Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/eIVBoZYmWyi6ozn5BdNbj-yqeZQ.roa
File: eIVBoZYmWyi6ozn5BdNbj-yqeZQ.roa (raw, json)
Hash identifier: YWyNrCtwMxe7t8UKuQjCzYgVHiUnc2yovQOh+gyTyaw=
Subject key identifier: 78:85:41:A1:96:26:5B:28:BA:A3:39:F9:05:D3:5B:8F:EC:AA:79:94
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01990BA43AAF91A4D0C628EC5CF84A5C4404
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/eIVBoZYmWyi6ozn5BdNbj-yqeZQ.roa
Signing time: Tue 02 Sep 2025 18:15:36 +0000
ROA not before: Tue 02 Sep 2025 18:15:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.122.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:a4:3a:af:91:a4:d0:c6:28:ec:5c:f8:4a:5c:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Sep 2 18:15:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=788541a196265b28baa339f905d35b8fecaa7994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:04:73:c0:35:fe:bb:80:72:1e:76:fc:29:
af:05:e0:f0:10:f3:fc:d9:9b:33:4c:05:d9:62:fa:
9a:db:c7:3c:92:18:49:25:01:fa:ea:c8:2a:df:6c:
f3:a0:45:36:ae:f1:ff:44:63:34:57:fe:2d:68:34:
f1:05:c6:8c:24:c6:75:5b:24:da:f1:9f:99:7f:a3:
b0:fc:ca:d2:01:41:54:28:7d:b6:a5:3b:b6:02:25:
48:78:a8:cd:b3:0d:1d:fc:c9:db:23:18:49:a4:6a:
1b:4a:ce:c8:e5:c4:13:c4:6a:11:56:91:10:bb:43:
ed:69:af:77:17:75:09:94:6d:80:86:87:bc:a2:7b:
f4:39:56:09:49:1f:a9:27:d7:8a:78:37:09:1b:33:
9b:8b:60:0e:d7:39:5e:20:47:64:a2:e2:dd:14:c7:
d7:15:0d:4a:19:34:9a:5a:11:6f:04:fd:c2:ed:b2:
e4:0e:45:68:84:a9:08:a8:3e:00:63:9f:6f:d6:85:
35:f7:68:ee:3d:a7:13:01:04:5d:69:47:e2:4b:37:
43:70:83:db:93:79:33:a1:b6:ea:1f:f3:5d:62:dc:
c9:34:ea:29:f4:e9:b6:9d:f2:3a:e2:e1:91:8a:f7:
16:fc:46:06:0b:1a:5c:a4:8d:76:8f:a0:a2:c0:8d:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:41:A1:96:26:5B:28:BA:A3:39:F9:05:D3:5B:8F:EC:AA:79:94
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/eIVBoZYmWyi6ozn5BdNbj-yqeZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:89:fe:06:ea:a8:0a:41:a5:51:a2:11:46:b7:62:c5:cf:01:
31:09:cb:02:09:f3:56:ea:a6:5d:18:50:77:70:de:ad:34:dc:
1e:34:97:93:ca:68:81:88:fa:72:e3:70:d4:34:d4:f3:0b:5f:
29:70:ff:6a:1d:46:ff:a7:41:0a:77:58:a3:ab:ff:ec:d7:f0:
6a:92:7c:20:28:26:0a:06:a0:4e:05:d4:d1:53:a6:2e:0d:e2:
3d:95:51:20:3b:32:a2:ad:7a:71:88:66:d1:24:c0:57:e1:a7:
15:04:b5:46:2a:f8:6f:8c:f4:c7:81:dd:d6:0d:b3:25:02:7d:
6d:b8:d0:8e:98:27:5b:55:32:8b:da:96:d9:a0:29:0c:70:f2:
04:0e:c8:e0:1d:03:0d:f5:e9:22:58:74:07:6c:36:6a:9a:18:
19:39:fd:e3:28:43:89:5e:39:2c:e6:16:03:e7:04:3a:d5:f1:
19:56:95:0d:78:ef:15:3e:d8:1b:f9:cd:f9:90:3b:82:56:c2:
b5:bc:78:a3:12:ae:7f:c1:04:85:61:e3:db:15:4e:bd:1e:fd:
e2:48:b7:31:ca:35:86:14:88:a6:36:0c:16:9b:66:fe:d9:dc:
49:29:92:35:a9:d1:17:5c:35:12:ab:e3:87:90:bb:80:8d:2c:
62:0e:8d:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkLpDqvkaTQxijsXPhKXEQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjUwOTAyMTgxNTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODg1NDFhMTk2MjY1YjI4YmFhMzM5ZjkwNWQzNWI4ZmVjYWE3OTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w8Ec8A1/ruAch52/CmvBeDwEPP8
2ZszTAXZYvqa28c8khhJJQH66sgq32zzoEU2rvH/RGM0V/4taDTxBcaMJMZ1WyTa
8Z+Zf6Ow/MrSAUFUKH22pTu2AiVIeKjNsw0d/MnbIxhJpGobSs7I5cQTxGoRVpEQ
u0Ptaa93F3UJlG2Ahoe8onv0OVYJSR+pJ9eKeDcJGzObi2AO1zleIEdkouLdFMfX
FQ1KGTSaWhFvBP3C7bLkDkVohKkIqD4AY59v1oU192juPacTAQRdaUfiSzdDcIPb
k3kzobbqH/NdYtzJNOop9Om2nfI64uGRivcW/EYGCxpcpI12j6CiwI3UOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHiFQaGWJlsouqM5+QXTW4/sqnmUMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvZUlWQm9aWW1XeWk2b3puNUJkTmJqLXlxZVpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo9MA0G
CSqGSIb3DQEBCwUAA4IBAQCwif4G6qgKQaVRohFGt2LFzwExCcsCCfNW6qZdGFB3
cN6tNNweNJeTymiBiPpy43DUNNTzC18pcP9qHUb/p0EKd1ijq//s1/BqknwgKCYK
BqBOBdTRU6YuDeI9lVEgOzKirXpxiGbRJMBX4acVBLVGKvhvjPTHgd3WDbMlAn1t
uNCOmCdbVTKL2pbZoCkMcPIEDsjgHQMN9ekiWHQHbDZqmhgZOf3jKEOJXjks5hYD
5wQ61fEZVpUNeO8VPtgb+c35kDuCVsK1vHijEq5/wQSFYePbFU69Hv3iSLcxyjWG
FIimNgwWm2b+2dxJKZI1qdEXXDUSq+OHkLuAjSxiDo07
-----END CERTIFICATE-----
Generated at Tue Sep 9 14:07:24 2025 by rpki-client