Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mqSg5tt0Hn7hoMKv-FtUexKklac.roa
File: mqSg5tt0Hn7hoMKv-FtUexKklac.roa (raw, json)
Hash identifier: jdQQ1PBDvs+1C1lj1DIYppAKIv+q9g7ivy2sh9PFmMY=
Subject key identifier: 9A:A4:A0:E6:DB:74:1E:7E:E1:A0:C2:AF:F8:5B:54:7B:12:A4:95:A7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0199FD44599C8F982EAB3DF72825130D910E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mqSg5tt0Hn7hoMKv-FtUexKklac.roa
Signing time: Sun 19 Oct 2025 16:18:58 +0000
ROA not before: Sun 19 Oct 2025 16:18:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
45.151.143.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.98.0/24 maxlen: 24
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
77.111.108.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.216.0/24 maxlen: 24
94.229.217.0/24 maxlen: 24
94.229.218.0/24 maxlen: 24
94.229.219.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:44:59:9c:8f:98:2e:ab:3d:f7:28:25:13:0d:91:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 19 16:18:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aa4a0e6db741e7ee1a0c2aff85b547b12a495a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:71:a3:e0:dd:c0:0f:73:c9:82:06:bf:6c:
23:0b:6d:2a:da:8d:22:5b:3e:9d:b5:8b:5a:7e:56:
0e:bf:33:26:56:25:8a:f6:63:75:86:40:10:dc:c2:
7e:08:5b:ec:26:ed:a5:6b:51:55:18:dd:59:b0:c1:
0a:8a:ec:71:9f:9b:e3:d9:47:a2:ac:d0:94:bf:ff:
c7:10:b6:d3:72:db:31:07:03:6b:84:13:df:b2:a1:
b6:05:3d:6b:b9:42:67:ee:db:3a:e3:42:4a:5a:10:
6e:9e:1a:3d:c1:ce:56:42:bd:41:63:f3:33:ce:5a:
3a:0b:db:64:3d:e6:72:cf:06:89:a6:26:02:5b:e9:
cc:6e:47:4b:67:d7:db:be:d7:8c:4e:27:e1:2f:cd:
da:bf:78:c4:62:75:80:71:0c:8d:1e:00:64:ce:c2:
5d:77:ce:94:16:89:c8:2d:7a:c0:56:f1:5e:61:12:
de:9b:c4:4d:69:3b:98:69:20:e3:74:af:6c:ba:26:
0d:a7:ef:51:3d:6e:a9:a5:e5:0c:de:aa:d6:14:20:
fa:fb:29:48:33:f5:8c:54:9b:19:82:dc:98:df:f7:
f0:ce:50:63:c7:59:ee:ac:d3:13:5b:d0:05:54:72:
a3:fa:6d:9d:c6:9b:38:74:94:bf:9f:7f:44:69:f4:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A4:A0:E6:DB:74:1E:7E:E1:A0:C2:AF:F8:5B:54:7B:12:A4:95:A7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mqSg5tt0Hn7hoMKv-FtUexKklac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
45.151.143.0/24
77.111.96.0/22
77.111.102.0/23
77.111.105.0/24
77.111.108.0/24
94.229.212.0/23
94.229.216.0/22
94.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:96:b9:ce:0a:af:54:e3:0a:b8:e7:88:20:18:b0:bf:17:84:
96:99:a1:a8:d2:3e:5d:98:2e:7e:5b:36:05:88:7c:34:4a:4d:
f7:2c:09:a0:a1:5f:be:1a:91:9a:d0:26:dd:a7:11:62:fd:54:
fa:fa:a1:dd:97:8a:90:3c:c3:cb:df:fc:54:cd:f5:61:d0:be:
e9:ef:10:38:7b:0b:cb:f9:91:f9:75:ad:46:f1:a0:c5:bf:9f:
c2:2f:ac:0c:09:a2:32:5b:a2:a0:72:fd:30:31:9c:fe:4a:f2:
e4:ca:21:7d:ca:68:79:ca:db:89:7b:d8:c3:58:f1:14:90:ed:
03:57:85:cf:79:15:13:34:70:98:64:48:a6:bb:85:7b:c3:f5:
9c:ea:36:c8:cd:9e:85:7f:85:22:0a:f0:24:f0:2e:1c:e4:7a:
66:2e:ae:ee:27:dc:36:bd:ee:80:ed:f8:2e:48:bf:a4:33:c6:
79:f2:48:18:55:d2:ac:6f:9a:1b:f4:2b:0b:2f:b1:95:54:94:
e5:3e:f0:ab:e0:ef:26:c2:7e:01:de:1d:2a:f4:8c:3d:72:2a:
e5:d5:1b:1e:a6:7b:7c:56:14:e5:19:c4:08:22:a2:6e:32:de:
90:cd:c5:5f:3f:24:e1:5b:ae:a9:68:6d:ac:fb:b1:6e:71:f6:
ef:fb:ec:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:02 2025 by rpki-client