Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YljEawz4wFtIfiGC7-hYhED_5bc.roa
File: YljEawz4wFtIfiGC7-hYhED_5bc.roa (raw, json)
Hash identifier: +KjQzqrRgq4G96eg/mtbzcV7g2WdIUxPpToelttdMfs=
Subject key identifier: 62:58:C4:6B:0C:F8:C0:5B:48:7E:21:82:EF:E8:58:84:40:FF:E5:B7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0198E7C414C40C16254C06EFF082BE4AC625
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YljEawz4wFtIfiGC7-hYhED_5bc.roa
Signing time: Tue 26 Aug 2025 19:04:03 +0000
ROA not before: Tue 26 Aug 2025 19:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32167
IP address blocks: 77.111.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e7:c4:14:c4:0c:16:25:4c:06:ef:f0:82:be:4a:c6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 26 19:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6258c46b0cf8c05b487e2182efe8588440ffe5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:d9:28:38:43:48:5d:f1:33:f7:37:17:42:
9b:14:04:0b:d2:79:9d:ee:0e:c1:d8:0e:e0:99:2c:
0b:c5:34:30:85:4f:3e:f1:fe:84:8f:ad:c9:ac:6f:
70:64:c9:54:2e:80:ad:e4:d1:f3:95:bd:0e:e0:79:
8c:95:41:c2:ef:cb:22:50:77:0f:20:7f:72:85:dc:
91:64:c0:3f:c6:32:20:2d:13:f4:b4:17:31:62:8a:
6a:56:2e:99:eb:91:a3:1c:5c:62:c1:f9:d3:ef:79:
70:a4:15:d7:12:80:a7:2c:c9:46:26:45:c3:07:1d:
ad:b4:94:58:45:58:5f:da:6b:5d:10:57:59:8c:4b:
70:76:84:3f:58:4f:f7:76:d5:2b:25:d2:aa:89:5e:
ac:ee:68:45:31:66:42:26:a8:a3:c2:dc:3a:94:2e:
39:ca:0f:74:ae:b3:8d:84:fb:11:5d:7f:66:24:e0:
66:c5:9d:5f:b4:94:51:8c:8d:84:cc:84:5c:2f:af:
52:a2:63:15:ad:bb:38:42:68:ef:82:a3:e9:20:c5:
89:27:cd:39:4e:4d:0e:06:c0:fd:4c:d3:fa:dd:48:
89:6e:b8:0f:43:eb:6c:a4:93:a1:9a:eb:fa:90:75:
f6:df:8d:dc:2b:b3:ba:d2:cb:8c:c3:77:9c:ad:50:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:58:C4:6B:0C:F8:C0:5B:48:7E:21:82:EF:E8:58:84:40:FF:E5:B7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YljEawz4wFtIfiGC7-hYhED_5bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.99.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:85:05:cb:e2:ae:db:30:a2:6c:ab:ea:03:61:d1:87:53:d0:
ce:58:07:1c:df:a5:9b:70:a5:be:8b:a3:d9:c4:9b:1f:66:e0:
e9:d5:36:a0:27:3d:61:11:8d:7f:c7:2e:61:8e:6e:1d:99:42:
3e:47:b1:d1:eb:88:3f:84:b7:59:3a:a5:af:df:53:9e:cc:17:
61:d0:1e:aa:48:01:d9:8b:a0:57:65:f0:35:37:7a:ac:44:42:
6c:8b:fe:92:08:f2:05:33:81:70:c7:86:73:e4:ff:4a:a7:66:
bd:3b:2d:58:3d:6c:e6:24:41:8b:94:78:82:d7:23:20:1e:0c:
14:25:3d:fb:f5:3c:0c:36:92:4b:8a:e3:3d:0a:1b:da:10:5f:
3d:10:ec:a4:96:07:61:f3:0b:42:b1:a3:a3:7f:f8:68:de:72:
e3:1b:71:84:a3:e4:f7:4c:83:7d:57:25:f1:e0:82:43:d3:c2:
1b:f9:e2:08:b0:bb:87:39:11:62:14:1b:a9:f7:75:da:b2:73:
14:67:18:30:01:a4:39:9e:4e:31:69:00:af:2c:36:2e:d0:75:
dc:3f:eb:f1:c5:8a:de:ad:d9:85:5c:f0:25:41:38:07:75:ac:
3d:07:4e:89:cd:dd:6c:71:e5:ef:df:6b:a0:1b:8f:22:b7:00:
74:1a:8e:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjnxBTEDBYlTAbv8IK+SsYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwODI2MTkwNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjU4YzQ2YjBjZjhjMDViNDg3ZTIxODJlZmU4NTg4NDQwZmZlNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRnZKDhDSF3xM/c3F0KbFAQL0nmd
7g7B2A7gmSwLxTQwhU8+8f6Ej63JrG9wZMlULoCt5NHzlb0O4HmMlUHC78siUHcP
IH9yhdyRZMA/xjIgLRP0tBcxYopqVi6Z65GjHFxiwfnT73lwpBXXEoCnLMlGJkXD
Bx2ttJRYRVhf2mtdEFdZjEtwdoQ/WE/3dtUrJdKqiV6s7mhFMWZCJqijwtw6lC45
yg90rrONhPsRXX9mJOBmxZ1ftJRRjI2EzIRcL69SomMVrbs4QmjvgqPpIMWJJ805
Tk0OBsD9TNP63UiJbrgPQ+tspJOhmuv6kHX2343cK7O60suMw3ecrVA37wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGJYxGsM+MBbSH4hgu/oWIRA/+W3MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvWWxqRWF3ejR3RnRJZmlHQzctaFloRURfNWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW9jMA0G
CSqGSIb3DQEBCwUAA4IBAQDZhQXL4q7bMKJsq+oDYdGHU9DOWAcc36WbcKW+i6PZ
xJsfZuDp1TagJz1hEY1/xy5hjm4dmUI+R7HR64g/hLdZOqWv31OezBdh0B6qSAHZ
i6BXZfA1N3qsREJsi/6SCPIFM4Fwx4Zz5P9Kp2a9Oy1YPWzmJEGLlHiC1yMgHgwU
JT379TwMNpJLiuM9ChvaEF89EOyklgdh8wtCsaOjf/ho3nLjG3GEo+T3TIN9VyXx
4IJD08Ib+eIIsLuHORFiFBup93XasnMUZxgwAaQ5nk4xaQCvLDYu0HXcP+vxxYre
rdmFXPAlQTgHdaw9B06Jzd1sceXv32ugG48itwB0Go7O
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:49:05 2025 by rpki-client