Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/REULHpWUa51Rvk5huP9ooJTKE0U.roa
File: REULHpWUa51Rvk5huP9ooJTKE0U.roa (raw, json)
Hash identifier: KOGv3RRpK1kWzP/Qy5SHcQFeeqIjw0WqTF6qh/ewkMQ=
Subject key identifier: 44:45:0B:1E:95:94:6B:9D:51:BE:4E:61:B8:FF:68:A0:94:CA:13:45
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019A31183C8FC72A7AEBDEB3DB8B9E07E107
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/REULHpWUa51Rvk5huP9ooJTKE0U.roa
Signing time: Wed 29 Oct 2025 17:51:03 +0000
ROA not before: Wed 29 Oct 2025 17:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63199
IP address blocks: 94.229.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:18:3c:8f:c7:2a:7a:eb:de:b3:db:8b:9e:07:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 29 17:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44450b1e95946b9d51be4e61b8ff68a094ca1345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:f1:4a:38:43:17:f7:46:11:6d:b8:8d:c3:
2d:80:29:ee:ad:df:88:e2:85:ef:ac:2b:cd:fd:0c:
e7:88:be:0d:7d:9a:5c:c3:8a:a5:32:4b:10:3e:6d:
1c:15:b5:83:3b:61:73:0a:22:2d:ba:9c:19:6b:2b:
8a:e4:07:3a:29:d2:6a:9a:7d:f8:c5:93:11:aa:10:
54:6e:44:db:79:f8:3b:ad:b4:8e:7a:97:c0:46:79:
dd:7a:30:bd:52:d3:c4:fb:b0:2a:a1:75:c5:a6:86:
74:e8:d4:ad:00:e9:e3:16:45:a8:91:1f:06:bb:b6:
c0:a9:63:32:b8:bd:4b:0b:e1:f9:d7:78:72:e8:d7:
39:2a:33:3c:b2:f9:01:d6:d1:97:63:94:80:c1:9d:
92:8f:98:86:81:1b:c3:2c:37:39:de:5d:b4:bc:1f:
8e:99:3b:6e:f7:1b:51:10:11:6a:c8:d3:37:b1:9b:
58:42:dd:50:e6:d9:50:63:36:1d:03:87:fc:b3:f0:
ba:da:05:c0:c5:aa:df:cb:ed:ac:bb:b1:97:f3:26:
95:ea:18:09:31:4f:a6:78:38:2b:95:03:02:27:51:
fa:c2:46:27:18:b5:a4:98:f7:c1:d8:52:57:4f:fe:
d6:c7:d4:79:79:3a:e0:17:36:7f:4c:2b:5b:de:82:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:0B:1E:95:94:6B:9D:51:BE:4E:61:B8:FF:68:A0:94:CA:13:45
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/REULHpWUa51Rvk5huP9ooJTKE0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:71:58:c7:c9:e9:6a:05:8a:1d:69:bd:6a:ab:bd:6e:4d:92:
d4:05:95:5b:da:2f:32:0f:3a:85:87:39:f7:45:13:1b:a7:b5:
02:1e:1c:08:b3:30:29:6f:66:4c:32:b0:da:30:f3:0a:4e:e2:
85:71:1d:45:19:d4:7e:47:0a:28:d7:f8:9d:db:4c:84:f1:7f:
ee:95:cc:50:45:bc:fe:20:1b:a3:7c:e0:26:9b:4d:15:53:f8:
27:cc:73:e3:20:56:6d:c8:97:d5:08:42:dc:ce:36:ac:f7:c6:
cf:64:32:ac:26:47:34:7b:54:24:e6:8d:d6:a3:4d:9b:b6:98:
40:54:b9:f7:b3:4b:fe:26:e0:4d:be:56:ce:38:bd:f9:3f:0f:
b2:d3:1e:f7:d7:9a:69:41:04:70:4b:66:94:aa:9d:ce:f4:1c:
12:3d:ae:7d:68:13:02:b9:a0:61:a2:ea:75:1a:d1:00:80:51:
73:dc:00:7c:db:ee:32:82:18:5c:a6:73:03:dc:03:ec:34:b4:
2c:f7:f6:b7:cd:6b:e2:93:be:85:fb:27:9d:e0:35:67:4f:39:
ce:9b:c8:3d:b0:b7:f8:bb:65:e6:b3:4f:3d:22:40:3c:0b:bb:
b9:40:be:b6:8a:46:6f:f0:83:32:2d:c3:e1:3a:97:86:36:82:
08:b6:28:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoxGDyPxyp6696z24ueB+EHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUxMDI5MTc1MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDQ1MGIxZTk1OTQ2YjlkNTFiZTRlNjFiOGZmNjhhMDk0Y2ExMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq53xSjhDF/dGEW24jcMtgCnurd+I
4oXvrCvN/QzniL4NfZpcw4qlMksQPm0cFbWDO2FzCiItupwZayuK5Ac6KdJqmn34
xZMRqhBUbkTbefg7rbSOepfARnndejC9UtPE+7AqoXXFpoZ06NStAOnjFkWokR8G
u7bAqWMyuL1LC+H513hy6Nc5KjM8svkB1tGXY5SAwZ2Sj5iGgRvDLDc53l20vB+O
mTtu9xtREBFqyNM3sZtYQt1Q5tlQYzYdA4f8s/C62gXAxarfy+2su7GX8yaV6hgJ
MU+meDgrlQMCJ1H6wkYnGLWkmPfB2FJXT/7Wx9R5eTrgFzZ/TCtb3oJFpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERFCx6VlGudUb5OYbj/aKCUyhNFMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvUkVVTEhwV1VhNTFSdms1aHVQOW9vSlRLRTBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuXQMA0G
CSqGSIb3DQEBCwUAA4IBAQBdcVjHyelqBYodab1qq71uTZLUBZVb2i8yDzqFhzn3
RRMbp7UCHhwIszApb2ZMMrDaMPMKTuKFcR1FGdR+Rwoo1/id20yE8X/ulcxQRbz+
IBujfOAmm00VU/gnzHPjIFZtyJfVCELczjas98bPZDKsJkc0e1Qk5o3Wo02btphA
VLn3s0v+JuBNvlbOOL35Pw+y0x7315ppQQRwS2aUqp3O9BwSPa59aBMCuaBhoup1
GtEAgFFz3AB82+4yghhcpnMD3APsNLQs9/a3zWvik76F+yed4DVnTznOm8g9sLf4
u2Xms089IkA8C7u5QL62ikZv8IMyLcPhOpeGNoIItii5
-----END CERTIFICATE-----
Generated at Fri Oct 31 18:41:20 2025 by rpki-client