Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ew36nvdSZt_ESJyyJfccdPtfQPE.roa
File: ew36nvdSZt_ESJyyJfccdPtfQPE.roa (raw, json)
Hash identifier: 7mXUgDEu+ARUFxJJThwe49E6ImBy0M21hnXMphaw110=
Subject key identifier: 7B:0D:FA:9E:F7:52:66:DF:C4:48:9C:B2:25:F7:1C:74:FB:5F:40:F1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01999EF0789EBBF5E8E7FEA05DC5103345D6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ew36nvdSZt_ESJyyJfccdPtfQPE.roa
Signing time: Wed 01 Oct 2025 08:43:03 +0000
ROA not before: Wed 01 Oct 2025 08:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 81.168.65.0/24 maxlen: 24
82.152.72.0/24 maxlen: 24
82.153.53.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
109.176.165.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:f0:78:9e:bb:f5:e8:e7:fe:a0:5d:c5:10:33:45:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 1 08:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b0dfa9ef75266dfc4489cb225f71c74fb5f40f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:11:1c:04:51:df:fe:3f:6d:1a:c7:38:ba:
34:69:56:18:01:c2:49:34:66:2a:7e:f4:fd:31:74:
68:ed:7d:51:56:79:cd:12:e0:d9:08:35:7e:aa:b1:
3a:4b:17:88:f0:97:43:ec:45:b5:96:ca:a2:7e:f0:
3e:7a:e4:ab:e8:3c:aa:21:34:93:e8:ce:8a:df:6e:
f3:fe:34:45:a8:14:e6:ad:dc:dc:c4:93:86:4e:66:
d3:69:e6:e8:3d:4c:20:c1:e8:0f:d9:a6:1a:b3:f7:
88:fa:6d:f6:d7:5f:57:54:b0:7a:d3:10:4d:5e:88:
27:62:db:d0:9e:ee:84:4c:8b:69:df:46:c2:3c:93:
06:0d:40:65:2f:d3:d0:0d:dc:99:32:c5:f1:6d:9b:
17:97:e2:6f:42:c9:da:33:15:f8:aa:82:20:88:c3:
ef:77:ba:ba:47:9c:26:bc:d0:59:8c:51:0f:b8:88:
18:20:77:f9:8b:43:01:94:f1:89:63:7a:a0:cb:26:
11:dd:c6:53:04:81:59:7d:17:00:dd:7e:b9:93:1f:
ef:bf:c9:50:44:29:2d:16:7b:14:55:c9:57:81:20:
5e:73:c5:4f:28:73:5d:20:6a:c2:7f:f8:39:5f:44:
8f:38:a1:47:83:f2:c9:a0:5b:fe:75:a1:15:f3:a6:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:FA:9E:F7:52:66:DF:C4:48:9C:B2:25:F7:1C:74:FB:5F:40:F1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ew36nvdSZt_ESJyyJfccdPtfQPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.65.0/24
82.152.72.0/24
82.153.53.0/24
82.153.66.0/24
109.176.165.0/24
213.218.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:81:d2:a3:95:0a:dd:87:40:90:fe:c7:41:d1:5d:d4:7e:59:
55:53:52:5f:9e:13:07:0d:10:b5:b3:80:e6:2f:98:c1:98:d8:
96:e2:13:06:a5:c1:48:a0:74:70:4e:10:e6:2f:1c:2c:a2:69:
03:76:c0:08:94:25:b9:de:6f:99:c1:1e:93:43:87:d7:71:e1:
89:02:39:9c:2b:21:09:a0:0e:77:0d:0d:b9:88:8b:95:25:e5:
a1:fe:76:5e:ff:f1:f3:63:5d:17:37:9e:00:c1:37:c1:e8:66:
28:f7:56:12:8e:06:19:f4:bb:51:8e:77:f4:9e:7f:c7:75:9c:
cc:01:8b:9d:0a:12:c2:e9:ba:32:7e:27:14:9d:e6:67:16:7d:
5c:2a:65:a3:60:4a:b3:35:00:0d:00:e2:9b:9b:ed:29:6e:37:
c4:ee:ef:df:59:d1:46:4b:fe:4d:b9:45:99:d8:e0:ce:85:2f:
cb:56:f7:53:dd:39:6d:7e:58:50:1f:93:e0:37:60:05:e6:63:
1d:e1:4a:c9:0f:33:95:bb:36:78:d8:34:d0:ef:bb:ba:bf:d9:
b8:7b:7f:cd:8b:1e:55:84:c7:15:bf:0c:ce:78:fc:27:4e:06:
3c:bb:e6:06:78:54:2f:ea:a0:62:e1:a6:5b:26:9e:58:aa:c9:
3d:5a:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:02 2025 by rpki-client