Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ealrYoQyPeB-VH8fvW7xfP9A7xM.roa
File: ealrYoQyPeB-VH8fvW7xfP9A7xM.roa (raw, json)
Hash identifier: sq7rblQm83YpSyVFwXmIJIx+oIlovpklltXbniMy3FA=
Subject key identifier: 79:A9:6B:62:84:32:3D:E0:7E:54:7F:1F:BD:6E:F1:7C:FF:40:EF:13
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01992DB0CB7A210A6AAA3BD9386F099F3396
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ealrYoQyPeB-VH8fvW7xfP9A7xM.roa
Signing time: Tue 09 Sep 2025 08:56:25 +0000
ROA not before: Tue 09 Sep 2025 08:56:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 77.93.143.0/24 maxlen: 24
213.210.28.0/24 maxlen: 24
217.144.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b0:cb:7a:21:0a:6a:aa:3b:d9:38:6f:09:9f:33:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 9 08:56:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79a96b6284323de07e547f1fbd6ef17cff40ef13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:43:5c:aa:88:fe:f0:41:08:3f:94:e0:1f:
83:58:1a:ec:59:40:ec:51:c1:31:86:f8:d3:85:2a:
8c:54:cc:cd:9d:a2:44:41:5c:35:da:c9:44:fc:92:
c4:fc:db:69:01:4a:7a:c7:1d:bc:d5:dc:3a:f9:32:
25:c5:21:f2:58:03:65:1c:3b:ea:71:63:2a:b7:16:
54:89:8e:a7:9d:15:72:04:53:fc:82:a1:17:7d:f2:
f2:6e:15:d4:ef:88:f9:4f:11:90:d9:c4:b1:34:e9:
05:03:4d:d8:bc:e9:c2:81:cb:2b:68:88:58:ff:c4:
95:c5:e1:d0:a0:c5:53:76:c4:e8:fe:32:ba:d0:c9:
70:7f:ee:b9:f0:46:5b:3e:47:c0:34:8f:9c:71:ea:
44:0e:d1:14:3e:7f:0d:8e:fc:85:c2:50:61:b0:19:
d2:14:fc:cd:8a:a1:37:12:24:1c:6d:0b:65:9e:33:
8c:e9:31:7c:04:4a:78:e6:a0:7b:40:f3:0f:f4:d2:
d0:f7:b3:b8:24:7c:07:2c:59:62:5f:58:08:91:a0:
fa:57:42:97:29:0c:d2:02:c4:8b:29:81:4c:1b:b7:
44:ba:fc:68:e8:04:a4:54:de:95:7b:96:d4:18:fe:
d3:6f:a2:c6:1f:d1:3b:6f:59:84:01:9a:e2:46:5d:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A9:6B:62:84:32:3D:E0:7E:54:7F:1F:BD:6E:F1:7C:FF:40:EF:13
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ealrYoQyPeB-VH8fvW7xfP9A7xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.143.0/24
213.210.28.0/24
217.144.145.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1f:61:b6:bf:a5:38:4f:b6:f8:04:01:8d:8f:c0:5a:c5:f4:
97:f5:08:6c:75:ee:68:4e:4a:72:1a:a4:27:e6:b2:7b:fd:57:
0f:bd:4b:1f:9e:df:f2:c0:50:78:3a:3d:63:ce:00:3f:db:b1:
19:24:87:7d:62:c5:b7:7e:a2:84:b0:8f:38:36:09:b0:74:4d:
84:bf:3a:b8:11:36:c3:bf:da:de:88:8e:30:68:86:e8:83:50:
fc:26:e8:61:3e:03:78:4e:8f:6e:53:37:74:54:97:34:17:90:
13:3b:50:22:b8:b7:0d:2d:fb:2b:ab:4d:1f:61:1b:e4:ec:82:
8e:3f:59:58:39:fb:65:a1:11:d4:41:ff:9f:4f:b5:21:fa:a7:
9f:a1:b2:75:af:5d:8f:f3:4d:2a:78:27:5b:5e:55:6a:21:d9:
fb:58:9a:5d:e5:25:7b:0e:4a:a9:c8:9f:3d:3d:11:86:bb:5d:
36:f4:d0:37:35:25:2f:ee:32:5e:7f:56:c3:ad:ae:2a:05:dc:
f3:51:e5:32:09:f4:f4:90:e0:09:c1:b0:8a:1d:61:3a:6e:44:
5b:a7:20:54:bc:20:88:88:53:81:07:fe:15:3f:14:b1:86:db:
a5:d7:ad:0f:26:3b:27:27:e3:7c:e9:ec:fc:9a:40:5d:b5:f5:
e0:3c:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:00 2025 by rpki-client