Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dIyRjZCBMqXrQE8Ic1nQMI5_xxc.roa
File: dIyRjZCBMqXrQE8Ic1nQMI5_xxc.roa (raw, json)
Hash identifier: Ub41pArt9JeVlyEhgzkOIGT/ST6UCzaPmtz3eSFREEY=
Subject key identifier: 74:8C:91:8D:90:81:32:A5:EB:40:4F:08:73:59:D0:30:8E:7F:C7:17
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01994E12C073077D5F6E81CD5260E51D7B05
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dIyRjZCBMqXrQE8Ic1nQMI5_xxc.roa
Signing time: Mon 15 Sep 2025 15:51:15 +0000
ROA not before: Mon 15 Sep 2025 15:51:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 194.36.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:12:c0:73:07:7d:5f:6e:81:cd:52:60:e5:1d:7b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 15 15:51:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=748c918d908132a5eb404f087359d0308e7fc717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:15:08:cb:75:f3:33:7f:72:a3:34:07:d5:
a7:bd:ba:5d:10:c3:15:86:86:98:01:5f:a8:17:46:
58:d0:dd:bf:b3:55:4c:8d:30:77:3c:69:12:a0:b4:
07:e1:8c:24:d2:27:96:b5:95:b2:92:47:08:f7:64:
a8:49:0e:d0:b9:d5:7e:a2:a6:59:3b:9d:ca:71:a3:
ed:15:e9:89:1f:48:7c:b9:6f:3f:6a:a6:59:fb:29:
94:88:ad:14:52:b3:d4:bb:04:2a:f9:76:d6:cb:3e:
16:fb:f0:ac:0e:30:ba:2f:4b:1a:6c:e3:a3:74:d7:
97:d0:67:d7:b0:36:08:f8:4a:5b:24:37:4f:81:3a:
e5:fe:f9:bd:1c:ac:19:83:d0:ea:a1:0c:9f:64:ed:
f1:b4:9a:12:58:38:f2:26:4e:c3:45:57:52:c8:81:
d8:34:79:6d:87:d7:f9:ca:f2:f9:04:38:c0:f0:d5:
60:7d:b5:d5:33:57:f3:4a:9e:11:a4:fc:11:bc:1c:
6a:e6:00:e3:2a:5a:26:7b:32:aa:f8:94:b6:fc:86:
3b:5a:cd:d2:63:ce:2e:22:45:2b:cc:1b:a3:89:3b:
5f:5a:0a:59:a5:6e:bc:1a:d2:25:17:12:e9:3d:80:
f7:11:e9:f1:07:1f:16:f8:df:a2:c8:de:11:c9:7f:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:91:8D:90:81:32:A5:EB:40:4F:08:73:59:D0:30:8E:7F:C7:17
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dIyRjZCBMqXrQE8Ic1nQMI5_xxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:fa:d9:e5:7c:1a:e0:d5:51:2f:05:de:ca:46:4c:13:49:3b:
0d:52:c6:7c:14:a2:82:53:d1:58:9d:88:56:ff:27:65:29:9e:
f1:a3:1d:b4:8a:84:4e:eb:09:39:77:7c:68:e5:c2:74:3a:52:
29:d2:19:de:e7:58:f9:92:ce:25:3f:c9:18:6e:e4:d0:e4:f3:
48:4b:49:41:13:a3:d1:cd:2d:29:41:29:52:74:de:9f:ac:a6:
0a:c3:12:48:6d:8a:70:2d:b4:38:23:b3:23:cb:56:d4:31:3b:
3a:e4:a5:8c:2b:1f:16:ee:c3:ce:2f:b6:7b:ab:bf:23:a7:29:
79:ea:41:84:3c:4e:78:a0:c0:82:a2:d5:37:5f:1a:82:96:40:
f1:48:ca:f2:39:c0:89:41:06:18:0d:d0:35:10:91:81:0d:5e:
38:e9:ba:e3:57:4b:2b:4e:b8:e2:9b:43:36:3b:a8:ac:02:8d:
53:08:e8:e6:df:cd:e6:d3:bf:9d:58:b9:d5:92:ab:20:3c:4d:
86:c0:2e:03:37:e0:18:67:87:41:8b:95:a9:ed:11:3d:fc:ef:
9d:2c:b0:1a:3e:69:fe:29:07:d7:b7:6a:85:a6:42:a4:a7:6c:
06:ab:8b:13:00:df:3a:28:4d:1d:35:2e:c2:a8:ea:af:7f:70:
7a:5d:b7:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlOEsBzB31fboHNUmDlHXsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwOTE1MTU1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDhjOTE4ZDkwODEzMmE1ZWI0MDRmMDg3MzU5ZDAzMDhlN2ZjNzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3AVCMt18zN/cqM0B9WnvbpdEMMV
hoaYAV+oF0ZY0N2/s1VMjTB3PGkSoLQH4Ywk0ieWtZWykkcI92SoSQ7QudV+oqZZ
O53KcaPtFemJH0h8uW8/aqZZ+ymUiK0UUrPUuwQq+XbWyz4W+/CsDjC6L0sabOOj
dNeX0GfXsDYI+EpbJDdPgTrl/vm9HKwZg9DqoQyfZO3xtJoSWDjyJk7DRVdSyIHY
NHlth9f5yvL5BDjA8NVgfbXVM1fzSp4RpPwRvBxq5gDjKlomezKq+JS2/IY7Ws3S
Y84uIkUrzBujiTtfWgpZpW68GtIlFxLpPYD3EenxBx8W+N+iyN4RyX/5DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSMkY2QgTKl60BPCHNZ0DCOf8cXMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvZEl5UmpaQ0JNcVhyUUU4SWMxblFNSTVfeHhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiQiMA0G
CSqGSIb3DQEBCwUAA4IBAQAs+tnlfBrg1VEvBd7KRkwTSTsNUsZ8FKKCU9FYnYhW
/ydlKZ7xox20ioRO6wk5d3xo5cJ0OlIp0hne51j5ks4lP8kYbuTQ5PNIS0lBE6PR
zS0pQSlSdN6frKYKwxJIbYpwLbQ4I7Mjy1bUMTs65KWMKx8W7sPOL7Z7q78jpyl5
6kGEPE54oMCCotU3XxqClkDxSMryOcCJQQYYDdA1EJGBDV446brjV0srTrjim0M2
O6isAo1TCOjm383m07+dWLnVkqsgPE2GwC4DN+AYZ4dBi5Wp7RE9/O+dLLAaPmn+
KQfXt2qFpkKkp2wGq4sTAN86KE0dNS7CqOqvf3B6XbeY
-----END CERTIFICATE-----
Generated at Thu Sep 18 11:25:18 2025 by rpki-client