Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eumKr0qLv63lbPNTPs3-rSkFzPA.roa
File: eumKr0qLv63lbPNTPs3-rSkFzPA.roa (raw, json)
Hash identifier: kuGOW6ahH+DfOdBLxMFL5UoMTvXaIY1nCKf8kfA1GXE=
Subject key identifier: 7A:E9:8A:AF:4A:8B:BF:AD:E5:6C:F3:53:3E:CD:FE:AD:29:05:CC:F0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019840281632E4033AA2B8767F9ABB592D43
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eumKr0qLv63lbPNTPs3-rSkFzPA.roa
Signing time: Fri 25 Jul 2025 05:57:05 +0000
ROA not before: Fri 25 Jul 2025 05:57:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44436
IP address blocks: 94.183.160.0/24 maxlen: 24
94.183.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:28:16:32:e4:03:3a:a2:b8:76:7f:9a:bb:59:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 25 05:57:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ae98aaf4a8bbfade56cf3533ecdfead2905ccf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:6a:cd:69:c6:a2:62:8e:2d:4b:2d:9e:a2:
76:ff:0b:0c:9a:21:d5:ae:41:22:5a:88:5e:f3:8d:
78:d7:58:66:aa:7d:e5:42:de:f5:95:9f:dd:4c:c0:
b7:46:fe:db:38:85:aa:0a:43:3e:1f:7d:d3:97:da:
68:a4:54:17:7d:03:b1:01:de:5e:2a:22:e6:46:1d:
40:8d:26:68:f3:7f:1d:3d:f0:10:db:01:d7:2e:10:
c0:fd:31:8f:df:04:bf:49:de:70:02:19:19:aa:64:
8e:4b:52:ae:5e:36:2f:99:3e:96:bb:8e:41:66:08:
41:9f:0d:01:33:ca:37:c9:da:02:23:57:b6:50:d8:
3b:74:03:50:24:d2:de:bd:e7:fd:70:6d:a4:2b:d9:
fe:8c:c3:df:9c:db:2c:9f:d0:54:f7:ef:d8:fa:cc:
71:66:df:98:84:e8:ce:d4:76:d5:40:9f:1e:e4:b2:
fa:15:b3:3d:d2:35:bb:bc:57:fd:6e:77:b7:70:9f:
0d:31:48:b9:d4:5c:36:99:63:82:06:88:12:d6:96:
eb:c7:f1:43:ed:63:f0:84:37:2b:5f:9b:16:41:d4:
18:ca:ed:4a:5b:41:50:40:d4:89:c8:f0:83:47:8a:
3f:ce:93:46:ea:65:6c:ac:ff:ac:65:94:7d:33:90:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E9:8A:AF:4A:8B:BF:AD:E5:6C:F3:53:3E:CD:FE:AD:29:05:CC:F0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eumKr0qLv63lbPNTPs3-rSkFzPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.160.0/24
94.183.163.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:df:b9:87:5c:43:2d:0f:73:4a:73:fc:d4:ef:3b:47:f1:f5:
59:65:ef:98:89:2e:b3:6d:c0:fa:33:fa:6a:53:65:e4:e3:c1:
01:3b:a4:3e:09:34:10:f4:ef:cb:ed:7e:d4:d4:4a:e7:dc:7b:
79:8a:24:d7:9c:bb:0b:b7:4f:5a:4c:7d:26:b7:0a:55:47:4c:
74:67:fa:4d:9f:f9:ae:99:e7:45:53:81:dd:46:b8:fe:67:e4:
4d:db:70:8e:6e:b4:79:2a:6d:d5:37:9c:20:da:81:48:b6:eb:
89:ea:77:2b:3e:41:a0:f6:26:2a:7e:34:19:fd:e4:54:02:a1:
65:f9:73:fb:52:7c:10:80:ea:e6:17:62:85:52:91:cd:34:42:
66:35:fb:1d:22:f6:53:92:c6:f3:60:e0:82:7a:a4:5b:0e:1b:
f7:22:9d:fa:16:af:2e:58:91:a3:c3:77:31:f1:d9:ce:3a:ef:
61:a2:4c:3a:a0:6f:1c:26:24:97:73:4b:21:33:45:6d:77:7e:
c1:bb:42:09:b8:8a:d9:1d:b2:4d:ba:62:16:1a:00:de:34:4a:
a0:a1:a3:52:f7:c3:26:47:b5:51:4c:32:f1:2f:12:25:8b:16:
e3:b5:97:1f:ed:35:fe:1c:45:b0:92:db:59:16:7b:00:5d:83:
a5:ec:ad:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:43:45 2025 by rpki-client