Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mPRZjTNIsO_rJ9WFe7ojkK-t9kM.roa
File: mPRZjTNIsO_rJ9WFe7ojkK-t9kM.roa (raw, json)
Hash identifier: sRAOt0+3V5fo7KwoRog5H3lO3eWhWT5YDTI4lHVGBYU=
Subject key identifier: 98:F4:59:8D:33:48:B0:EF:EB:27:D5:85:7B:BA:23:90:AF:AD:F6:43
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01991AAFABC11070DF709CBDAA120552788F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mPRZjTNIsO_rJ9WFe7ojkK-t9kM.roa
Signing time: Fri 05 Sep 2025 16:22:24 +0000
ROA not before: Fri 05 Sep 2025 16:22:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 77.111.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:af:ab:c1:10:70:df:70:9c:bd:aa:12:05:52:78:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 5 16:22:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98f4598d3348b0efeb27d5857bba2390afadf643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:c7:13:c7:15:f6:fd:22:5b:28:08:01:97:
cc:79:1d:42:fb:51:77:f6:fe:90:6a:88:4d:c5:3d:
39:68:b2:01:46:80:02:15:e9:bd:d6:50:bc:97:a5:
b2:d2:95:80:4c:9d:30:31:8e:33:c6:46:51:b5:ac:
e1:34:2b:6a:18:ee:70:29:c7:3b:fb:59:7b:94:97:
d8:04:61:e7:5a:c0:ea:e0:12:2f:a1:ab:dc:88:9f:
22:2d:68:e9:58:bd:bb:72:a1:93:e8:ff:d6:3e:7a:
cb:61:00:de:08:41:e8:29:25:b2:dd:7e:b1:d0:d4:
c0:99:ba:fa:a8:74:b1:01:d8:ef:d8:4e:ba:98:b5:
b6:49:6c:a0:81:31:39:b7:7d:26:78:ef:c8:1a:b1:
58:c4:cb:d2:2c:f8:8a:e4:12:38:76:8a:64:36:d6:
92:dc:3a:22:59:da:48:07:82:e5:aa:40:39:74:bb:
c4:5b:f2:b0:32:8c:2b:54:8e:73:15:3c:6b:af:21:
6d:03:c3:40:3b:83:8b:94:2e:0e:0e:57:8b:d3:f2:
d9:78:94:19:92:a9:1a:aa:79:28:10:65:63:19:12:
4b:3e:93:bd:4e:6e:65:d3:64:ef:43:8a:27:00:17:
62:45:3e:cd:dd:12:b9:58:d1:5b:a9:2c:6b:0b:bf:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:59:8D:33:48:B0:EF:EB:27:D5:85:7B:BA:23:90:AF:AD:F6:43
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mPRZjTNIsO_rJ9WFe7ojkK-t9kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/24
Signature Algorithm: sha256WithRSAEncryption
13:53:c8:14:31:db:3b:d6:3e:12:79:e5:ed:11:b4:7c:4a:dd:
d7:a0:26:f3:9a:d4:52:7d:2b:bc:f9:34:f6:54:e5:54:09:ce:
11:4f:e4:5a:b6:d8:b7:83:a8:46:30:98:da:b7:5a:6d:d1:51:
62:76:7d:ee:86:45:a0:5f:f7:fc:04:2d:9c:d8:59:31:5b:3e:
65:0c:5c:db:e9:48:53:bf:54:86:b8:5c:9f:e1:0a:d2:ba:2b:
c6:d4:ef:0a:e0:a1:79:2f:a5:8a:96:c2:b1:45:38:7e:85:d5:
fe:55:95:c3:01:68:62:b6:2c:77:22:4c:29:9b:17:c4:69:0d:
86:50:71:00:1e:1d:b1:ef:c8:b3:92:18:6a:3e:f3:43:ec:2b:
c6:04:f0:13:ae:c8:e5:bc:70:cd:79:83:96:e3:75:e3:f1:73:
b1:96:ff:0b:6d:c3:ba:77:fb:5d:05:b4:c6:0e:5b:7f:a5:5f:
c0:09:ae:4d:3d:4e:52:3a:46:8b:dd:bd:08:d9:d1:ca:d6:63:
30:c7:15:c6:d8:45:a6:5a:1b:8b:7f:8a:6a:cd:45:d4:22:79:
4d:ee:65:1a:49:2e:f3:59:2e:26:31:ef:85:95:e3:4e:d6:37:
88:b7:e3:24:79:dd:e8:e3:60:26:c5:19:8a:55:2d:0e:df:71:
be:0a:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 13:52:01 2025 by rpki-client