Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EPuDi-Y18j8-OQMOEoZK5Q7CfAI.roa
File: EPuDi-Y18j8-OQMOEoZK5Q7CfAI.roa (raw, json)
Hash identifier: 89ur7ghHGsUKOOUzN4IRsWwe2bCnYqIFpV76sAgNchA=
Subject key identifier: 10:FB:83:8B:E6:35:F2:3F:3E:39:03:0E:12:86:4A:E5:0E:C2:7C:02
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 019A7253FAF27DB2D9AA34981145532D2495
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EPuDi-Y18j8-OQMOEoZK5Q7CfAI.roa
Signing time: Tue 11 Nov 2025 09:51:37 +0000
ROA not before: Tue 11 Nov 2025 09:51:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39134
IP address blocks: 77.73.239.0/24 maxlen: 24
84.47.138.0/24 maxlen: 24
84.47.139.0/24 maxlen: 24
178.236.20.0/24 maxlen: 24
178.236.21.0/24 maxlen: 24
178.236.28.0/24 maxlen: 24
178.236.30.0/24 maxlen: 24
178.236.31.0/24 maxlen: 24
213.208.186.0/24 maxlen: 24
213.208.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:53:fa:f2:7d:b2:d9:aa:34:98:11:45:53:2d:24:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Nov 11 09:51:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10fb838be635f23f3e39030e12864ae50ec27c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:98:6a:b5:11:df:ca:99:13:9f:18:06:5f:
73:35:a1:5b:36:24:a9:75:fc:03:01:4d:56:d6:a9:
19:72:f6:86:5c:81:40:66:c0:57:97:f8:44:49:8f:
db:d0:55:1d:40:d7:12:33:fb:40:ee:28:12:1d:f8:
49:dd:61:15:2b:16:9b:28:45:48:04:6e:1d:bd:ee:
fd:90:8e:a1:ef:53:63:89:dc:92:6e:13:4e:82:65:
4c:32:43:06:8d:dd:14:b2:00:3b:64:9e:bd:86:9e:
0b:da:fa:dd:77:d3:1e:e5:3f:3c:08:c1:a7:ca:93:
86:09:25:b5:d4:0d:81:e3:3b:5d:0a:7f:b9:82:57:
2f:77:73:9f:a9:f0:ea:26:12:67:5d:79:d4:b9:c3:
29:a8:b0:41:78:ba:09:78:67:4c:fc:f0:15:ec:bd:
61:e7:0c:b5:b0:43:93:da:eb:7a:76:02:95:8d:8b:
db:49:8e:d0:03:7f:39:a5:4c:d1:90:b5:c5:d1:09:
90:88:f5:f9:a8:1f:be:86:2c:b1:a3:b6:d1:02:e9:
fd:58:31:21:7e:61:4c:2f:3f:58:15:7d:8a:fe:1a:
53:67:ff:ee:8f:2b:d2:80:dc:95:cc:9b:46:11:36:
53:ea:2c:f8:a6:47:87:8a:50:ac:0d:f6:75:bf:ab:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FB:83:8B:E6:35:F2:3F:3E:39:03:0E:12:86:4A:E5:0E:C2:7C:02
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EPuDi-Y18j8-OQMOEoZK5Q7CfAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.239.0/24
84.47.138.0/23
178.236.20.0/23
178.236.28.0/24
178.236.30.0/23
213.208.186.0/23
Signature Algorithm: sha256WithRSAEncryption
72:41:1d:24:a2:72:28:9f:68:dc:77:4d:44:4d:70:db:c7:91:
f8:58:88:5f:e2:00:81:ae:cf:c3:ae:b9:d1:fe:b7:cf:9b:74:
26:0f:4d:e4:3d:49:e3:17:25:70:5f:93:2b:30:e8:ab:bf:cf:
66:f4:73:58:5f:89:8d:47:5c:55:e6:b1:06:88:12:ea:ab:c5:
7a:39:dc:a4:ed:d3:0d:3b:14:e5:17:32:c3:35:82:f8:41:65:
91:c8:d1:d9:bc:3d:87:b9:2b:0a:d9:ad:b6:73:65:cd:4b:e6:
f1:28:e4:33:04:1b:7e:45:d1:1d:92:61:af:cb:0e:e9:c9:e8:
5c:c3:d3:ad:cc:9b:d0:6f:4a:d6:45:00:c5:f2:56:df:42:6c:
7e:bb:2a:94:b3:7d:01:a8:c1:e2:df:f6:92:07:0e:21:dc:9b:
08:38:3d:67:54:cc:91:ed:88:c0:c7:e0:aa:fa:4e:a5:90:04:
e6:a8:a4:1f:38:10:cf:b8:b1:3c:95:99:50:ff:a1:94:f0:d0:
63:12:e3:4b:35:96:57:ce:09:6e:5f:f6:dd:10:fc:af:ed:8a:
c3:8f:e6:ad:6c:19:14:73:f0:71:3f:3a:e2:44:2f:71:c7:ab:
80:68:f3:3e:04:4c:c0:5b:2f:93:f8:6e:c5:ce:92:d0:8c:01:
f4:96:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:29:34 2025 by rpki-client