Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ASwUV_2DHn8mvE-Nn9IgwfE6oBc.roa
File: ASwUV_2DHn8mvE-Nn9IgwfE6oBc.roa (raw, json)
Hash identifier: 1GDnPUex6FisRrjFV7xAxpSp0YwEeOmRBNVhzWqBFQM=
Subject key identifier: 01:2C:14:57:FD:83:1E:7F:26:BC:4F:8D:9F:D2:20:C1:F1:3A:A0:17
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019986C17CF5FF87532DAAB285A4811342AB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ASwUV_2DHn8mvE-Nn9IgwfE6oBc.roa
Signing time: Fri 26 Sep 2025 16:00:51 +0000
ROA not before: Fri 26 Sep 2025 16:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 14.102.227.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
45.151.140.0/24 maxlen: 24
45.151.141.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
89.106.16.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
89.106.22.0/24 maxlen: 24
89.106.23.0/24 maxlen: 24
94.229.208.0/24 maxlen: 24
94.229.214.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
103.41.44.0/23 maxlen: 24
194.36.33.0/24 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:c1:7c:f5:ff:87:53:2d:aa:b2:85:a4:81:13:42:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 26 16:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=012c1457fd831e7f26bc4f8d9fd220c1f13aa017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:81:42:0f:52:85:8c:a0:63:30:42:af:ad:
37:88:be:bb:d3:ac:d7:da:fa:66:6c:e4:ac:1f:8f:
3d:16:54:e5:f8:1e:ee:13:79:f0:01:b7:15:04:f6:
6d:c7:eb:a2:7c:9e:95:4b:cb:b2:ca:7c:eb:28:c4:
26:53:ee:f6:98:16:a8:2e:0f:96:22:ac:4e:36:7d:
fc:57:d8:be:38:2e:6b:e4:aa:04:96:a9:78:6f:6a:
c1:20:50:b1:f0:ab:68:d6:52:9a:31:2a:f0:cd:44:
cc:88:43:00:28:f0:fb:98:d0:86:c1:e9:75:a0:ec:
dd:2a:ad:4d:19:c1:82:85:95:e7:91:95:2a:9c:4d:
9a:a8:9b:c2:7d:bd:9b:f2:14:20:27:e1:58:dd:d7:
09:65:fc:67:11:4b:21:d4:f4:7b:3f:18:c4:9a:ab:
74:74:12:e5:e4:62:1f:b8:b3:d6:96:e3:f6:d6:d6:
bb:7c:11:a4:2c:92:b4:a6:8e:93:38:44:38:bc:9d:
e2:04:03:e0:34:96:29:f7:e5:9f:e7:de:0a:53:65:
c6:34:00:63:23:e6:55:72:18:fd:24:69:94:33:19:
4c:54:aa:3f:be:8d:0f:c4:6a:46:45:19:a1:00:03:
d5:95:bd:15:25:01:34:e8:43:da:06:f8:e1:76:92:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:14:57:FD:83:1E:7F:26:BC:4F:8D:9F:D2:20:C1:F1:3A:A0:17
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ASwUV_2DHn8mvE-Nn9IgwfE6oBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.227.0/24
14.102.234.0/24
45.151.140.0/23
74.112.152.0/22
89.106.16.0/24
89.106.18.0/24
89.106.21.0-89.106.23.255
94.229.208.0/24
94.229.214.0/24
94.229.222.0/24
103.41.44.0/23
194.36.33.0/24
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:a0:85:26:51:d3:d5:73:50:52:d8:ab:23:72:ef:5a:95:c1:
fd:b2:ea:7a:f7:e9:7e:f8:c6:64:dc:46:12:3d:99:fe:d5:80:
1d:cb:71:76:de:3a:1a:53:68:2a:b7:fa:36:c7:b3:dc:ca:70:
3e:32:54:22:07:31:c4:66:93:35:f8:0e:cb:c5:43:c0:32:55:
e3:7d:76:77:45:4a:6f:af:3d:16:00:7d:bc:33:d0:01:2c:0d:
63:d5:25:72:60:52:d5:57:4b:2d:65:2b:15:4f:e2:93:5f:dc:
1d:d3:97:ef:dd:f4:c1:ac:cb:13:2f:d0:e6:8f:21:ef:ce:ab:
ef:91:a9:33:8c:e2:37:9a:ee:ac:53:84:57:2c:6b:ee:cd:93:
ff:55:27:30:56:68:d2:fc:8c:d7:b2:c2:4b:e8:d7:93:b1:a4:
00:17:86:39:f2:a0:17:7b:fb:0f:33:12:7c:2e:66:28:d2:21:
bc:b1:ee:f5:66:34:79:69:a6:7d:37:fc:ae:7c:92:e4:73:64:
13:be:c0:35:95:7e:ec:4c:bf:5f:b9:a3:21:51:1f:03:88:25:
d5:10:a4:3e:69:ba:ff:85:6d:4b:59:24:b6:4b:d0:09:be:17:
70:24:f8:58:a8:7d:19:ef:f4:e5:45:28:5d:59:ec:12:eb:6b:
1e:25:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:21 2025 by rpki-client