Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/EuZ_nscCVKNB7eQCPJwNYlOhXDM.roa
File: EuZ_nscCVKNB7eQCPJwNYlOhXDM.roa (raw, json)
Hash identifier: hnzY4VMRehTTwNfylfpkImvqTNTdqwkFEtSVzjLiRsA=
Subject key identifier: 12:E6:7F:9E:C7:02:54:A3:41:ED:E4:02:3C:9C:0D:62:53:A1:5C:33
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019A2556E5DFC71F840D269A92908F912646
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/EuZ_nscCVKNB7eQCPJwNYlOhXDM.roa
Signing time: Mon 27 Oct 2025 11:04:03 +0000
ROA not before: Mon 27 Oct 2025 11:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 147.185.197.0/24 maxlen: 24
193.168.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:56:e5:df:c7:1f:84:0d:26:9a:92:90:8f:91:26:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 27 11:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12e67f9ec70254a341ede4023c9c0d6253a15c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e0:33:02:bc:43:77:19:57:35:fc:cc:80:44:
a8:aa:f7:d0:d2:0d:9c:98:72:5e:cc:be:af:f4:2d:
53:08:56:c6:5a:a8:53:b1:50:8e:da:d4:6c:a8:45:
de:14:20:40:ba:05:57:56:5e:02:f3:50:bc:ac:ac:
fd:29:73:92:9a:db:01:ce:58:d3:ea:ee:c4:98:4f:
a3:93:33:64:1e:d5:57:30:e6:65:af:46:4a:bf:c6:
bf:69:30:21:24:a9:5e:ba:87:ac:5a:94:61:d4:b8:
1e:5d:9c:67:a3:9b:71:34:1f:d5:ca:83:09:59:c3:
3f:4e:26:8c:5e:97:96:74:b0:ed:64:ab:ba:1e:36:
15:0e:3a:d5:63:e2:44:02:bb:e9:cc:b0:7d:3f:74:
0b:ec:51:bd:83:ff:b6:8b:27:8c:c0:1b:4b:f9:8c:
d2:c3:c4:dc:bf:03:48:b3:cc:bb:e7:03:22:03:0a:
d0:5f:9c:44:81:80:12:5e:d3:3b:52:18:97:6e:5e:
99:87:48:cf:7d:47:e2:b1:f9:25:71:eb:7b:5e:b8:
d4:eb:fa:1e:8f:fb:55:3d:2b:02:99:c9:e7:36:21:
be:9c:c1:65:d8:13:85:ab:d4:b2:af:7b:ab:33:12:
b1:0f:d1:fb:ff:b4:1f:0a:79:bf:6f:27:de:69:09:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E6:7F:9E:C7:02:54:A3:41:ED:E4:02:3C:9C:0D:62:53:A1:5C:33
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/EuZ_nscCVKNB7eQCPJwNYlOhXDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.197.0/24
193.168.200.0/24
Signature Algorithm: sha256WithRSAEncryption
11:88:62:f6:ab:ce:79:a2:72:b0:07:75:01:4a:fd:bc:0f:51:
cc:37:1f:4d:76:23:53:04:e5:6d:79:45:8d:25:53:ea:74:d8:
40:64:3a:f7:d8:1c:f5:c8:fb:ce:03:92:9d:19:5c:cc:f2:bb:
c2:be:e4:88:9f:cb:ab:bc:96:9b:a4:63:db:26:c8:65:2f:02:
83:9e:d5:60:a6:df:cb:8c:d2:fe:d8:85:ad:4d:f2:8c:a8:ef:
ef:58:85:cc:63:b3:bc:3a:fe:43:29:ea:ee:a8:7e:d8:1f:3c:
7b:3a:7a:1f:4a:60:e3:6b:46:78:21:a7:81:0b:bd:2c:b4:b0:
85:db:e4:aa:b5:3e:9e:b8:c5:b5:6d:c3:0f:52:2f:fa:e8:cc:
49:e7:13:56:7d:e9:1a:93:ce:58:d3:da:db:6b:a1:7b:b9:b6:
f4:20:04:cd:1f:14:bc:49:83:a4:6c:b6:b2:82:91:02:b6:c9:
29:52:81:f0:8e:8e:91:ab:d1:b8:d9:f3:ea:50:7c:7f:a4:de:
56:75:aa:8b:ca:2f:15:d4:aa:9c:87:0c:d1:0a:f8:e9:6d:4d:
35:55:78:34:31:93:a4:4f:38:9d:8b:f7:82:f4:59:e8:f2:f9:
10:64:5f:77:bd:30:90:c8:d4:ec:6f:d5:9b:c9:01:d0:3b:9b:
ab:6e:37:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:43:28 2025 by rpki-client