Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EZzjf_-vQMrsYDAB6s-xQEYNxpE.roa
File: EZzjf_-vQMrsYDAB6s-xQEYNxpE.roa (raw, json)
Hash identifier: Ea0xViQ1atBZU0IFe/rxesQiMWH6P2eDXrbPzxp0BHU=
Subject key identifier: 11:9C:E3:7F:FF:AF:40:CA:EC:60:30:01:EA:CF:B1:40:46:0D:C6:91
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01981F26FDBA08BB2A7B8B9A5CEEA7C93E36
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EZzjf_-vQMrsYDAB6s-xQEYNxpE.roa
Signing time: Fri 18 Jul 2025 20:08:25 +0000
ROA not before: Fri 18 Jul 2025 20:08:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7843
IP address blocks: 212.111.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1f:26:fd:ba:08:bb:2a:7b:8b:9a:5c:ee:a7:c9:3e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 18 20:08:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=119ce37fffaf40caec603001eacfb140460dc691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:be:16:96:22:89:eb:da:02:25:66:4b:49:
17:75:0e:ff:ad:0c:b1:e6:bb:d9:66:17:7b:9d:74:
2c:06:e1:e4:f4:9b:cc:0b:46:fc:72:c9:2f:b6:7f:
71:a1:57:72:f5:1f:06:7a:35:82:37:ba:4e:65:86:
35:54:ef:d5:39:b0:fb:db:23:52:87:85:e9:a8:44:
ea:67:55:79:2a:09:0f:f4:fc:a1:94:44:2b:a0:18:
e5:18:97:c8:5a:88:1f:06:6a:82:9b:22:6f:88:23:
b2:ba:ec:2e:21:60:0a:49:15:78:44:9f:55:83:1a:
6e:ba:3d:98:e2:58:ca:16:59:04:b5:c0:08:43:1e:
d3:06:9e:ad:0c:be:67:15:86:2f:7f:4e:ff:33:51:
e2:12:cc:af:1a:66:57:c0:af:c7:fc:f4:f9:e4:f2:
9f:cd:e7:40:84:12:f4:9b:3a:75:a7:31:7a:39:26:
b3:8a:83:79:37:9d:c3:51:01:8a:99:26:dc:52:9d:
ca:98:e6:06:d9:d8:06:ef:77:94:0e:e2:50:10:3b:
f8:82:8e:d8:43:65:0c:3a:71:e6:b1:25:40:a0:bc:
72:06:a3:a4:ce:2c:86:0c:b6:4b:c7:97:da:58:61:
16:54:6e:0f:18:a4:21:3e:b9:0e:6d:80:1b:7a:0c:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:E3:7F:FF:AF:40:CA:EC:60:30:01:EA:CF:B1:40:46:0D:C6:91
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EZzjf_-vQMrsYDAB6s-xQEYNxpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
73:4c:2a:96:6d:b5:23:47:d7:87:74:cb:e3:78:fa:93:d2:1f:
53:6c:42:df:4c:99:c8:0b:d0:cb:58:55:00:8c:74:d9:15:ff:
2e:a7:9a:b2:68:b8:72:71:1d:7e:0b:c6:4f:6e:80:33:a4:ee:
5f:41:cf:04:45:b8:b0:13:fe:61:37:39:44:9b:9e:94:17:8f:
16:37:50:1d:66:d9:11:20:dd:0f:ef:fd:58:02:7b:96:22:55:
4f:2c:18:d2:21:cd:d9:79:9d:d4:ec:b8:f8:e4:03:49:54:50:
a1:f4:38:c5:93:08:3c:2b:2b:b6:f2:92:64:f8:42:b1:d0:8e:
4c:97:b9:9c:17:31:9f:ae:e7:64:26:2d:93:a6:e1:60:86:cb:
77:6c:3d:3d:cc:fe:73:c9:8a:0e:e0:75:b1:1f:ec:b8:d3:e3:
52:4e:5d:bb:60:da:fd:60:6c:56:50:02:19:3e:c8:f1:0b:79:
a4:50:44:8f:b0:cb:b2:91:6d:51:39:62:9f:45:e2:2c:ac:6c:
27:d9:7b:7d:8d:f5:a4:11:ca:98:f0:e6:1c:52:9b:d4:8f:fa:
d4:8a:69:9c:3a:01:68:fc:6d:0f:ed:aa:8e:15:4e:8f:d7:9a:
08:1b:94:3b:2d:ed:99:00:d1:fb:c5:57:d2:cd:7c:8d:7a:2a:
42:92:c3:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgfJv26CLsqe4uaXO6nyT42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjUwNzE4MjAwODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTljZTM3ZmZmYWY0MGNhZWM2MDMwMDFlYWNmYjE0MDQ2MGRjNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxde+FpYiievaAiVmS0kXdQ7/rQyx
5rvZZhd7nXQsBuHk9JvMC0b8cskvtn9xoVdy9R8GejWCN7pOZYY1VO/VObD72yNS
h4XpqETqZ1V5KgkP9PyhlEQroBjlGJfIWogfBmqCmyJviCOyuuwuIWAKSRV4RJ9V
gxpuuj2Y4ljKFlkEtcAIQx7TBp6tDL5nFYYvf07/M1HiEsyvGmZXwK/H/PT55PKf
zedAhBL0mzp1pzF6OSazioN5N53DUQGKmSbcUp3KmOYG2dgG73eUDuJQEDv4go7Y
Q2UMOnHmsSVAoLxyBqOkziyGDLZLx5faWGEWVG4PGKQhPrkObYAbegxDxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBGc43//r0DK7GAwAerPsUBGDcaRMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvRVp6amZfLXZRTXJzWURBQjZzLXhRRVlOeHBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1G/cMA0G
CSqGSIb3DQEBCwUAA4IBAQBzTCqWbbUjR9eHdMvjePqT0h9TbELfTJnIC9DLWFUA
jHTZFf8up5qyaLhycR1+C8ZPboAzpO5fQc8ERbiwE/5hNzlEm56UF48WN1AdZtkR
IN0P7/1YAnuWIlVPLBjSIc3ZeZ3U7Lj45ANJVFCh9DjFkwg8Kyu28pJk+EKx0I5M
l7mcFzGfrudkJi2TpuFghst3bD09zP5zyYoO4HWxH+y40+NSTl27YNr9YGxWUAIZ
PsjxC3mkUESPsMuykW1ROWKfReIsrGwn2Xt9jfWkEcqY8OYcUpvUj/rUimmcOgFo
/G0P7aqOFU6P15oIG5Q7Le2ZANH7xVfSzXyNeipCksOC
-----END CERTIFICATE-----
Generated at Tue Jul 22 12:05:20 2025 by rpki-client