Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/eGdekQ_g8hAJ-ioEk9E1wbpSYko.roa
File: eGdekQ_g8hAJ-ioEk9E1wbpSYko.roa (raw, json)
Hash identifier: Xc+mS6hvX5T41xOJfoYymAlkhHw73saT9E1Jhaw6MEg=
Subject key identifier: 78:67:5E:91:0F:E0:F2:10:09:FA:2A:04:93:D1:35:C1:BA:52:62:4A
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019822A835E0CB634DE979F1F1BA4ABAA4FF
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/eGdekQ_g8hAJ-ioEk9E1wbpSYko.roa
Signing time: Sat 19 Jul 2025 12:28:25 +0000
ROA not before: Sat 19 Jul 2025 12:28:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 85.133.240.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:22:a8:35:e0:cb:63:4d:e9:79:f1:f1:ba:4a:ba:a4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 19 12:28:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78675e910fe0f21009fa2a0493d135c1ba52624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:be:fd:71:cc:85:25:70:8e:dd:f1:3c:d4:
da:22:7a:c7:62:5e:5b:db:b0:d7:b9:01:c7:04:86:
ea:f2:e8:a3:a4:01:31:6e:0d:c3:5e:4e:80:bc:a7:
af:c3:49:c8:6f:f2:da:e7:0c:05:2b:0a:56:0d:34:
98:29:e5:19:5a:15:cb:28:47:84:9b:0b:4d:83:66:
5b:d9:8e:a4:95:21:b6:37:e1:10:58:06:bd:b3:53:
52:28:55:bb:14:d4:ec:c6:48:5c:0b:15:bd:7a:31:
f8:d9:a0:ee:08:33:96:27:89:3a:8a:a6:b7:fe:bb:
fc:2f:fc:8e:bd:5c:f5:7d:e8:3c:2c:cb:ad:97:08:
38:db:ea:7b:49:1d:73:11:db:10:c0:ed:c5:ae:dd:
54:5a:72:15:b6:86:f9:4b:f4:55:a4:ab:18:73:7c:
1e:f7:44:93:e0:0a:2e:96:c4:1e:86:0e:15:5c:9f:
08:06:78:4a:62:a5:c4:5d:05:fc:75:e3:8d:66:bf:
a8:da:b1:18:5a:c5:7f:15:b0:df:15:2e:0e:e9:9f:
af:9b:3a:3b:cd:bc:1a:77:bc:8b:ef:44:14:55:33:
2b:39:4a:35:7e:94:53:a1:b4:26:41:2f:ee:f7:7d:
66:a0:a5:ed:8f:73:e5:ed:17:d8:63:d9:7f:d1:a9:
e5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:67:5E:91:0F:E0:F2:10:09:FA:2A:04:93:D1:35:C1:BA:52:62:4A
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/eGdekQ_g8hAJ-ioEk9E1wbpSYko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.240.0/24
85.133.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d6:a6:f7:e3:e6:3d:75:38:90:c2:32:9b:7e:9d:27:5d:8e:
3d:f2:eb:e7:cd:5a:57:41:c5:4f:db:f0:9b:2c:07:bb:33:b3:
7b:56:c9:af:98:9d:8a:9b:3e:14:18:a5:73:4f:b5:d3:46:94:
3b:0d:d1:85:00:33:3c:51:19:df:9c:1d:d3:69:6d:aa:7a:31:
48:d4:9a:cb:ec:f4:a6:95:41:44:3d:eb:16:79:c9:75:df:d8:
f4:eb:4e:73:91:b9:c1:c5:9c:71:3f:68:0b:f6:85:36:5f:41:
d3:4e:5e:81:50:80:0f:a5:aa:20:b7:0f:6e:50:3c:4d:17:8e:
ca:6e:e9:05:cf:3e:f0:9b:88:f3:88:92:ae:ce:7d:92:1d:ce:
a3:87:bc:7e:e3:c7:66:e2:1f:75:d5:c4:4c:cd:f8:ea:e6:86:
90:23:49:0a:e9:70:ee:8c:8a:24:17:23:6e:b2:2d:40:1b:5e:
56:a6:e8:e8:e8:0e:e6:01:4e:10:fd:86:65:20:87:0f:9c:a8:
d0:35:74:c6:d6:c5:d5:12:36:9f:ab:80:9b:f6:d8:a1:67:6a:
47:be:80:43:2c:ba:2e:4d:11:39:e8:87:1b:d5:ea:37:a9:3f:
a0:42:4f:4a:3a:2d:9a:c3:66:6f:f4:a9:23:2a:75:12:f4:45:
f7:33:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:43 2025 by rpki-client