Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/caU7RWUmiSAd0KYrYqDJ7M658lU.roa
File: caU7RWUmiSAd0KYrYqDJ7M658lU.roa (raw, json)
Hash identifier: myWnHzQZIM7OzyCkife5NDeJaFo3NZUmtgFbnikNDLg=
Subject key identifier: 71:A5:3B:45:65:26:89:20:1D:D0:A6:2B:62:A0:C9:EC:CE:B9:F2:55
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0199F335E3009D679D7466B50AC628866B4E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/caU7RWUmiSAd0KYrYqDJ7M658lU.roa
Signing time: Fri 17 Oct 2025 17:26:58 +0000
ROA not before: Fri 17 Oct 2025 17:26:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18526
IP address blocks: 89.106.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f3:35:e3:00:9d:67:9d:74:66:b5:0a:c6:28:86:6b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 17 17:26:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71a53b45652689201dd0a62b62a0c9ecceb9f255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:14:96:2a:ac:39:7a:52:e5:cd:03:85:b6:
5a:88:99:5e:d7:ad:8f:87:0f:3a:4e:a5:13:ac:9b:
0e:9c:11:a8:7b:4c:96:d6:a6:95:6b:ab:38:c5:a3:
09:de:80:44:7d:a1:b9:3f:14:8c:95:ea:12:0e:29:
6b:1f:1b:aa:aa:f1:8a:93:48:11:76:a1:ea:3e:fd:
7d:31:5e:90:be:0d:7f:06:89:6b:7f:27:c7:2a:6e:
7c:9a:18:3e:8d:45:93:17:62:53:8b:04:f0:ff:10:
5b:ca:59:ed:d6:f6:b2:a9:95:27:38:5b:1b:7e:a0:
31:69:67:6e:87:ef:c1:45:e1:4c:46:c5:60:ed:63:
55:97:92:45:57:1a:83:31:2b:f1:82:b7:13:63:75:
71:ed:c8:c8:4d:fa:76:bb:c8:ec:e6:c2:41:eb:1b:
02:02:04:de:f7:1d:26:5d:9d:f4:72:2a:31:de:cd:
5e:5b:8e:ad:9f:88:94:d3:42:0b:9f:67:85:aa:5b:
df:77:74:98:3d:50:25:22:55:e2:10:5c:c0:7b:16:
41:94:95:4d:a9:df:b0:6a:ed:7b:3a:70:77:ca:55:
ca:27:5a:ae:74:86:5b:5c:87:25:b3:e1:8b:4a:86:
7f:1d:44:76:9f:0d:62:46:c2:f4:02:8a:7d:79:16:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:3B:45:65:26:89:20:1D:D0:A6:2B:62:A0:C9:EC:CE:B9:F2:55
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/caU7RWUmiSAd0KYrYqDJ7M658lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b9:df:b9:0a:7f:83:db:42:38:eb:dc:4e:a9:a8:db:79:9b:
b9:57:66:98:62:38:8b:25:64:5d:e4:e2:d3:de:f8:93:6a:90:
31:b6:b6:e0:c2:21:ff:8b:fd:aa:99:99:4a:c4:00:79:1c:93:
55:5b:f9:52:70:59:1a:27:5b:90:20:19:fb:a0:12:3e:55:75:
e1:1d:64:19:6b:39:73:08:40:54:76:0a:7e:86:63:8a:f9:a4:
45:16:e2:9e:f5:4a:72:09:89:d8:8b:24:89:e6:52:8d:f4:f3:
db:62:97:2f:4a:90:66:4c:b5:61:f7:6b:6d:d7:95:5b:da:ee:
41:61:38:27:e6:f0:bd:71:a7:99:da:d0:2a:fe:b7:b1:15:9c:
63:bb:c4:62:08:d3:c9:f8:7e:cc:a7:e2:4d:d0:ff:88:be:d7:
9f:2d:2d:48:9d:aa:f3:49:a5:ed:e4:43:c3:dc:5c:64:3a:d4:
3c:74:1a:5f:02:90:e4:58:c1:2e:96:00:e2:4d:b7:08:b7:5a:
74:88:fa:f7:0f:a8:5a:46:9a:60:c0:0c:c9:a5:ce:b4:f1:bf:
d2:80:1b:1b:1b:59:e6:34:8d:8c:b8:9d:8c:5c:7a:24:b8:b1:
29:2e:c3:f0:91:53:93:d3:b9:f1:8e:86:e5:bc:e6:fc:07:6b:
19:a7:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:34 2025 by rpki-client