8:7a:40:80:69:0b:88:3a:
c6:b4:39:e9:5d:d7:1a:8a:a8:30:41:77:95:ae:d3:03:16:fe:
65:a7:14:56:d0:3d:08:6a:e3:9c:e9:52:38:32:46:af:5f:8c:
e5:4f:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:00 2025 by rpki-client