Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ezTJBm5RfW3lZlQl9uuP8AHuNDw.roa
File: ezTJBm5RfW3lZlQl9uuP8AHuNDw.roa (raw, json)
Hash identifier: VXW9KEb+QwYys3rhTNQvKdLViFeGOR1oKXT1O55fQxQ=
Subject key identifier: 7B:34:C9:06:6E:51:7D:6D:E5:66:54:25:F6:EB:8F:F0:01:EE:34:3C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019A36D1FEEF0B2A80F540A5C6B646BE25C7
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ezTJBm5RfW3lZlQl9uuP8AHuNDw.roa
Signing time: Thu 30 Oct 2025 20:32:03 +0000
ROA not before: Thu 30 Oct 2025 20:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.18.63.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:d1:fe:ef:0b:2a:80:f5:40:a5:c6:b6:46:be:25:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 30 20:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b34c9066e517d6de5665425f6eb8ff001ee343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:d7:35:96:af:99:19:71:75:e9:62:0e:f0:
1c:e3:3f:19:c1:5d:10:15:6a:07:a2:41:01:1f:02:
9e:29:fa:18:dc:2a:bc:0a:41:75:c8:26:1e:90:0c:
0a:e8:18:5b:c5:8e:92:a4:b2:e8:44:24:d1:94:31:
73:d3:09:0a:88:40:2d:c4:f4:98:b9:ac:9f:f7:d3:
6a:14:ef:41:4e:84:3b:b3:ea:bd:a6:64:de:d2:9b:
bd:7b:13:3c:3d:db:38:d6:f1:83:50:67:49:94:52:
62:86:f6:13:9d:6e:0b:1b:97:83:a7:79:98:53:39:
f1:18:ef:51:db:1a:54:53:0d:10:5b:70:8d:a6:4c:
29:19:0e:6c:f4:ef:13:bf:b5:5c:ad:12:9d:6f:86:
7f:fc:4f:d0:53:9d:51:09:65:41:94:55:e4:31:3d:
eb:c9:a3:f6:53:13:e1:32:99:bb:32:c4:ff:52:32:
28:cf:7a:91:f2:11:40:c9:cb:be:df:b1:fa:07:4a:
bf:80:b9:e2:93:48:19:9c:5d:1c:32:10:ea:e4:c9:
02:38:ef:c6:27:43:b2:3e:2d:4c:c6:66:53:fc:6a:
a0:39:bf:03:ff:83:3f:2f:ee:46:d0:21:8f:9b:57:
fb:0b:3c:31:d5:32:f3:d5:43:44:e2:e9:fb:8a:01:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:34:C9:06:6E:51:7D:6D:E5:66:54:25:F6:EB:8F:F0:01:EE:34:3C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ezTJBm5RfW3lZlQl9uuP8AHuNDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.63.0/24
178.219.6.0/24
185.47.91.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ae:53:66:57:a3:59:26:ae:fe:0c:80:4e:60:ef:da:61:30:
f7:23:2b:f2:25:c4:fc:bd:c3:6d:ad:38:9d:03:f7:4e:ce:15:
76:d8:7e:64:9c:00:29:6d:e9:e0:4a:96:5a:3c:08:a6:2e:6b:
5f:fa:58:3e:c4:78:eb:ea:ef:e9:88:e5:b3:81:68:f0:18:4f:
e4:0d:8a:d5:71:77:b7:ad:d2:22:4b:f2:b2:24:18:80:b5:5e:
7e:fa:a9:d0:f3:44:25:af:95:6d:6d:03:2a:ce:6d:9f:9d:36:
33:e9:39:f9:19:cb:a0:da:1d:b1:bd:f3:7f:24:89:12:f6:03:
e9:75:56:a3:70:68:68:33:72:a7:07:20:8c:de:95:8a:c9:81:
84:4b:32:5d:66:05:4a:85:58:ce:86:a6:35:71:2b:d9:20:2b:
0c:11:9c:ba:7b:22:dc:a5:ba:57:74:a5:b0:d9:57:d5:01:3a:
15:a3:33:9f:17:b8:dc:53:3d:59:b3:0e:a9:31:17:59:27:ea:
e9:15:d5:59:3f:1c:01:27:be:2a:f9:a9:df:e5:50:f8:3e:7c:
ab:06:15:1e:94:8b:b6:5c:7c:13:f1:c2:94:fc:33:b5:eb:2a:
e5:52:d5:8a:a7:08:98:73:03:26:ef:e7:60:61:99:ab:43:bc:
4b:e6:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:31:38 2025 by rpki-client