Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ENSEPk-mBB881LsSTD9fXL2-RLE.roa
File: ENSEPk-mBB881LsSTD9fXL2-RLE.roa (raw, json)
Hash identifier: Z2XAWqXblYtXrK3DqymncKoxfQYiLOr1b5x47UBiePs=
Subject key identifier: 10:D4:84:3E:4F:A6:04:1F:3C:D4:BB:12:4C:3F:5F:5C:BD:BE:44:B1
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0197EADA0FB2F7D380628A840FEC280D89BC
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ENSEPk-mBB881LsSTD9fXL2-RLE.roa
Signing time: Tue 08 Jul 2025 16:24:08 +0000
ROA not before: Tue 08 Jul 2025 16:24:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 89.106.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:da:0f:b2:f7:d3:80:62:8a:84:0f:ec:28:0d:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 8 16:24:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10d4843e4fa6041f3cd4bb124c3f5f5cbdbe44b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:d5:6e:02:60:f9:43:30:ec:77:50:1f:a6:
ea:c6:59:0e:4f:0c:84:36:0f:ab:59:e1:b9:c5:6a:
26:f0:2b:fe:e9:f1:cf:ae:ae:f0:27:b4:2c:d6:cf:
0e:56:32:c2:30:32:c6:e1:2e:79:94:ac:25:4a:e3:
07:d8:2a:39:58:e7:22:12:f3:8a:91:5a:f7:34:ba:
07:b8:f7:0a:aa:c9:ea:0b:eb:24:7a:62:f4:07:e2:
d4:5c:05:5d:b5:0b:7e:7c:8a:76:92:1d:2c:22:20:
ba:bb:b4:ad:c7:15:4c:30:ed:d1:88:61:f1:38:14:
8e:53:67:f1:fe:47:70:b5:89:fa:86:fd:e6:22:29:
98:3d:a5:09:bc:d6:32:a0:3c:10:1f:c1:a9:32:e9:
8b:a5:25:ba:28:97:cd:68:aa:ba:7a:bd:9c:6b:97:
c6:7d:21:d2:c1:e0:44:74:75:fe:65:f2:b4:23:0f:
c6:32:e4:fa:e7:1c:a0:6f:90:b1:cf:34:56:7c:14:
c5:3e:bd:0d:34:4b:83:c7:22:2b:3b:0e:7e:cb:f4:
d4:e1:a2:58:50:53:f9:50:49:3a:bc:79:e0:79:80:
ed:fe:38:22:2b:94:a3:f9:a0:f7:aa:6a:01:e1:8f:
4b:73:53:11:6c:58:cb:2f:ef:aa:d5:ef:79:63:63:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:84:3E:4F:A6:04:1F:3C:D4:BB:12:4C:3F:5F:5C:BD:BE:44:B1
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ENSEPk-mBB881LsSTD9fXL2-RLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.2.0/24
Signature Algorithm: sha256WithRSAEncryption
43:14:b2:93:33:55:46:22:67:f4:0a:de:71:6b:46:b3:74:6d:
91:29:c9:e7:6e:f3:6d:22:17:25:73:d1:26:6c:7d:1d:8b:6c:
ff:c5:e5:c1:6e:93:d9:7e:4c:00:b6:f1:28:e9:5d:a8:a8:15:
7d:c8:49:9a:24:04:b5:73:38:7b:b7:bf:e1:df:7b:cc:9e:f6:
2b:17:7d:da:90:70:14:39:13:9a:a4:11:4a:04:9a:d8:6a:72:
ec:e2:68:46:42:e8:9b:17:fc:69:48:28:6b:51:1a:28:1d:e5:
aa:b4:af:fe:8d:30:a8:a0:ca:45:56:de:12:5c:82:b4:17:04:
ea:83:13:02:a3:3c:db:55:32:24:d5:ce:f0:6c:9b:42:a2:74:
05:a0:95:da:15:81:d4:7f:50:51:1d:e7:19:e6:24:52:6e:68:
78:11:da:d0:a7:b5:93:8d:a7:19:c4:b8:ab:07:a3:fe:a5:ae:
5d:95:e0:f5:22:c5:9e:bf:2e:6b:20:dd:fa:cd:2b:1f:c5:b9:
6a:a8:3a:1a:fe:c4:82:a7:53:a4:41:4e:7f:93:57:57:65:a2:
6c:a9:98:26:86:67:16:93:52:d3:3f:c2:69:5d:34:80:96:7a:
f3:a4:8b:93:06:bd:ed:59:4b:38:ee:03:4e:80:0b:99:d3:fc:
a4:15:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:17:43 2025 by rpki-client