Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eg20MWLn5BnzbPm-JB9g3jwd7Ik.roa
File: eg20MWLn5BnzbPm-JB9g3jwd7Ik.roa (raw, json)
Hash identifier: XZYTz30xSkWfeR5v/o3m5U51K3z6T9Ox5jbcOv8+FtI=
Subject key identifier: 7A:0D:B4:31:62:E7:E4:19:F3:6C:F9:BE:24:1F:60:DE:3C:1D:EC:89
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01999545CA15558C64C662A3CDE4FBCB4151
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eg20MWLn5BnzbPm-JB9g3jwd7Ik.roa
Signing time: Mon 29 Sep 2025 11:40:02 +0000
ROA not before: Mon 29 Sep 2025 11:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154049
IP address blocks: 88.209.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:45:ca:15:55:8c:64:c6:62:a3:cd:e4:fb:cb:41:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 29 11:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a0db43162e7e419f36cf9be241f60de3c1dec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:00:da:b6:5b:2d:49:42:f1:6f:e3:a3:66:79:
8b:1b:83:63:ee:27:ea:da:3d:0e:69:b1:ab:44:49:
d1:7f:71:3b:93:67:e8:7d:26:b2:92:b7:f4:94:75:
dd:b7:72:36:22:30:f9:30:fd:c0:0c:58:60:0d:59:
b7:97:ab:47:99:e0:a2:0c:1a:78:7c:8d:71:ba:42:
f7:93:88:36:b5:93:9f:f0:40:9b:aa:29:27:b1:c5:
3c:f7:72:f2:4a:92:55:cf:30:d9:98:0b:ce:d9:c4:
06:02:6b:ac:de:71:82:fe:c4:18:90:a2:3a:a6:8d:
4c:0c:2c:ce:7b:45:ec:59:95:db:e8:c9:9b:41:f8:
2a:95:6d:89:49:09:76:6e:59:b4:02:ed:4c:c9:ef:
f3:09:79:d2:ea:12:e7:e4:32:9b:3c:9a:68:a2:4e:
23:f7:cf:36:2c:b3:3c:8e:b9:f0:90:76:1c:d4:90:
0b:7f:70:47:fb:f0:ac:2f:ab:98:91:9e:b8:74:e3:
9d:8b:b3:07:b1:34:0b:0f:ce:32:e5:e7:88:ea:51:
e6:26:48:cd:bc:31:d5:13:97:b5:0a:6f:5a:b8:3b:
34:9e:e9:55:e0:a8:88:de:2f:1f:3d:1a:42:d9:b9:
93:51:2b:67:02:9b:c2:38:1a:07:ae:15:2d:5e:f3:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0D:B4:31:62:E7:E4:19:F3:6C:F9:BE:24:1F:60:DE:3C:1D:EC:89
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eg20MWLn5BnzbPm-JB9g3jwd7Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.228.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0b:24:19:91:e1:ba:13:63:a6:1c:04:e7:c9:e8:9a:ef:17:
2b:b5:c8:45:d7:93:52:83:29:c0:cc:bf:53:ae:3b:0e:1c:44:
ac:cf:85:dc:a3:43:a9:90:43:50:2c:95:d6:76:de:91:7a:bb:
e5:7b:3b:e0:c0:55:e8:46:d1:93:f4:84:90:c5:61:c6:05:e7:
67:da:94:b4:51:94:e7:2b:f1:99:27:5e:12:e0:68:9d:b2:40:
c1:9e:b0:bd:61:1c:0d:1b:da:79:28:b9:a8:99:aa:01:41:8f:
85:bf:bd:c5:73:33:99:1d:87:08:8e:87:39:50:38:7e:ea:2f:
ac:95:1f:f9:3b:38:48:76:c5:7f:16:ce:50:7a:3a:a4:0d:c2:
b8:be:d7:b3:87:0d:5a:de:a0:a3:58:14:c5:46:68:63:0a:a6:
a6:20:20:7d:f3:72:3e:3b:e2:fc:cc:58:9a:60:3b:f0:a5:a0:
71:37:d4:ff:a3:bc:61:d4:46:bd:0f:ae:53:91:e5:84:8a:a9:
f8:a3:03:26:ce:a6:4e:b9:1d:81:b2:57:9e:14:3e:10:3a:7f:
b8:d2:48:72:66:a1:5a:17:2e:71:6c:50:c1:32:85:34:05:05:
86:15:65:59:d6:d2:8b:f0:ab:51:1d:1b:1e:fc:1d:3e:3b:97:
c1:ca:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:36 2025 by rpki-client