Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ROPdZsOOQ606XGpJ4ASbaBCGuY4.roa
File: ROPdZsOOQ606XGpJ4ASbaBCGuY4.roa (raw, json)
Hash identifier: HNPbbVeYODsZgtqFUND/Nf90k6970R/KKN4+erOEFs0=
Subject key identifier: 44:E3:DD:66:C3:8E:43:AD:3A:5C:6A:49:E0:04:9B:68:10:86:B9:8E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01985381FF1C978057987AFEFE50380AC422
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ROPdZsOOQ606XGpJ4ASbaBCGuY4.roa
Signing time: Tue 29 Jul 2025 00:08:05 +0000
ROA not before: Tue 29 Jul 2025 00:08:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12029
IP address blocks: 89.106.27.0/24 maxlen: 24
103.47.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:81:ff:1c:97:80:57:98:7a:fe:fe:50:38:0a:c4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 29 00:08:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44e3dd66c38e43ad3a5c6a49e0049b681086b98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:7e:f4:e2:94:cf:74:83:ca:17:23:9e:88:
bd:2e:6b:16:42:36:21:89:41:72:b3:18:4f:53:a7:
32:17:33:c9:81:c9:b2:03:c9:9f:5b:da:5e:44:b7:
4d:7c:e0:dc:00:14:c0:49:17:56:45:4a:5d:d3:43:
27:5a:cc:f0:bd:35:ae:c6:2c:7f:a3:8c:eb:f6:d9:
2b:df:66:d8:17:97:9c:90:00:52:a7:53:4e:b0:53:
01:8c:ff:3f:52:10:11:b8:4c:70:66:86:b8:6a:bc:
41:d9:a6:8f:f8:5a:f8:09:e8:62:66:85:d3:a0:94:
20:96:8a:18:40:29:f5:bf:8f:5b:91:16:af:64:de:
57:ce:1c:f8:1b:c0:95:94:05:10:d8:cd:40:41:4c:
a2:85:35:1b:7c:54:c7:1f:88:43:33:3d:73:d6:6a:
b6:c3:4a:4f:ac:d9:1c:3f:36:e0:18:89:fe:45:64:
e0:cb:1b:fc:98:b0:2d:52:ae:5b:82:e9:be:0b:6c:
2b:ed:50:b5:25:49:33:c6:f9:52:d8:b0:58:af:10:
5c:76:4a:c8:68:78:69:52:67:02:1f:2b:41:a0:9d:
4e:a2:e3:8a:9b:5c:69:66:00:3c:c2:c7:a2:af:b1:
1f:f3:8b:6d:00:27:7a:06:60:9e:d1:ba:11:62:20:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E3:DD:66:C3:8E:43:AD:3A:5C:6A:49:E0:04:9B:68:10:86:B9:8E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ROPdZsOOQ606XGpJ4ASbaBCGuY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.27.0/24
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:2e:5b:22:fc:22:3a:56:3a:a9:03:c6:40:95:2d:09:7e:20:
d5:3e:90:d8:f6:d9:cd:d3:11:e5:df:5d:54:1e:03:f0:89:17:
40:93:c4:86:c3:a2:88:d3:f0:11:cb:c0:d4:f3:33:11:e8:a3:
87:95:cb:c1:0c:25:a3:82:5d:6e:c7:44:18:73:02:0b:6d:ae:
c9:47:cc:25:b1:4a:0d:2d:2a:72:c2:59:5e:80:c3:51:27:75:
04:8e:e6:5c:62:72:91:99:3d:4a:80:d7:33:ae:ba:5b:da:50:
12:38:37:a9:ee:cb:82:85:46:f2:af:3d:44:0d:4b:34:c3:2d:
68:10:7f:27:fe:74:08:1c:5e:bd:61:f8:6f:a5:ee:23:55:e2:
7d:d7:b6:b2:7b:77:57:32:a8:69:a1:19:99:0e:b3:e2:1a:17:
97:a9:e8:66:b2:62:a5:ed:81:bf:76:1e:95:bd:9d:a5:2b:ea:
ff:cc:45:75:42:a4:0b:13:fd:ba:78:96:29:1a:d2:3a:0e:ad:
de:ea:84:8d:e0:db:d5:01:e6:d7:8a:d4:3b:89:e2:15:48:97:
8d:e4:8b:46:ab:37:f0:5e:6d:df:c7:a6:82:12:7f:28:93:11:
6f:80:18:f5:58:3f:df:b0:bc:21:e4:20:da:a4:56:0a:aa:05:
b6:3b:7b:fd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZhTgf8cl4BXmHr+/lA4CsQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNzI5MDAwODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGUzZGQ2NmMzOGU0M2FkM2E1YzZhNDllMDA0OWI2ODEwODZiOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttd+9OKUz3SDyhcjnoi9LmsWQjYh
iUFysxhPU6cyFzPJgcmyA8mfW9peRLdNfODcABTASRdWRUpd00MnWszwvTWuxix/
o4zr9tkr32bYF5eckABSp1NOsFMBjP8/UhARuExwZoa4arxB2aaP+Fr4CehiZoXT
oJQglooYQCn1v49bkRavZN5Xzhz4G8CVlAUQ2M1AQUyihTUbfFTHH4hDMz1z1mq2
w0pPrNkcPzbgGIn+RWTgyxv8mLAtUq5bgum+C2wr7VC1JUkzxvlS2LBYrxBcdkrI
aHhpUmcCHytBoJ1OouOKm1xpZgA8wseir7Ef84ttACd6BmCe0boRYiBz8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFETj3WbDjkOtOlxqSeAEm2gQhrmOMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvUk9QZFpzT09RNjA2WEdwSjRBU2JhQkNHdVk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWWobAwQA
Zy84MA0GCSqGSIb3DQEBCwUAA4IBAQC9Llsi/CI6VjqpA8ZAlS0JfiDVPpDY9tnN
0xHl311UHgPwiRdAk8SGw6KI0/ARy8DU8zMR6KOHlcvBDCWjgl1ux0QYcwILba7J
R8wlsUoNLSpywllegMNRJ3UEjuZcYnKRmT1KgNczrrpb2lASODep7suChUbyrz1E
DUs0wy1oEH8n/nQIHF69Yfhvpe4jVeJ917aye3dXMqhpoRmZDrPiGheXqehmsmKl
7YG/dh6VvZ2lK+r/zEV1QqQLE/26eJYpGtI6Dq3e6oSN4NvVAebXitQ7ieIVSJeN
5ItGqzfwXm3fx6aCEn8okxFvgBj1WD/fsLwh5CDapFYKqgW2O3v9
-----END CERTIFICATE-----
Generated at Wed Jul 30 02:47:41 2025 by rpki-client