Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/IO4wFMQiHSuX3LbTdgZ5-FsNtjI.roa
File: IO4wFMQiHSuX3LbTdgZ5-FsNtjI.roa (raw, json)
Hash identifier: FZH2WZoUoVGWeIwddFMcdadC+dHngE+MTGz0r6NEWBc=
Subject key identifier: 20:EE:30:14:C4:22:1D:2B:97:DC:B6:D3:76:06:79:F8:5B:0D:B6:32
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01991AB0961A9B07ECFDEFAC86EC41B1E377
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/IO4wFMQiHSuX3LbTdgZ5-FsNtjI.roa
Signing time: Fri 05 Sep 2025 16:23:24 +0000
ROA not before: Fri 05 Sep 2025 16:23:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136744
IP address blocks: 89.106.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:b0:96:1a:9b:07:ec:fd:ef:ac:86:ec:41:b1:e3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 5 16:23:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20ee3014c4221d2b97dcb6d3760679f85b0db632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:d0:fc:33:23:43:86:53:88:d9:39:50:38:
57:e3:98:9d:0f:89:50:cd:ba:eb:1b:ca:82:98:60:
1f:e6:4f:8d:07:0f:30:fa:e5:c8:1e:25:f5:a6:be:
7d:45:60:a8:7a:e9:71:55:9e:38:5a:04:8c:a7:7b:
10:84:7b:50:ea:2d:d8:2d:d7:05:f9:41:b2:e8:2d:
3d:2f:14:f2:11:f5:4a:5e:52:15:df:df:67:f6:69:
cd:5e:11:fa:da:18:ae:d6:57:a2:55:3e:e2:f4:bf:
39:30:23:a1:84:cb:16:96:40:76:08:a4:27:92:75:
70:eb:ee:06:f6:0c:ac:cb:f0:f1:d7:61:89:02:32:
be:6d:1c:31:cc:f8:60:7b:d9:a6:93:26:4e:ca:69:
9a:e8:3f:59:8d:7a:b9:25:bd:97:c3:48:d9:d5:be:
dd:41:be:53:c0:87:2d:cc:27:b2:bc:2b:bf:c2:1d:
60:50:ad:63:90:fe:c5:3e:f8:83:ad:5d:02:da:95:
32:c7:0b:57:9a:1e:a5:fc:d8:21:58:83:4e:29:40:
98:9a:9a:70:6a:64:a1:bb:60:b5:e2:6c:7f:9f:8b:
fe:93:28:06:90:33:ef:73:e6:8e:e5:28:c3:14:f6:
6c:f1:58:cf:24:ed:04:ea:6b:dd:66:e3:27:d9:01:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EE:30:14:C4:22:1D:2B:97:DC:B6:D3:76:06:79:F8:5B:0D:B6:32
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/IO4wFMQiHSuX3LbTdgZ5-FsNtjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.25.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4c:08:15:2c:c6:ce:a5:88:7c:12:a9:c8:18:f3:c6:98:fe:
09:35:e0:37:7f:d1:6f:a9:64:92:75:f5:7e:27:d3:ac:19:13:
78:c0:c6:0b:6b:e2:82:76:71:0f:46:79:63:21:46:75:0f:f3:
7e:eb:c8:9d:b3:96:12:fc:2d:53:f3:d0:c3:93:2d:96:c8:81:
48:4a:89:19:58:aa:eb:c9:f1:37:e8:6d:44:e2:35:d5:df:a5:
d1:f4:c4:54:8d:5e:d4:70:0b:a8:bf:ff:00:5e:07:97:3d:2b:
e4:4d:16:56:15:f6:53:fe:eb:d3:66:59:4b:a5:16:10:76:69:
06:62:58:1a:0b:5f:e9:63:05:91:b9:bc:98:82:75:5c:48:c4:
63:98:1c:d1:57:e1:3b:33:07:88:ac:42:1d:96:7e:64:f4:fa:
d3:cf:f0:39:58:e8:7e:b7:1e:2e:a5:fb:51:d5:10:5b:cf:3f:
0e:ae:9e:50:0a:26:20:8b:83:98:f6:78:69:11:e8:b6:5d:d2:
50:8f:ff:d3:67:8c:b9:19:3e:60:84:bd:5d:d9:96:3c:20:c7:
f8:bd:55:ec:66:1a:ac:58:b2:1f:8f:27:ff:66:68:e1:0b:c4:
23:f9:ee:90:c8:2c:7c:be:35:01:90:9a:5a:74:be:7c:c3:b5:
07:73:db:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 10:17:20 2025 by rpki-client