Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/EUR3tjFNTdAQ0PDdSrgVT7YlWf0.roa
File: EUR3tjFNTdAQ0PDdSrgVT7YlWf0.roa (raw, json)
Hash identifier: RNEi8VUaDrk0De742oO4ThiEi9sdWL6KnRT8EqeTr1E=
Subject key identifier: 11:44:77:B6:31:4D:4D:D0:10:D0:F0:DD:4A:B8:15:4F:B6:25:59:FD
Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial: 0197F4961FCBDB04195BA5F276E61A851CFC
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/EUR3tjFNTdAQ0PDdSrgVT7YlWf0.roa
Signing time: Thu 10 Jul 2025 13:46:08 +0000
ROA not before: Thu 10 Jul 2025 13:46:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393559
IP address blocks: 94.136.231.0/24 maxlen: 24
94.136.236.0/23 maxlen: 23
94.136.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:96:1f:cb:db:04:19:5b:a5:f2:76:e6:1a:85:1c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Validity
Not Before: Jul 10 13:46:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=114477b6314d4dd010d0f0dd4ab8154fb62559fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d2:22:ac:9f:1e:a6:48:ba:fb:77:0f:52:fa:
64:ce:f9:e8:d7:a2:02:7a:b4:af:0a:d4:ec:01:1a:
1a:05:a0:9f:ae:c7:25:23:bd:6d:fb:ee:03:a1:ca:
d5:8f:14:47:00:d8:4f:9a:29:fd:a2:4e:ee:6a:24:
1e:e4:b0:4f:5f:9c:08:ff:0c:55:92:fd:09:cc:21:
13:fa:a6:00:0e:e5:8d:85:ea:83:78:c7:6f:0a:dc:
08:f2:15:bf:fb:ec:95:64:c4:73:0d:49:77:17:3a:
d3:21:c6:8b:6b:69:08:75:43:49:8b:1d:d9:5f:ac:
f1:8d:f6:08:2e:05:e4:58:ce:b1:34:60:74:81:f6:
d7:98:e5:cc:d8:72:b3:d4:0d:69:38:13:4e:b6:5a:
a2:ce:87:f5:01:cf:46:4a:a1:6c:91:c6:3f:7b:1c:
f6:3b:f9:6a:56:c0:00:77:72:6f:d6:ca:6e:66:58:
3e:3f:1e:43:c9:17:32:a4:1d:f0:c8:b6:c1:17:bc:
8a:07:2b:61:5c:45:e9:c0:f1:c6:a0:fe:9c:b0:63:
42:1e:04:93:5d:e5:6d:2f:1a:9d:b9:1e:3b:ae:a7:
0c:48:37:33:c2:a8:8e:6a:80:51:41:c1:62:16:7c:
b3:3b:cd:e9:62:a7:93:86:08:ac:ef:f3:ec:87:c6:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:44:77:B6:31:4D:4D:D0:10:D0:F0:DD:4A:B8:15:4F:B6:25:59:FD
X509v3 Authority Key Identifier:
keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/EUR3tjFNTdAQ0PDdSrgVT7YlWf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.231.0/24
94.136.236.0/23
94.136.240.0/22
Signature Algorithm: sha256WithRSAEncryption
46:34:96:45:35:f3:42:b6:e7:24:9e:21:48:fc:5d:f9:fc:46:
8f:8f:f8:8c:0d:ee:95:9f:75:d1:cc:f0:bc:2c:ca:54:41:ec:
d1:dc:82:da:a3:28:a3:81:33:32:44:5a:e5:af:bf:c5:9e:e3:
a1:32:92:2c:ee:9b:d3:fc:17:95:d5:be:61:0e:3b:7c:89:57:
2e:89:0f:7b:b3:42:b2:d3:5e:f5:ca:95:8f:54:67:5f:62:05:
57:fe:18:15:25:12:e5:83:99:2b:10:04:9b:a0:07:56:56:3f:
11:4e:a0:7f:fe:a3:bb:6e:3d:44:f7:5f:06:f5:c6:e4:02:8c:
a9:c6:ad:c2:73:8a:7e:62:0d:8c:e6:de:87:5c:f0:4f:f9:51:
e9:c1:44:11:44:13:f7:2c:c7:69:27:c8:16:88:95:a3:8f:76:
e2:a4:95:f2:9d:bc:18:3a:45:60:92:fd:19:0f:75:85:dd:c9:
97:54:c8:fc:c0:cb:14:db:e7:ee:75:46:63:7e:66:21:7e:db:
c3:00:63:9b:e5:21:d1:8f:3a:76:d3:9d:77:72:bb:13:39:ee:
a7:3c:74:4a:ad:7e:5a:22:90:bd:a9:c9:ec:bc:d5:33:a8:14:
cf:10:50:68:40:59:5a:9e:57:f9:47:bd:45:4e:3d:17:4b:de:
47:35:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:06:27 2025 by rpki-client