Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/xEEMdPhC2rNk7bJVkwuJYqlveKw.roa
File: xEEMdPhC2rNk7bJVkwuJYqlveKw.roa (raw, json)
Hash identifier: bA+nImsoiqS77/m8QvZz//Ouvxt5jwaI3lpfp/XkOe8=
Subject key identifier: C4:41:0C:74:F8:42:DA:B3:64:ED:B2:55:93:0B:89:62:A9:6F:78:AC
Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial: 019A01619FFA03E26CF8353BC13E83F6B43F
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/xEEMdPhC2rNk7bJVkwuJYqlveKw.roa
Signing time: Mon 20 Oct 2025 11:29:26 +0000
ROA not before: Mon 20 Oct 2025 11:29:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15703
IP address blocks: 80.247.208.0/20 maxlen: 24
87.233.0.0/16 maxlen: 24
193.28.152.0/24 maxlen: 24
213.193.192.0/21 maxlen: 24
213.193.208.0/21 maxlen: 24
213.193.209.0/24 maxlen: 24
213.193.212.0/24 maxlen: 24
213.193.216.0/22 maxlen: 24
213.193.220.0/22 maxlen: 24
213.193.232.0/21 maxlen: 24
213.193.232.0/24 maxlen: 24
213.193.240.0/21 maxlen: 24
213.239.128.0/19 maxlen: 24
2001:990::/32 maxlen: 32
2001:9a8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:61:9f:fa:03:e2:6c:f8:35:3b:c1:3e:83:f6:b4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Validity
Not Before: Oct 20 11:29:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4410c74f842dab364edb255930b8962a96f78ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:6a:97:cb:5b:8e:92:3d:cf:7d:72:75:c4:
25:95:99:22:91:52:78:2a:20:f1:55:98:cf:f7:29:
3e:bd:54:20:7b:32:1f:15:78:37:06:b7:11:99:49:
07:61:b3:5a:89:86:bd:4e:f8:3e:1e:5e:f2:16:b8:
c4:36:ef:d4:0b:84:f7:af:30:f9:45:f5:a6:5e:2b:
84:07:08:30:a6:9d:d6:15:42:18:83:ae:fb:9a:e3:
96:6b:9c:51:bd:a4:72:02:6a:98:24:f7:1e:0c:36:
1a:e6:69:3e:60:cf:07:2d:66:71:84:fa:4c:bb:ae:
79:c4:d5:74:cf:f9:3b:59:25:96:43:d1:b5:53:7e:
3e:97:d6:a4:d5:9e:6f:ed:1e:35:8e:52:0f:b5:8e:
4a:4b:9d:1b:2a:47:8f:41:4a:ac:0a:39:42:dc:65:
cc:85:f3:87:d2:4c:b8:89:51:fc:bc:30:83:b4:2b:
b7:64:fc:6f:a1:98:1f:3e:6e:0a:5a:8f:ed:7f:05:
da:3d:34:a4:c8:45:d9:a3:d3:89:f4:73:06:b2:b2:
fe:17:7f:74:36:5f:2a:4c:f2:bc:1c:6d:8f:40:61:
1f:72:6a:4b:e6:bd:1e:dc:65:04:a7:c5:e5:6f:88:
a0:f0:bd:aa:88:93:e1:b4:cb:b2:9d:d5:25:b7:b1:
82:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:41:0C:74:F8:42:DA:B3:64:ED:B2:55:93:0B:89:62:A9:6F:78:AC
X509v3 Authority Key Identifier:
keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/xEEMdPhC2rNk7bJVkwuJYqlveKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.208.0/20
87.233.0.0/16
193.28.152.0/24
213.193.192.0/21
213.193.208.0/20
213.193.232.0-213.193.247.255
213.239.128.0/19
IPv6:
2001:990::/32
2001:9a8::/32
Signature Algorithm: sha256WithRSAEncryption
4b:86:bd:68:4a:19:95:a4:cb:74:b2:6f:30:05:8a:d6:e0:eb:
3b:13:6d:3c:d9:89:6a:08:bd:b5:b4:6a:ec:0b:a8:df:7d:27:
e8:db:ab:05:76:f6:6c:81:42:40:ae:99:f6:79:7e:ee:88:fc:
8f:79:b2:98:83:f5:86:f5:16:2f:01:9e:0a:5b:12:0a:7b:2c:
3e:3d:7b:9b:3b:8d:59:d2:42:c1:a4:43:34:39:8e:ff:22:3a:
c8:52:bd:de:76:6d:68:f3:98:37:68:26:eb:46:12:d5:e2:6d:
09:5d:ae:89:09:a8:4f:16:cf:21:d1:a3:83:8d:b8:cf:7c:83:
29:7c:5f:1c:72:4e:70:ac:a8:1b:f8:6e:ea:14:f3:b7:f9:40:
cc:89:8a:f2:ad:2f:31:31:5a:94:54:b0:5a:9c:be:6c:b7:2b:
27:15:d4:d7:a4:43:a1:3d:1e:76:3a:11:b2:81:c0:b5:37:64:
1e:bc:08:8f:24:cf:3f:1f:9c:cd:bd:61:62:fe:73:cc:36:10:
85:46:bd:b0:54:55:c1:98:ef:28:73:04:7f:3f:a1:21:dc:4c:
13:37:26:b7:3f:85:7d:24:5e:f2:ed:e6:44:d1:3e:1a:b2:d1:
3f:70:3b:d7:fc:71:f8:8c:e1:d6:51:e0:fe:fe:06:aa:62:22:
39:44:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:24:11 2025 by rpki-client