Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eCfrEIzZPuOW_GL-uyvnL0mzq4Y.roa
File: eCfrEIzZPuOW_GL-uyvnL0mzq4Y.roa (raw, json)
Hash identifier: tuem22p7YilNa6mf9FiAJlpDdT9qmTnYQ2v00SGy5y8=
Subject key identifier: 78:27:EB:10:8C:D9:3E:E3:96:FC:62:FE:BB:2B:E7:2F:49:B3:AB:86
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197ACC8DEA232F666B0BCFF4720E746BDCB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eCfrEIzZPuOW_GL-uyvnL0mzq4Y.roa
Signing time: Thu 26 Jun 2025 15:08:54 +0000
ROA not before: Thu 26 Jun 2025 15:08:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61003
IP address blocks: 89.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:c8:de:a2:32:f6:66:b0:bc:ff:47:20:e7:46:bd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 26 15:08:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7827eb108cd93ee396fc62febb2be72f49b3ab86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:16:46:f9:6d:b5:75:35:a5:8f:a6:b3:bb:
d8:57:d5:cf:b8:37:b2:c0:f1:06:40:67:fe:c2:ff:
47:49:ee:e8:9e:ff:11:a5:e5:8f:70:1e:19:77:14:
0e:1b:1c:31:75:82:46:a6:c6:3a:3c:18:71:d3:18:
2e:15:57:86:aa:52:b8:02:6c:d9:81:3d:0e:99:18:
66:df:d9:49:08:f0:77:26:13:ae:42:59:fc:7b:2e:
50:01:b3:bb:1d:55:5d:a1:1e:6f:6d:a7:26:99:71:
8e:8d:4d:68:b4:64:92:b3:92:63:48:34:5c:29:4a:
24:41:bf:eb:61:14:a4:0c:85:4a:63:e7:f6:ca:a3:
bb:7e:c5:64:c8:2e:03:6d:29:30:b4:d1:60:9f:30:
b5:4f:5b:6a:09:85:7f:0b:4c:36:2b:25:42:96:2d:
1e:47:21:de:44:e8:b3:92:0d:5a:57:9c:5f:dc:b1:
d5:33:66:c4:65:d5:75:7e:22:9d:f1:53:ed:4e:72:
31:bf:91:30:52:f9:d1:2a:ed:52:49:3e:b8:dc:76:
ae:34:8d:bf:47:bf:9a:c4:a2:70:f9:83:16:9e:c3:
5e:29:c8:0d:0b:67:6b:01:4d:f7:44:84:a5:7a:8a:
e5:4f:94:17:19:cf:de:0a:10:01:cd:7a:94:73:ad:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:27:EB:10:8C:D9:3E:E3:96:FC:62:FE:BB:2B:E7:2F:49:B3:AB:86
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eCfrEIzZPuOW_GL-uyvnL0mzq4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5b:29:30:da:49:0f:55:72:fb:14:6e:c9:cb:05:21:e4:d1:
4a:b9:d1:96:92:3c:66:05:a2:5c:22:2a:54:ca:72:6f:83:c1:
54:98:a6:4c:21:24:75:c8:ff:17:8a:c8:69:54:2c:8f:c3:19:
5c:70:a1:e9:0f:07:91:a9:ea:30:e7:0f:e3:39:0a:c7:57:7e:
b6:89:56:12:23:35:c7:01:e2:4f:7d:df:8e:e1:88:7b:ca:81:
5d:04:ac:60:64:6c:11:7c:4b:e1:b9:0a:d5:62:72:bf:3b:10:
94:a9:71:be:03:ca:d1:cc:47:f1:67:8c:1c:0c:93:55:bf:16:
60:ac:67:3c:5f:51:8b:28:27:ac:1d:b9:5d:ad:a1:74:91:8d:
15:87:bc:ef:46:12:b0:b2:2c:23:83:5a:46:54:ab:32:42:2d:
05:7a:ae:57:21:2d:78:21:6b:e4:cd:75:5f:af:33:36:c3:5d:
a7:56:5b:8d:ae:70:e7:ec:04:99:ab:e9:b3:f7:fd:ac:14:cf:
18:af:d0:2b:d5:92:9a:40:28:44:1e:2a:90:b9:c4:27:a3:e7:
17:82:7f:5c:e3:f0:c4:09:44:ce:ff:6d:0d:01:02:23:ab:0f:
d5:05:a0:12:33:b6:62:48:67:cf:a2:56:9c:a4:bb:37:68:bd:
f4:00:6b:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZesyN6iMvZmsLz/RyDnRr3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNjI2MTUwODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODI3ZWIxMDhjZDkzZWUzOTZmYzYyZmViYjJiZTcyZjQ5YjNhYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUEWRvlttXU1pY+ms7vYV9XPuDey
wPEGQGf+wv9HSe7onv8RpeWPcB4ZdxQOGxwxdYJGpsY6PBhx0xguFVeGqlK4AmzZ
gT0OmRhm39lJCPB3JhOuQln8ey5QAbO7HVVdoR5vbacmmXGOjU1otGSSs5JjSDRc
KUokQb/rYRSkDIVKY+f2yqO7fsVkyC4DbSkwtNFgnzC1T1tqCYV/C0w2KyVCli0e
RyHeROizkg1aV5xf3LHVM2bEZdV1fiKd8VPtTnIxv5EwUvnRKu1SST643HauNI2/
R7+axKJw+YMWnsNeKcgNC2drAU33RISleorlT5QXGc/eChABzXqUc61nYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHgn6xCM2T7jlvxi/rsr5y9Js6uGMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZUNmckVJelpQdU9XX0dMLXV5dm5MMG16cTRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdUAMA0G
CSqGSIb3DQEBCwUAA4IBAQBGWykw2kkPVXL7FG7JywUh5NFKudGWkjxmBaJcIipU
ynJvg8FUmKZMISR1yP8XishpVCyPwxlccKHpDweRqeow5w/jOQrHV362iVYSIzXH
AeJPfd+O4Yh7yoFdBKxgZGwRfEvhuQrVYnK/OxCUqXG+A8rRzEfxZ4wcDJNVvxZg
rGc8X1GLKCesHbldraF0kY0Vh7zvRhKwsiwjg1pGVKsyQi0Feq5XIS14IWvkzXVf
rzM2w12nVluNrnDn7ASZq+mz9/2sFM8Yr9Ar1ZKaQChEHiqQucQno+cXgn9c4/DE
CUTO/20NAQIjqw/VBaASM7ZiSGfPolacpLs3aL30AGtD
-----END CERTIFICATE-----
Generated at Tue Jul 1 10:43:53 2025 by rpki-client