Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EyGUVfKyrf5u5os6ub1mTEft3tU.roa
File: EyGUVfKyrf5u5os6ub1mTEft3tU.roa (raw, json)
Hash identifier: oSwm9qqPpVadmOJlM0a7JKIv/9Mik/n3ukI+Pn+IXME=
Subject key identifier: 13:21:94:55:F2:B2:AD:FE:6E:E6:8B:3A:B9:BD:66:4C:47:ED:DE:D5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198EB3A55A74D273BC3E4F4054BB6888A5D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EyGUVfKyrf5u5os6ub1mTEft3tU.roa
Signing time: Wed 27 Aug 2025 11:12:05 +0000
ROA not before: Wed 27 Aug 2025 11:12:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 109.176.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:3a:55:a7:4d:27:3b:c3:e4:f4:05:4b:b6:88:8a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 27 11:12:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13219455f2b2adfe6ee68b3ab9bd664c47edded5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:16:c9:05:ef:50:e2:0c:0d:39:65:db:92:
9e:e8:c3:1a:77:dc:80:af:92:48:e2:10:3f:24:dd:
5a:b9:7e:6a:b1:82:0b:61:de:84:c7:2f:f1:9c:5d:
ec:9d:17:17:6f:4d:c1:fe:16:94:cd:87:89:5d:d3:
66:8f:a6:1d:83:d3:b3:51:d6:b9:60:59:35:fe:5e:
89:eb:80:76:8e:b4:18:37:8d:25:0f:99:bc:74:b5:
d7:23:9c:d6:8f:b8:db:a0:7b:86:ef:c8:40:cc:90:
a8:14:73:e8:eb:3c:c1:92:96:29:84:01:4a:b2:f3:
7e:4b:32:f1:36:0d:41:51:90:7d:37:b5:21:ef:d9:
3f:0d:44:b1:03:8f:bc:80:3b:2a:32:cc:05:bf:af:
f0:b5:1c:4b:2c:33:3a:a1:80:15:04:b2:1b:a3:88:
86:7a:79:ce:2c:28:ea:3e:91:b3:0e:05:1d:88:e0:
17:37:6a:9a:39:08:87:79:5e:78:fe:ac:75:7d:1a:
c4:b6:42:ec:d4:8c:28:a3:dd:77:78:dd:a7:55:f8:
4d:0f:97:cc:95:65:bb:52:af:ef:0c:21:df:ba:e3:
11:9f:ce:2c:ca:ee:f5:a4:e9:28:b7:5b:2f:68:fa:
f9:af:c9:d5:5b:c2:16:71:c2:3b:3e:9a:6a:15:f6:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:21:94:55:F2:B2:AD:FE:6E:E6:8B:3A:B9:BD:66:4C:47:ED:DE:D5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EyGUVfKyrf5u5os6ub1mTEft3tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:64:59:53:01:1b:5a:e1:61:26:40:ef:2d:ef:19:37:16:77:
b4:62:86:7a:f5:b5:c1:12:78:c1:13:cd:bd:2f:56:6c:73:06:
e7:bf:19:0a:c8:48:40:2e:89:4c:ba:88:fd:96:a4:f9:2e:c4:
e7:2b:db:a5:b0:23:24:5b:98:a2:ee:d0:ab:bd:50:22:82:78:
31:d5:8e:b4:b0:3f:f4:be:16:b5:a3:f6:c8:ce:fb:b4:7d:95:
30:9d:90:01:40:59:da:05:24:09:7d:c1:36:c8:59:99:4a:74:
f9:e1:59:e9:67:c3:62:a6:fc:ea:6b:5d:7b:6e:9c:63:ad:18:
32:c1:a8:e3:18:b8:7b:48:dc:1f:c1:dc:cb:02:eb:43:8b:0f:
d5:a0:ac:53:20:80:18:70:07:2f:e7:58:8f:78:69:91:f7:ec:
02:60:11:a5:b3:56:b0:4e:59:50:e6:b5:b4:7e:68:97:20:ea:
37:b2:58:ce:86:4e:7f:62:79:d3:a3:84:27:bd:82:85:e8:87:
8d:55:90:56:88:29:b6:2a:74:9f:0b:60:44:78:9d:5f:2c:eb:
24:a5:70:e3:71:6a:68:05:1b:5a:8f:69:b3:2f:7f:3c:6c:d3:
cb:08:e6:99:81:04:d6:64:98:d7:37:69:2e:8c:9e:43:00:da:
68:7b:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:06:53 2025 by rpki-client