Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/7EKPJd98KSht3jYczVSENCsvO08.roa
File: 7EKPJd98KSht3jYczVSENCsvO08.roa (raw, json)
Hash identifier: GFtyYIQvifngtFoHemaNy3ws0zGCNlXdXRcropdchcQ=
Subject key identifier: EC:42:8F:25:DF:7C:29:28:6D:DE:36:1C:CD:54:84:34:2B:2F:3B:4F
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 019905BCB23DC86B9C30D6E4041E3D93ED5F
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/7EKPJd98KSht3jYczVSENCsvO08.roa
Signing time: Mon 01 Sep 2025 14:44:36 +0000
ROA not before: Mon 01 Sep 2025 14:44:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 94.26.38.0/24 maxlen: 24
94.26.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:05:bc:b2:3d:c8:6b:9c:30:d6:e4:04:1e:3d:93:ed:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Sep 1 14:44:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec428f25df7c29286dde361ccd5484342b2f3b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:d7:f5:59:5a:17:23:ee:1c:0e:ed:ff:d9:
e8:19:ed:55:0c:de:1c:2c:f6:2b:02:dc:60:84:ba:
8a:0d:c0:f7:7a:9c:b4:63:72:1f:3f:59:bb:e8:f5:
c2:0d:a2:4c:b1:2b:be:57:c4:b5:ed:d0:6c:4a:14:
a9:34:43:23:7b:85:90:55:79:a6:ed:5c:00:a8:24:
af:9d:53:93:78:95:fa:eb:74:88:8a:ec:23:3d:b4:
45:fe:63:f5:34:1e:a6:eb:bc:a0:50:5c:6f:05:f2:
0a:2d:e3:0b:7a:b2:3c:d9:0e:48:98:10:31:e2:4f:
c2:ab:0d:6b:a3:f9:52:ac:d1:5d:d1:f6:e4:6b:ff:
38:35:f5:a2:38:94:69:06:51:5a:73:ed:0e:6d:b3:
02:3b:15:67:6b:c4:66:76:dd:56:a9:8b:fb:24:ba:
22:42:a0:78:40:79:91:20:bf:11:8c:d4:7f:d1:41:
e9:0f:47:f5:65:30:34:96:5d:f7:96:c1:57:35:44:
b3:e0:68:5f:55:3d:14:1b:fd:07:93:83:18:d5:89:
05:22:e9:c4:cd:d5:8c:65:9b:30:17:46:94:aa:af:
04:cc:e3:e1:5e:e0:51:a3:9e:4c:6d:e0:ae:d3:1a:
11:f1:35:d0:bc:55:44:91:2e:fb:bb:fc:0f:46:52:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:42:8F:25:DF:7C:29:28:6D:DE:36:1C:CD:54:84:34:2B:2F:3B:4F
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/7EKPJd98KSht3jYczVSENCsvO08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.38.0/24
94.26.105.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:80:61:58:2c:a9:c2:20:26:ef:28:c8:4c:38:7f:39:81:4a:
08:45:c3:23:8a:27:11:91:36:67:93:16:92:5b:1f:a8:cd:39:
29:86:8b:26:02:24:0c:4a:9b:18:cc:f5:4e:df:35:b5:b8:2e:
d8:f4:a6:1a:8c:92:1d:bf:2a:41:9b:b8:ec:15:be:e7:a9:3a:
6b:fa:dc:cd:5c:73:e3:ca:da:e7:e5:92:1c:ba:36:35:e9:c9:
5e:e5:16:c7:14:95:a8:f1:a7:2f:93:13:89:5c:f7:b1:f3:ba:
2d:85:f7:2d:2d:6f:4a:8f:43:0f:7d:75:65:f7:1d:9c:cf:6e:
51:12:e9:5e:fe:e8:ec:02:59:f1:51:03:f2:ed:99:15:54:15:
cf:fa:c1:8b:02:92:b5:d1:df:e1:d3:2e:20:bc:0b:fc:3f:30:
3c:c7:f0:4e:b5:ec:7d:e1:66:a8:79:41:86:4d:04:d7:58:0a:
dc:e8:ae:d7:59:98:9e:4b:f7:79:6d:e2:93:4d:2b:be:bc:55:
da:aa:b9:39:c2:61:0f:85:40:44:c0:65:10:29:2c:81:b6:93:
3b:19:b4:09:72:6b:6e:4d:9a:24:d8:7a:e5:7f:48:92:fe:63:
97:13:b6:6b:e0:ac:28:41:bd:f1:90:ce:86:b8:9b:f5:c4:1f:
96:5b:c9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:14:50 2025 by rpki-client