Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fx2fDLjc71yyAa8U-rkHHsRTKjE.roa
File: fx2fDLjc71yyAa8U-rkHHsRTKjE.roa (raw, json)
Hash identifier: RMeRlIQu1b+IpbqT+Po/JHiVU5JugcQPCUCLpq96Mlw=
Subject key identifier: 7F:1D:9F:0C:B8:DC:EF:5C:B2:01:AF:14:FA:B9:07:1E:C4:53:2A:31
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0199F334F9BADF64A519AC50D7622254AE89
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fx2fDLjc71yyAa8U-rkHHsRTKjE.roa
Signing time: Fri 17 Oct 2025 17:25:59 +0000
ROA not before: Fri 17 Oct 2025 17:25:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393406
IP address blocks: 94.229.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f3:34:f9:ba:df:64:a5:19:ac:50:d7:62:22:54:ae:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 17 17:25:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f1d9f0cb8dcef5cb201af14fab9071ec4532a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:9c:5b:b9:18:e0:a1:e7:0f:62:62:6c:ca:
73:78:37:04:d9:41:34:01:36:e8:98:0a:cc:8e:f0:
00:28:b6:56:3d:24:40:cd:3d:66:85:c9:df:c5:7c:
80:20:95:24:db:f5:47:de:5e:73:68:d7:a0:b1:1f:
da:49:c4:88:bd:90:a5:34:44:62:15:3c:a4:af:c4:
df:e2:f0:96:5b:95:0f:48:b2:a8:53:94:f9:35:87:
69:99:d4:34:41:71:d4:54:43:2b:a2:fc:46:b8:05:
5b:04:96:12:10:c6:a3:2c:1d:da:67:bb:bb:34:2b:
df:19:37:0b:12:23:d3:f1:36:27:ee:d0:cc:07:0b:
33:99:c1:af:de:38:f7:0c:0a:8a:e0:fb:eb:95:88:
19:ea:81:97:77:2f:5d:65:f0:71:75:1c:e5:ba:6f:
c2:9f:06:2a:69:7b:d0:91:44:40:6d:86:bf:5e:f5:
3c:d1:3f:0b:9c:33:a1:f4:e0:bd:7a:a1:40:37:39:
64:d2:e2:40:19:05:81:01:8d:14:6b:93:88:dc:5f:
a4:24:ae:9c:41:e5:99:f4:fe:58:9f:02:bc:5c:2f:
fb:17:27:4f:cf:d5:32:4f:d8:8c:ab:73:3b:c8:ab:
41:5f:b3:af:63:05:0b:6c:b1:32:17:03:ab:24:08:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1D:9F:0C:B8:DC:EF:5C:B2:01:AF:14:FA:B9:07:1E:C4:53:2A:31
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fx2fDLjc71yyAa8U-rkHHsRTKjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:51:cd:92:94:ba:81:38:0e:b9:53:46:98:e3:94:ee:98:e9:
17:2b:66:ec:97:62:83:d5:a6:ea:c5:ad:c0:a2:da:c3:12:4f:
99:1d:88:1b:d8:38:75:df:7f:37:97:b8:e7:57:c8:de:3d:a3:
3f:fd:4f:ae:5a:69:69:5d:05:36:43:c7:6a:eb:7d:62:35:ae:
c2:3a:3a:80:0e:c4:6d:91:23:ba:3d:2e:b6:c1:74:c3:0d:62:
be:b9:9b:eb:da:84:6b:a6:90:c9:e4:37:54:ff:33:2f:f8:61:
9f:16:2d:68:4c:f0:dc:f8:97:46:84:25:0f:1a:19:05:6f:6c:
3b:b9:4b:b3:3a:22:73:2f:ab:46:86:80:7e:83:26:9f:33:4d:
3f:f2:30:69:bf:dc:1d:04:ff:33:c6:93:ca:33:c0:17:75:a3:
49:d0:f2:f0:aa:cf:75:ee:fd:0a:78:f8:4f:0f:8e:1c:e2:23:
2c:40:11:59:f2:aa:07:a9:cc:44:fa:ef:c0:6d:8e:ea:47:88:
16:ea:db:33:e2:0d:7f:2f:2c:c2:da:e6:95:55:59:58:58:05:
fb:4c:c1:62:0c:04:97:9d:af:45:31:b2:17:cd:6f:96:e5:62:
3c:e0:cf:8e:ce:36:62:7f:e2:93:9d:ae:de:f5:8c:3a:c8:3c:
81:aa:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:21 2025 by rpki-client