Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vnYBpIUirR-i6ek7JV1PscRwnno.roa
File: vnYBpIUirR-i6ek7JV1PscRwnno.roa (raw, json)
Hash identifier: 3WbeUPyXumNv+WXfFVvlbNcWNUcKw+0w3hM5qihmX5U=
Subject key identifier: BE:76:01:A4:85:22:AD:1F:A2:E9:E9:3B:25:5D:4F:B1:C4:70:9E:7A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0198F1559D70E07C0E73A85E25528260E1E2
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vnYBpIUirR-i6ek7JV1PscRwnno.roa
Signing time: Thu 28 Aug 2025 15:39:36 +0000
ROA not before: Thu 28 Aug 2025 15:39:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 77.111.98.0/24 maxlen: 24
77.111.108.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f1:55:9d:70:e0:7c:0e:73:a8:5e:25:52:82:60:e1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 28 15:39:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be7601a48522ad1fa2e9e93b255d4fb1c4709e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:8d:f5:61:8d:de:b7:b0:04:74:21:00:2a:
46:a4:c5:44:a4:53:6b:5c:b4:3f:16:0e:40:23:ff:
ed:d6:cf:1e:90:34:15:92:dd:7d:35:d3:90:36:6f:
9c:8e:d6:84:57:dc:16:b1:f0:9a:dc:81:f8:71:3c:
71:f2:95:53:ac:41:f5:6e:b6:c2:9c:c8:ac:20:a3:
e3:6b:4f:9d:05:38:ef:3e:15:c0:b0:51:35:b8:a1:
fc:01:f0:60:82:a2:58:48:65:27:52:32:0e:5e:b8:
3c:7f:96:b4:41:6d:c9:e9:ec:22:92:f7:98:7d:e8:
ae:96:c9:b8:5b:7f:d3:1e:5e:60:a3:04:52:9a:f0:
8e:11:a3:93:2b:f5:ce:3d:85:18:59:3c:55:fe:93:
6d:62:54:cc:b4:4a:e1:80:64:8a:f9:19:1f:79:e7:
b8:cf:f0:58:c4:94:93:9a:00:6d:ef:31:88:49:a4:
4a:8b:39:0a:28:c7:0a:e7:00:f7:77:dd:b4:48:34:
a3:90:55:6a:d4:be:31:94:96:90:f3:3c:00:1e:e4:
9c:b2:43:c4:0f:44:39:f7:3a:6d:e3:e5:05:01:0c:
8d:36:55:50:36:6c:48:38:e3:36:f7:02:33:63:f1:
55:dc:74:7f:09:ed:b5:6d:89:fe:a2:b7:51:bc:92:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:76:01:A4:85:22:AD:1F:A2:E9:E9:3B:25:5D:4F:B1:C4:70:9E:7A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vnYBpIUirR-i6ek7JV1PscRwnno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.98.0/24
77.111.108.0/24
89.106.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:82:aa:da:c1:0b:df:a9:5f:39:44:1d:1e:ad:f1:e1:2e:1b:
d1:d0:a3:1a:52:20:ce:fc:a4:94:b5:37:d2:41:ca:02:18:92:
85:bd:b9:63:52:dc:f0:42:33:ff:29:84:cd:b3:b4:fa:21:97:
a3:cc:8e:03:b7:52:bc:df:27:87:6b:e3:8c:82:28:86:ca:ef:
ee:bf:2a:ab:0d:7e:b8:2d:b1:ef:2f:b2:39:5c:0b:f9:c6:1d:
a0:ba:dd:45:ee:ad:f5:58:f4:fe:b8:f0:62:bb:29:32:58:22:
c8:67:c9:41:63:10:c8:92:ed:71:72:10:cb:72:ca:4a:b9:77:
47:20:8e:ce:f8:50:0e:77:6b:61:fb:b6:4e:06:4d:54:4f:35:
d1:26:17:a8:5b:8d:46:2c:52:ae:da:69:68:36:2b:d9:7e:10:
87:3f:3c:8c:a5:1d:71:3d:ac:05:84:b5:a5:22:49:7d:b8:3b:
da:bc:a1:73:7b:37:42:c1:48:2b:b8:28:84:32:52:96:20:75:
49:4a:a3:7d:8c:96:c5:1b:bc:63:35:99:ec:f6:5c:40:c9:bd:
43:be:f2:7a:a8:ec:35:75:34:76:ab:8a:74:9a:ea:d1:e7:70:
c4:19:77:11:28:e8:ef:2e:7a:d4:e0:de:f7:7d:17:b0:01:31:
58:be:ca:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:38 2025 by rpki-client