Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e9ZoQM2HD_0P7vsk8xq7Sf4TIUQ.roa
File: e9ZoQM2HD_0P7vsk8xq7Sf4TIUQ.roa (raw, json)
Hash identifier: 8x9IkGXVyz5K9K+JPclBIR4kLUGDGTJAyDM7mjvRFis=
Subject key identifier: 7B:D6:68:40:CD:87:0F:FD:0F:EE:FB:24:F3:1A:BB:49:FE:13:21:44
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019A7903AF43283879C8976BE21025DFE9C7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e9ZoQM2HD_0P7vsk8xq7Sf4TIUQ.roa
Signing time: Wed 12 Nov 2025 17:01:15 +0000
ROA not before: Wed 12 Nov 2025 17:01:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 45.131.187.0/24 maxlen: 24
45.148.117.0/24 maxlen: 24
93.88.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:79:03:af:43:28:38:79:c8:97:6b:e2:10:25:df:e9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 12 17:01:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bd66840cd870ffd0feefb24f31abb49fe132144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:e3:a0:36:65:9f:14:a8:65:de:af:51:87:
b1:71:be:e9:92:63:cd:37:81:2c:b8:22:fe:05:a5:
8a:7b:15:b2:b7:51:9a:8c:2c:d3:62:eb:92:72:f8:
c5:f2:b1:ea:49:a9:15:40:22:ef:aa:2c:88:6a:3f:
08:a5:91:e5:60:fa:fe:04:58:b6:da:b4:e4:93:8b:
c4:13:40:25:c7:07:1c:c0:d5:5c:5c:c5:7a:3c:8d:
de:b8:ef:e3:06:01:e3:18:b5:50:18:cc:79:dc:f3:
80:4a:57:15:54:fc:93:2d:61:c0:29:1d:2f:db:f0:
19:c8:56:64:5e:a0:7e:8c:b9:6b:52:55:25:76:1d:
f6:3c:81:cb:e4:b3:4c:21:43:9a:a7:02:9e:2c:c9:
a7:da:53:43:1f:4a:e3:e0:36:45:3a:6e:2f:45:41:
ab:6c:96:7c:04:b8:06:e2:3a:a9:a4:75:bb:d0:cf:
6d:39:c2:2c:3c:61:93:3d:f4:56:00:13:9c:bc:08:
ae:cd:65:92:b8:fe:5e:41:2a:90:22:6e:3f:d8:ac:
4f:ba:35:6c:06:b8:88:81:28:58:a8:52:be:c6:8b:
57:3e:21:84:41:81:1c:e5:7c:9f:44:14:35:4b:27:
9e:c0:1f:00:cc:74:f9:c8:c8:10:a0:c4:15:de:13:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D6:68:40:CD:87:0F:FD:0F:EE:FB:24:F3:1A:BB:49:FE:13:21:44
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e9ZoQM2HD_0P7vsk8xq7Sf4TIUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.187.0/24
45.148.117.0/24
93.88.204.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:e8:b6:d7:79:93:c1:08:64:60:01:18:41:77:60:98:b3:58:
48:ee:da:0d:4e:6e:aa:b9:fb:94:5c:5c:08:23:f8:2d:b7:7c:
3a:b7:1e:21:33:30:3a:be:dc:83:c3:f3:17:0e:f9:7a:65:04:
ee:e8:0b:5b:bf:e5:92:cd:66:44:a7:16:68:2e:64:cc:5a:fc:
e6:78:ed:5e:17:44:53:fe:b4:ee:86:42:e0:16:11:c8:ec:1b:
44:1d:a2:74:50:26:a3:6e:12:70:83:6f:14:eb:68:46:3b:d7:
d2:67:1e:4b:de:6b:8c:9c:68:26:e8:17:e4:ff:d7:60:9f:ea:
b3:e6:c2:1a:b8:cd:47:8e:18:d0:02:22:87:a1:41:f3:88:6c:
cb:93:aa:62:52:50:90:71:64:56:14:d2:28:06:56:44:fd:24:
63:03:cd:32:3f:4e:d3:3f:84:b6:7f:a3:72:4a:a5:ac:10:af:
47:d9:95:74:81:61:42:3c:e7:df:da:71:83:82:18:7e:7e:cc:
63:e5:43:c5:0e:a7:61:f5:de:08:bd:0a:79:b6:9c:2a:8f:fe:
38:3b:1b:b8:8a:44:8f:84:62:c0:8a:50:57:bd:7f:3d:b6:74:
1d:7d:e8:86:34:9e:4b:cd:68:7d:bd:df:4d:4c:d7:54:4e:e7:
8d:60:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 18:12:10 2025 by rpki-client