Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eks95w96IDU3y7FJtqpJE2ERD5g.roa
File: eks95w96IDU3y7FJtqpJE2ERD5g.roa (raw, json)
Hash identifier: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=
Subject key identifier: 7A:4B:3D:E7:0F:7A:20:35:37:CB:B1:49:B6:AA:49:13:61:11:0F:98
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0196C891A545B4EB3F41132D775BABC057F0
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eks95w96IDU3y7FJtqpJE2ERD5g.roa
Signing time: Tue 13 May 2025 07:35:10 +0000
ROA not before: Tue 13 May 2025 07:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 91.237.93.0/24 maxlen: 24
91.237.194.0/24 maxlen: 24
176.121.110.0/24 maxlen: 24
176.121.111.0/24 maxlen: 24
178.213.182.0/24 maxlen: 24
178.213.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 08:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:91:a5:45:b4:eb:3f:41:13:2d:77:5b:ab:c0:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 13 07:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a4b3de70f7a203537cbb149b6aa491361110f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:76:99:a0:f1:16:41:7a:3f:7b:6e:3d:af:77:
50:b6:37:94:fb:8f:f5:8c:15:ab:aa:14:0f:18:e8:
e0:c0:d9:b5:53:7f:8d:a7:4d:6a:30:23:2b:4c:1e:
75:1a:40:39:5e:97:aa:9e:b1:7a:f4:b8:66:ef:54:
47:26:e0:44:d7:eb:d3:d3:f7:7f:ca:ca:7a:ff:fd:
25:1e:c2:fd:e0:4f:75:71:ac:01:07:85:da:1f:9e:
52:36:c4:bc:be:8c:5b:ab:db:09:37:55:73:8d:28:
17:3f:6b:c4:b3:c0:47:6f:e9:02:32:a3:65:16:13:
fe:d4:55:a5:55:80:37:a8:3d:3f:b6:83:e0:4f:76:
ce:cf:f1:cd:74:89:23:9f:f4:24:e1:b9:3a:9f:f3:
eb:fd:7d:ca:82:6c:76:f4:a9:b2:83:88:8f:15:1c:
c9:30:2c:e1:26:f5:7f:df:7b:8f:9d:80:79:68:0a:
2f:ec:aa:7b:3f:16:58:75:66:7a:c4:b9:5b:ea:84:
17:90:8f:d3:f7:e9:53:38:5d:36:84:94:44:d9:77:
4e:1c:c0:1e:5c:ee:0d:6e:87:f7:06:c0:48:e4:66:
1a:2e:0c:50:9d:05:a3:95:7d:c3:40:f0:e4:76:81:
28:24:56:ad:ac:db:a7:86:44:2a:cf:23:c2:09:4c:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4B:3D:E7:0F:7A:20:35:37:CB:B1:49:B6:AA:49:13:61:11:0F:98
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eks95w96IDU3y7FJtqpJE2ERD5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.93.0/24
91.237.194.0/24
176.121.110.0/23
178.213.182.0/23
Signature Algorithm: sha256WithRSAEncryption
67:d4:ad:fe:34:dc:46:d3:97:20:10:44:03:3f:3c:06:3a:61:
36:f9:3d:aa:16:19:0a:9f:1d:34:42:58:64:2d:65:25:f1:62:
7b:ab:f3:f2:8a:ce:93:58:c2:91:2f:7b:13:16:2c:bc:52:89:
d3:58:de:8b:3a:8e:0f:b8:37:61:6b:a1:09:c7:b2:2b:29:6e:
b7:53:e3:1f:d6:44:f3:de:d0:7f:ee:57:f0:70:91:2b:81:30:
98:81:50:ce:0e:c1:e8:88:db:4e:00:62:2e:5b:97:7b:22:0b:
9f:e8:1f:d9:61:85:10:93:63:1e:31:c8:08:c1:dc:a4:10:0f:
9f:59:c0:ac:39:af:eb:6b:21:d9:6f:d7:e0:fd:b3:7b:68:b9:
64:39:f0:c3:2f:7e:93:0f:bf:35:ae:06:7d:9c:b7:f9:30:56:
88:6d:4a:b0:75:ba:28:c9:51:9e:62:91:77:ba:4a:2f:0d:69:
d6:93:2f:42:f8:6e:ec:b3:98:8b:e6:ab:1a:c0:41:da:8a:2a:
16:3a:26:e7:02:2d:f8:49:f0:4c:9c:dc:e6:b2:2a:36:86:96:
64:24:77:0a:dc:8a:63:91:70:1a:d4:9d:2c:1f:03:42:7b:35:
14:16:53:35:c3:f0:01:67:49:d5:d2:07:14:dc:e8:5e:31:88:
d6:fe:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:45 2025 by rpki-client