Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/bWEDqwygwg7-yBRBXDaOSm2ARWw.roa
File: bWEDqwygwg7-yBRBXDaOSm2ARWw.roa (raw, json)
Hash identifier: xSIk7AmozCj3fWaq1qSocNN8C0c+ikCramXPSbJmoe0=
Subject key identifier: 6D:61:03:AB:0C:A0:C2:0E:FE:C8:14:41:5C:36:8E:4A:6D:80:45:6C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0197B25CBB64EDF549A4EFE7E651F4AEBA46
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/bWEDqwygwg7-yBRBXDaOSm2ARWw.roa
Signing time: Fri 27 Jun 2025 17:08:30 +0000
ROA not before: Fri 27 Jun 2025 17:08:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 89.106.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:5c:bb:64:ed:f5:49:a4:ef:e7:e6:51:f4:ae:ba:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 27 17:08:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d6103ab0ca0c20efec814415c368e4a6d80456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:bb:7b:43:35:c2:75:14:fc:2f:4b:a5:6b:
bc:3e:b2:e1:7d:63:f8:7b:eb:6e:46:c2:7e:e5:b3:
cb:f7:b7:a2:c9:c6:1f:a2:cc:9a:53:e0:16:a1:2c:
2a:4c:d6:b3:27:76:c2:26:22:d0:87:86:11:b4:7a:
f4:0b:9d:d9:2e:7d:62:a2:48:d4:4a:79:94:1a:df:
65:3b:62:bd:a9:a5:17:77:00:31:96:34:2f:20:9c:
45:ee:77:57:57:a2:57:56:1c:55:61:dc:c7:31:61:
62:8e:2a:13:b7:53:37:c7:4b:b8:cc:0a:b1:cc:a6:
dd:7b:c4:04:ef:fa:19:39:09:ab:20:d2:f1:03:8f:
ee:43:c8:31:4f:49:5e:4a:0a:9c:2a:0d:72:35:2c:
f2:0e:4a:de:38:62:f4:18:f2:0c:dc:50:14:dc:38:
f3:c6:21:b3:17:28:94:56:a1:e0:59:89:b5:64:16:
48:9d:b8:35:62:2a:8a:d9:50:84:a6:33:6b:0f:e1:
05:46:c4:c8:78:09:2a:84:2b:59:46:a9:33:cf:ba:
1e:67:26:8a:65:ef:92:20:24:73:fc:43:1a:b7:a5:
f2:19:61:bf:2a:d2:09:c0:79:27:07:33:38:0b:68:
72:22:7c:01:ab:d9:fe:b6:3b:91:2e:8a:b1:04:e7:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:61:03:AB:0C:A0:C2:0E:FE:C8:14:41:5C:36:8E:4A:6D:80:45:6C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/bWEDqwygwg7-yBRBXDaOSm2ARWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.15.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f9:86:f2:43:50:05:0d:d1:fd:50:8c:c5:4a:eb:14:29:09:
cb:da:c4:e4:11:ae:61:df:00:ae:10:83:50:a1:01:03:82:da:
12:88:38:c9:90:1c:3e:6e:a2:61:26:ef:31:b3:8d:d6:72:61:
24:b0:28:b0:ad:42:3c:dc:1e:65:c4:a8:8e:5e:99:39:f8:4a:
ef:cc:0e:58:26:9f:9f:4e:62:fa:06:c5:99:5f:d1:d4:00:52:
fb:fd:bb:42:a4:ec:9d:df:38:0a:35:8a:41:d1:a9:2d:9c:7c:
24:31:91:dc:4d:41:e7:15:84:82:46:81:e3:12:a0:33:f3:7a:
d7:11:73:c9:10:76:70:8d:0d:b7:11:0f:86:76:c6:59:60:03:
25:4a:58:17:79:5d:dc:c5:ef:6f:68:92:b4:98:57:2a:4c:61:
db:e5:b9:b9:b9:f4:d4:a3:2a:e1:3b:c6:f2:ab:ab:f3:93:98:
b1:dd:06:da:1c:4c:0c:49:e0:27:11:d7:69:7c:54:71:09:2e:
88:60:43:85:5b:7f:bb:66:df:01:1d:52:56:4c:d6:cc:84:99:
e6:6d:db:fc:2d:ae:0c:72:21:1e:9e:7c:96:c9:56:14:c6:35:
04:ff:45:26:0f:74:7b:83:fe:e0:82:db:f6:06:e3:0d:bc:93:
11:38:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:09:57 2025 by rpki-client