Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EpEB4V_PYYoxt8y-txiTuTJGnrs.roa
File: EpEB4V_PYYoxt8y-txiTuTJGnrs.roa (raw, json)
Hash identifier: IryLBJmJDxwYyixdAs+pzk8btd1S+To7pyzyTfZmnxQ=
Subject key identifier: 12:91:01:E1:5F:CF:61:8A:31:B7:CC:BE:B7:18:93:B9:32:46:9E:BB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197D48C71541B9DF1920CC0B9A74B0991C4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EpEB4V_PYYoxt8y-txiTuTJGnrs.roa
Signing time: Fri 04 Jul 2025 08:27:43 +0000
ROA not before: Fri 04 Jul 2025 08:27:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 79.99.150.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
213.218.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:8c:71:54:1b:9d:f1:92:0c:c0:b9:a7:4b:09:91:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 4 08:27:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=129101e15fcf618a31b7ccbeb71893b932469ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:02:35:21:5b:0d:e2:6e:8e:f8:11:de:cc:
0f:f0:82:75:14:82:a1:15:33:14:19:00:3d:33:13:
1a:2d:d2:cb:2d:c7:e5:5b:56:fa:79:ab:19:1b:cc:
de:96:ab:24:51:3b:37:1e:9f:9d:c9:79:f5:4f:d3:
39:75:23:b9:aa:4d:f2:36:12:7d:a1:d9:3a:d0:c7:
3f:f2:72:0e:66:bd:24:96:2f:f7:6e:b1:d8:24:cc:
13:f8:7d:61:82:cc:ab:2c:33:e8:1c:f0:9d:72:79:
32:5c:08:c1:ab:3a:89:ab:85:c5:c7:b7:5e:50:49:
22:0a:43:ce:3f:e5:34:38:be:a6:5b:09:2a:3c:2d:
9b:85:e1:3e:4f:cb:20:8b:5d:57:7b:e8:c3:ba:e3:
ee:c3:b4:68:0b:00:ec:0d:28:1f:d7:89:41:38:3b:
04:78:44:5a:19:7a:f3:97:4e:a5:ce:61:7f:38:82:
ec:14:c2:43:07:0b:63:61:08:47:e8:86:fe:4c:19:
83:0e:32:a8:ef:69:22:11:92:09:8c:be:f3:fe:06:
29:44:66:b3:e0:46:04:8b:5e:8e:5d:2c:f7:17:19:
f4:20:25:88:b5:b5:4e:28:1f:6a:9a:75:30:20:94:
d0:cd:26:3b:47:23:7b:71:84:6d:99:b0:cb:7d:ab:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:91:01:E1:5F:CF:61:8A:31:B7:CC:BE:B7:18:93:B9:32:46:9E:BB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EpEB4V_PYYoxt8y-txiTuTJGnrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.150.0/23
82.152.55.0/24
82.163.0.0/24
82.163.10.0/23
89.213.226.0/24
109.176.30.0/24
109.176.208.0/24
213.218.235.0/24
Signature Algorithm: sha256WithRSAEncryption
00:82:06:fa:36:1c:3e:54:52:03:0e:c5:e8:6b:25:11:c5:f3:
fd:ff:d4:20:d8:30:93:c8:5e:0c:b7:2a:b8:9a:45:ea:eb:9f:
79:d4:06:4a:88:9a:0b:2a:b8:3f:db:83:fe:1b:9b:cf:66:2a:
6a:79:44:ef:1a:9a:5a:1a:ce:5e:61:f4:a1:50:3b:dd:ee:c1:
d7:bd:b7:1e:7e:98:0a:25:c8:b5:da:3f:e3:a6:36:72:6f:c4:
3f:64:8e:9a:ec:eb:41:23:0e:e4:8e:d4:6e:1a:ee:7f:9d:22:
bd:6d:0d:dc:09:e0:99:da:15:09:10:c9:10:52:36:a2:aa:4d:
1f:b8:64:f8:ee:43:6a:b3:fd:58:29:d0:a3:93:76:c5:79:2f:
fa:66:24:4c:16:7e:5c:83:09:5f:97:ad:18:d8:04:f1:b1:0c:
2e:44:11:b6:9d:17:45:6e:5a:2d:e7:ad:06:ba:9f:4f:a2:e6:
ad:60:d2:d7:7b:6c:50:35:dc:01:ea:60:5e:90:24:b3:04:cb:
07:73:9f:79:9e:30:de:2c:41:6a:52:15:79:46:37:7e:d9:3c:
81:77:8a:da:55:77:b1:4e:aa:53:19:59:28:05:35:66:9a:77:
78:92:6d:08:78:d5:7f:76:ac:47:78:97:18:02:a6:57:d3:11:
c5:a9:70:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:51 2025 by rpki-client