Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7j6XeJcs-vc-_V_5FkXBG_i-nxo.roa
File: 7j6XeJcs-vc-_V_5FkXBG_i-nxo.roa (raw, json)
Hash identifier: FMubcK5vZuXT/VWXvIEoRty7cPkxZAKT/Ae/lujeIgI=
Subject key identifier: EE:3E:97:78:97:2C:FA:F7:3E:FD:5F:F9:16:45:C1:1B:F8:BE:9F:1A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01995DE9BE677716A9E6C6521E8E4B15125F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7j6XeJcs-vc-_V_5FkXBG_i-nxo.roa
Signing time: Thu 18 Sep 2025 17:40:23 +0000
ROA not before: Thu 18 Sep 2025 17:40:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 89.106.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:e9:be:67:77:16:a9:e6:c6:52:1e:8e:4b:15:12:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 18 17:40:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee3e9778972cfaf73efd5ff91645c11bf8be9f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5e:b4:5b:57:ea:4d:71:8e:a6:71:93:8e:02:
a5:96:11:36:2c:87:37:d8:7c:00:47:9e:bf:bd:87:
03:02:66:59:14:e4:2d:18:12:76:66:60:d1:e0:67:
99:ec:9a:a1:11:d4:de:78:a3:98:f4:c9:1b:8e:d9:
d5:6e:a0:e7:9e:da:e1:ce:24:a9:d3:7f:2d:0c:9b:
39:3d:7c:71:f2:c6:6d:e2:d5:06:3e:df:0c:2d:6b:
21:8a:63:91:b5:49:b2:f1:41:2b:34:a8:ac:c7:e1:
d9:21:2c:37:da:94:24:f7:3a:e7:3d:d3:df:f9:e6:
dc:9c:cc:d8:fe:30:81:d7:dd:d4:46:5c:8c:3b:05:
61:24:92:f1:7d:8d:1f:ac:3a:c9:6c:ce:39:8c:2d:
57:ef:78:30:93:93:65:10:8a:91:dd:30:1f:38:a5:
37:2b:17:fb:db:bb:ec:5b:5c:bd:f6:88:6b:8e:a0:
e1:32:49:18:56:36:8f:92:e1:28:2d:a8:dd:ed:39:
c0:cb:b3:a4:bf:af:8d:ee:da:33:69:9a:79:93:f2:
18:01:d0:ba:27:82:41:56:f0:27:64:c5:e4:90:7b:
76:91:1f:1c:4f:54:be:e9:af:02:61:19:70:5d:f8:
1e:1d:ca:d1:19:a4:e5:46:e5:cd:5c:7c:bc:db:43:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3E:97:78:97:2C:FA:F7:3E:FD:5F:F9:16:45:C1:1B:F8:BE:9F:1A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7j6XeJcs-vc-_V_5FkXBG_i-nxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.2.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b0:41:c7:f6:ea:a2:ce:ac:9e:9c:83:63:ee:80:ff:70:70:
80:60:69:14:46:85:ce:45:d6:e3:dd:0a:34:8a:52:55:79:59:
c7:72:76:01:a0:7a:d9:9f:b8:5a:f0:b6:f3:6c:2f:3c:f9:9d:
eb:57:68:66:96:2c:96:e7:21:a2:a7:fd:91:70:4c:d7:74:c8:
29:92:c8:8c:0e:70:62:c8:77:f6:f8:0d:2e:ce:a6:81:7b:19:
72:38:07:80:c9:ba:34:45:9c:da:8e:38:51:d5:22:11:46:03:
fd:cc:73:1d:7c:6c:1f:aa:c8:0e:80:94:25:7f:24:ff:4b:46:
fc:ef:25:c7:4f:80:f3:f1:1a:9e:ce:3c:a4:63:e6:e3:db:e8:
e0:48:b4:39:89:53:c8:11:f3:8f:c0:35:17:3d:fd:36:60:a6:
10:76:ec:99:27:72:23:c9:34:c7:6f:92:28:af:10:78:c3:3d:
0e:85:07:40:36:2f:3a:65:0d:05:d6:48:7d:ac:2b:f2:9a:9f:
ed:dc:03:0a:ca:e1:ed:65:aa:ac:c3:ec:0a:e4:3f:79:bf:24:
a2:c8:c1:d5:3d:c0:c1:a0:fd:18:17:63:cf:ca:7b:3a:4f:e9:
2b:f7:2d:f1:a0:59:f7:ab:3f:5f:c2:3a:2e:f8:ae:60:86:03:
d1:8f:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:50:58 2025 by rpki-client