Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/Eh7LIuW42CvtdPZwqzRnb0iAEKM.roa
File: Eh7LIuW42CvtdPZwqzRnb0iAEKM.roa (raw, json)
Hash identifier: j2OXrFqgsDjaKg5s5TvNOiiSOulderYWQlkF+sXQtfA=
Subject key identifier: 12:1E:CB:22:E5:B8:D8:2B:ED:74:F6:70:AB:34:67:6F:48:80:10:A3
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 0197FEAF93DB2F7CCCCAEAFFED62D1F3B32C
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/Eh7LIuW42CvtdPZwqzRnb0iAEKM.roa
Signing time: Sat 12 Jul 2025 12:50:08 +0000
ROA not before: Sat 12 Jul 2025 12:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 87.248.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:af:93:db:2f:7c:cc:ca:ea:ff:ed:62:d1:f3:b3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 12 12:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=121ecb22e5b8d82bed74f670ab34676f488010a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:35:59:bb:ca:9c:0a:a6:71:c1:d8:e1:1c:
5d:2e:29:43:5d:62:32:19:4e:82:4a:18:51:4b:fe:
3c:a2:21:03:46:6f:8b:97:fd:8b:89:d1:86:65:a1:
d3:d1:ff:ca:76:de:ec:0b:1c:c9:90:7b:27:c7:e3:
16:8c:59:6c:c6:c2:87:1c:06:b2:8c:d5:2c:99:7c:
56:44:5f:dc:88:45:67:69:70:a1:82:e8:25:f6:8b:
bf:4a:7f:3b:5f:2b:dd:65:17:b1:ec:2b:97:92:e7:
94:d6:9e:e1:ba:fa:76:02:b8:28:fd:ba:58:ad:d9:
a7:38:c3:3a:55:07:12:85:b8:3e:22:45:f0:aa:49:
b2:e7:3d:81:8f:86:f6:35:d6:2c:90:ff:ac:30:8d:
6a:4e:cd:ce:cc:22:c2:ee:42:1a:c2:98:79:de:ea:
6e:65:85:39:4c:50:c8:36:49:38:31:97:57:e7:7a:
15:c9:93:c6:98:90:68:d0:b7:f5:f0:85:97:d2:d8:
78:8f:ec:87:47:71:d0:3d:4e:0a:ea:a0:45:75:51:
1f:e2:a4:ff:fc:b3:f0:61:01:29:2d:ae:10:1e:4e:
42:19:55:0d:38:ac:c1:f9:6c:3e:fe:d6:29:32:69:
8c:8a:c0:d5:2d:36:9a:e2:89:0f:ab:0a:13:3b:71:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:CB:22:E5:B8:D8:2B:ED:74:F6:70:AB:34:67:6F:48:80:10:A3
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/Eh7LIuW42CvtdPZwqzRnb0iAEKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e5:ff:46:3a:83:a8:e7:8d:cc:d1:b0:dd:5a:f5:69:f5:ac:
d5:e6:5d:02:04:5a:c6:58:eb:ad:7b:9a:b5:a9:89:4a:78:75:
24:e3:36:c5:ea:05:43:c6:6a:ff:f7:f2:d9:10:bb:9a:9d:6d:
61:70:79:a7:29:0c:89:4d:fd:fc:0c:4b:f2:d9:41:c2:99:1c:
9f:22:74:3e:45:e8:ca:49:94:42:6c:d6:ea:fd:ca:19:bd:f7:
28:c2:b2:50:91:10:94:c4:28:85:de:97:68:30:04:c3:86:5c:
73:ed:db:11:37:f0:28:43:38:4c:61:e2:5e:aa:bf:d9:34:f0:
56:d3:0f:2b:8b:b8:83:64:a9:69:f8:79:b8:ed:51:62:a6:0d:
0b:09:a7:e6:89:03:b5:2f:27:c1:df:8f:a3:7f:a1:27:f6:cc:
c4:f7:88:4a:1b:d9:8e:b4:6b:5c:51:24:7d:99:78:34:75:6c:
2b:23:fe:fe:1d:92:05:19:cd:81:d1:50:94:29:46:0a:21:1e:
90:27:16:49:40:0b:4c:a6:e3:a9:56:56:fa:7c:7e:5d:13:8e:
bd:3e:cc:d9:34:d8:87:78:98:51:11:8f:88:9c:f2:2f:b7:ff:
6c:48:dc:ea:50:b5:7a:75:8e:ec:c9:c2:8d:f5:00:d9:f9:e2:
9a:64:3d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:19:43 2025 by rpki-client