Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8QlPsEnTTAt3iBztifcK31nvzDg.roa
File: 8QlPsEnTTAt3iBztifcK31nvzDg.roa (raw, json)
Hash identifier: iuteoxIjIm/yqguemNXSkeQ9n0f7eyPXo5t0pINALfQ=
Subject key identifier: F1:09:4F:B0:49:D3:4C:0B:77:88:1C:ED:89:F7:0A:DF:59:EF:CC:38
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019A311751B73FCE4D63A6CD03FBEDEF40DB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8QlPsEnTTAt3iBztifcK31nvzDg.roa
Signing time: Wed 29 Oct 2025 17:50:03 +0000
ROA not before: Wed 29 Oct 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 45.151.141.0/24 maxlen: 24
85.208.11.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:17:51:b7:3f:ce:4d:63:a6:cd:03:fb:ed:ef:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 29 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1094fb049d34c0b77881ced89f70adf59efcc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:2a:7a:f6:50:04:0c:49:cf:8f:89:09:12:
56:57:b7:ca:38:d0:51:20:7e:82:fb:48:81:71:2b:
4a:46:66:61:ff:24:35:e9:ae:e2:b9:54:e2:99:4b:
e0:f2:db:4c:08:16:19:5f:6a:b8:21:68:91:73:3c:
9f:58:90:04:80:f9:d2:62:63:bd:a6:f9:1b:00:05:
f9:e1:ca:32:43:24:78:3d:62:b6:69:55:74:36:de:
fb:48:ed:17:7d:f2:07:c0:de:f3:9a:3d:29:b2:4b:
9d:67:e4:cf:34:aa:02:56:eb:d2:1f:65:b6:21:37:
95:e9:cb:6d:23:70:ac:a1:27:bb:0c:97:c5:55:5b:
9d:1f:27:61:c2:a6:5c:f7:83:84:47:d0:51:70:88:
96:ff:d2:a7:74:0c:10:14:4d:e8:13:f1:91:14:37:
66:1e:f0:d4:51:3b:2a:ba:85:a8:14:e9:5f:ae:47:
50:6d:a6:3f:cb:9a:61:b1:56:9b:73:98:ff:81:f5:
eb:97:da:83:4f:17:27:d3:35:49:76:05:80:d7:f0:
bf:1c:4a:13:34:af:8f:42:c9:4e:12:63:45:d2:8a:
0e:ca:12:25:3c:c5:ef:ff:d4:94:2e:b4:a6:d1:8a:
f4:87:c8:bc:b1:41:37:85:36:32:bd:e1:27:56:27:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:09:4F:B0:49:D3:4C:0B:77:88:1C:ED:89:F7:0A:DF:59:EF:CC:38
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8QlPsEnTTAt3iBztifcK31nvzDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.141.0/24
85.208.11.0/24
94.229.209.0/24
Signature Algorithm: sha256WithRSAEncryption
77:41:2c:c9:4b:33:05:c2:9f:2d:df:70:73:8f:fa:82:ae:b8:
49:ac:4a:f8:c1:f8:ea:be:9b:75:b3:07:1f:69:a6:7e:b9:7d:
e5:2b:ef:0f:31:8e:54:e7:38:46:3a:a5:5a:10:16:28:12:49:
a2:48:72:3f:db:9b:ea:f5:ea:7f:56:d8:9a:bd:de:f1:72:86:
74:03:b4:82:fb:51:63:16:fc:73:ca:a2:8b:ed:23:ee:c6:52:
cf:38:b4:00:5c:ab:98:e3:61:4b:af:19:1f:7c:9e:8d:e7:ee:
64:17:e4:29:aa:38:25:92:b0:d7:f3:4d:dd:3d:45:23:2d:15:
df:d2:db:56:d5:d7:47:cc:49:01:db:b8:e7:03:c9:07:d9:65:
df:a1:57:c0:83:14:bd:64:a8:ff:7a:16:c1:1d:3e:7d:ea:00:
0a:37:e2:77:31:25:fe:91:61:d9:ed:12:ae:16:90:59:b6:c8:
84:c3:99:9b:7d:8e:59:13:2e:b4:35:37:e9:b1:ed:63:94:bf:
d3:67:06:cb:74:c7:05:2b:fc:ea:9d:34:44:82:e5:e5:3b:a2:
bb:76:aa:9a:7f:a9:0e:af:d8:dc:96:93:55:64:11:de:bc:16:
8a:6e:4d:48:d9:2d:88:30:a9:08:85:bb:70:a4:3e:ed:71:e2:
64:07:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 18:41:20 2025 by rpki-client