Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gGz5P0m26yEuIMBl8IV1HQQH3hs.roa
File: gGz5P0m26yEuIMBl8IV1HQQH3hs.roa (raw, json)
Hash identifier: hbba7RhnRwl84Iw6QPhF/1CveLSdpPH6nqKnVY3GC10=
Subject key identifier: 80:6C:F9:3F:49:B6:EB:21:2E:20:C0:65:F0:85:75:1D:04:07:DE:1B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01993EF2FC3C8AC0D2ADDBCC198A7AE9B33F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gGz5P0m26yEuIMBl8IV1HQQH3hs.roa
Signing time: Fri 12 Sep 2025 17:22:15 +0000
ROA not before: Fri 12 Sep 2025 17:22:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
194.36.34.0/24 maxlen: 24
194.36.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:f2:fc:3c:8a:c0:d2:ad:db:cc:19:8a:7a:e9:b3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 12 17:22:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=806cf93f49b6eb212e20c065f085751d0407de1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:ae:18:64:5d:a4:14:1b:e7:4f:4e:12:d8:
e0:43:4a:5e:f3:44:4f:3e:bb:c6:7d:64:f8:45:c3:
9c:ca:22:a1:b8:47:b3:85:5b:64:30:44:18:c2:6a:
bd:58:82:13:f9:2a:8a:78:4d:73:83:10:1f:5c:72:
3e:c9:2e:15:94:d1:77:5e:ec:e9:95:6d:61:5e:14:
f2:9c:fc:15:b3:55:d1:76:41:8a:cb:6d:be:e5:46:
1f:a5:a6:3f:01:cd:be:5f:4c:87:e2:09:f4:1e:08:
5c:84:ac:d7:7a:52:82:cc:3f:d5:b8:d2:96:65:91:
37:32:73:dd:98:a6:5b:61:cb:7f:55:a9:a3:e5:52:
38:d3:b7:5d:3f:86:36:1d:80:99:17:96:03:05:bc:
d6:7b:0d:6e:3b:c5:ec:6b:13:70:e6:f0:58:c5:d0:
6e:88:bb:c4:d3:34:c4:4d:f0:30:52:0d:a0:e8:ba:
27:16:48:e7:6d:bb:55:82:8d:af:da:9d:01:b5:d7:
2f:1d:c3:52:34:2d:96:1c:51:4e:f5:5f:83:87:be:
36:3d:5b:02:ed:52:e6:ec:51:c8:a5:6b:c0:80:5a:
77:e2:67:70:56:e8:01:dc:75:7b:cc:a7:95:c8:2a:
ed:35:57:93:65:3d:63:77:99:e1:f0:60:93:96:b7:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6C:F9:3F:49:B6:EB:21:2E:20:C0:65:F0:85:75:1D:04:07:DE:1B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gGz5P0m26yEuIMBl8IV1HQQH3hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
77.111.96.0/22
77.111.102.0/23
77.111.105.0/24
94.229.212.0/24
194.36.34.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:31:e4:f8:39:eb:bb:7a:81:ba:4b:a4:9f:6b:07:4c:56:d8:
ea:18:08:f2:7e:8c:f4:bc:95:76:16:5d:c2:31:87:16:83:ed:
b3:c3:fb:11:0a:bc:7f:93:97:be:98:cf:ff:0f:a5:a2:5f:4e:
18:4f:57:dc:cf:5d:d4:b2:ad:ac:08:d6:84:13:48:19:35:2d:
db:db:4d:8e:9f:96:29:72:54:75:b2:c4:00:a5:90:86:63:02:
0a:5e:60:c5:d7:d0:c5:cc:de:06:f0:63:91:c2:62:77:88:90:
c2:bc:be:1b:5b:b6:86:7d:6f:5c:cd:ca:c5:56:92:6f:f8:d8:
2e:b7:41:4e:b3:fe:8c:09:39:15:49:9a:24:c9:ed:0b:09:4c:
fc:34:31:2b:b4:4a:1c:97:93:91:04:5a:b8:47:1a:6e:64:90:
94:45:98:e5:cf:f1:8f:d0:d0:a1:2d:c2:d3:bd:cf:f8:35:6a:
ce:34:b5:44:c9:1e:4e:c8:69:6f:2f:74:17:fb:dd:13:86:89:
c0:3d:42:85:a5:6e:a2:3e:f1:f7:8f:77:a4:d8:cf:8b:6a:8f:
59:7c:9d:7d:b6:98:b7:10:da:f4:ab:4a:81:fb:c2:8a:57:81:
8b:41:04:90:e5:11:b4:12:7e:0e:a0:6e:6a:bf:8f:d8:73:8b:
f9:d0:ae:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 13:54:41 2025 by rpki-client