Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vQVL1eoVw90wKnYooFSJTHFjTvE.roa
File: vQVL1eoVw90wKnYooFSJTHFjTvE.roa (raw, json)
Hash identifier: GUPxsEDTiq672tkjKSjEo9pfhwAosH3kuKTrdcVNaHw=
Subject key identifier: BD:05:4B:D5:EA:15:C3:DD:30:2A:76:28:A0:54:89:4C:71:63:4E:F1
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019A02D23A91553758F2E582B760C23BE489
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vQVL1eoVw90wKnYooFSJTHFjTvE.roa
Signing time: Mon 20 Oct 2025 18:12:03 +0000
ROA not before: Mon 20 Oct 2025 18:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 94.229.212.0/24 maxlen: 24
103.41.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:d2:3a:91:55:37:58:f2:e5:82:b7:60:c2:3b:e4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 20 18:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd054bd5ea15c3dd302a7628a054894c71634ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:a1:4a:eb:79:68:9a:bb:f6:f2:32:bb:58:
70:1f:87:d3:f1:15:8b:24:88:12:c8:86:ca:59:40:
3a:e5:2f:a5:49:e2:ef:0f:2b:2d:87:c4:b7:97:ab:
e3:1a:ab:81:55:e0:76:8a:55:8f:25:3d:f6:f7:96:
1f:8e:11:47:a9:43:9b:f4:33:17:08:cb:81:73:8e:
73:2a:64:91:f8:16:c1:b9:d2:88:a3:cb:37:d0:b7:
6f:d7:4c:06:34:10:62:dc:21:92:ab:f5:ba:47:4b:
cf:03:28:ca:08:84:b5:37:b4:64:3f:f3:aa:04:15:
fb:5c:d4:cc:31:5f:27:03:fc:35:a4:4c:83:49:9e:
33:09:ce:0b:f4:01:6e:da:16:99:ea:b1:54:1c:43:
ff:df:73:45:34:b6:1d:71:3a:8e:1b:8d:8b:ac:5b:
6f:e5:e8:3a:45:3e:f2:e7:d7:24:c3:43:82:97:17:
9f:7b:32:bf:5c:a3:16:0a:04:91:14:ad:68:a3:77:
e6:f6:2e:7d:b2:44:93:42:38:d1:12:45:77:67:30:
4e:21:de:ef:77:aa:26:43:56:76:84:84:56:88:dc:
28:46:31:c1:77:19:4d:0a:0f:b0:58:b5:e5:1b:8a:
17:b9:16:41:f1:7f:8b:2f:66:c7:59:10:e6:12:07:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:4B:D5:EA:15:C3:DD:30:2A:76:28:A0:54:89:4C:71:63:4E:F1
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vQVL1eoVw90wKnYooFSJTHFjTvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.212.0/24
103.41.46.0/23
Signature Algorithm: sha256WithRSAEncryption
60:ee:ec:eb:c1:3b:20:3a:94:06:ff:5c:a8:c5:d0:db:b7:11:
51:ac:3f:f4:2f:a0:cb:2f:6f:e4:bf:c0:e4:b8:18:7f:4d:4c:
87:71:06:b3:0b:21:63:6f:77:b6:54:d8:81:a7:2c:a4:18:74:
f3:d8:b5:c5:6d:e3:c3:2f:a1:14:ad:38:55:23:17:25:97:f8:
e3:88:b1:02:b5:dc:bf:2a:4b:4a:f5:2e:dc:9d:a7:9d:53:af:
fb:9c:1b:ef:23:46:2f:22:59:a2:b2:c6:70:a8:28:04:74:82:
e8:f1:09:70:98:58:05:3c:05:ce:08:12:c2:a0:4a:83:d6:0f:
10:4b:f4:72:e7:1f:e8:b5:9e:35:fd:1b:0d:92:e7:3d:e0:dc:
1a:c4:89:e4:39:c0:10:52:f8:87:7f:0a:19:b2:33:74:70:e1:
67:e0:ae:a6:f3:05:67:a7:f7:ac:8f:49:f9:0c:fe:37:22:23:
5f:f7:f2:2f:f2:01:11:13:c3:4f:bd:76:08:63:ab:10:1b:ba:
f4:a0:d0:40:cf:a3:08:a7:59:df:ff:d6:ea:90:56:07:85:6e:
94:92:75:d6:5a:ee:99:1d:47:80:29:88:59:6a:32:36:19:e1:
43:48:df:d8:e8:e6:c9:f8:a6:74:02:1e:85:32:92:8b:26:21:
b0:27:4c:c4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZoC0jqRVTdY8uWCt2DCO+SJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUxMDIwMTgxMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDA1NGJkNWVhMTVjM2RkMzAyYTc2MjhhMDU0ODk0YzcxNjM0ZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tqhSut5aJq79vIyu1hwH4fT8RWL
JIgSyIbKWUA65S+lSeLvDysth8S3l6vjGquBVeB2ilWPJT3295YfjhFHqUOb9DMX
CMuBc45zKmSR+BbBudKIo8s30Ldv10wGNBBi3CGSq/W6R0vPAyjKCIS1N7RkP/Oq
BBX7XNTMMV8nA/w1pEyDSZ4zCc4L9AFu2haZ6rFUHEP/33NFNLYdcTqOG42LrFtv
5eg6RT7y59ckw0OClxefezK/XKMWCgSRFK1oo3fm9i59skSTQjjREkV3ZzBOId7v
d6omQ1Z2hIRWiNwoRjHBdxlNCg+wWLXlG4oXuRZB8X+LL2bHWRDmEgdW3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL0FS9XqFcPdMCp2KKBUiUxxY07xMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvdlFWTDFlb1Z3OTB3S25Zb29GU0pUSEZqVHZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXuXUAwQB
ZykuMA0GCSqGSIb3DQEBCwUAA4IBAQBg7uzrwTsgOpQG/1yoxdDbtxFRrD/0L6DL
L2/kv8DkuBh/TUyHcQazCyFjb3e2VNiBpyykGHTz2LXFbePDL6EUrThVIxcll/jj
iLECtdy/KktK9S7cnaedU6/7nBvvI0YvIlmissZwqCgEdILo8QlwmFgFPAXOCBLC
oEqD1g8QS/Ry5x/otZ41/RsNkuc94NwaxInkOcAQUviHfwoZsjN0cOFn4K6m8wVn
p/esj0n5DP43IiNf9/Iv8gERE8NPvXYIY6sQG7r0oNBAz6MIp1nf/9bqkFYHhW6U
knXWWu6ZHUeAKYhZajI2GeFDSN/Y6ObJ+KZ0Ah6FMpKLJiGwJ0zE
-----END CERTIFICATE-----
Generated at Fri Oct 31 18:41:21 2025 by rpki-client