Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zScGsNt9HCYX5iBVTAcdsWrtPRc.roa
File: zScGsNt9HCYX5iBVTAcdsWrtPRc.roa (raw, json)
Hash identifier: BBZ8VGKP6qBL1h9lM27z4qIrvOnqjSyM8pkeXDYPH3U=
Subject key identifier: CD:27:06:B0:DB:7D:1C:26:17:E6:20:55:4C:07:1D:B1:6A:ED:3D:17
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019A31183C0A0AB14182B88E1A1286A9347B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zScGsNt9HCYX5iBVTAcdsWrtPRc.roa
Signing time: Wed 29 Oct 2025 17:51:03 +0000
ROA not before: Wed 29 Oct 2025 17:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
45.151.143.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.98.0/24 maxlen: 24
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
77.111.108.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.214.0/24 maxlen: 24
94.229.219.0/24 maxlen: 24
103.41.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:18:3c:0a:0a:b1:41:82:b8:8e:1a:12:86:a9:34:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 29 17:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd2706b0db7d1c2617e620554c071db16aed3d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:cc:dc:fa:15:e0:61:b7:9d:d1:c1:81:3c:
10:4e:b7:21:c3:dc:1a:9d:96:16:64:5d:1b:c9:07:
d0:e2:80:e0:4a:35:de:88:0a:97:6c:4a:78:f9:8e:
04:ee:9e:cc:a0:5d:a4:cb:c8:f6:d0:41:2e:c7:08:
96:a8:32:16:4a:0c:20:fc:b4:f4:4a:a4:79:45:8a:
2c:c9:3a:0f:06:30:db:58:3a:e3:0a:e4:fe:47:fe:
51:0d:80:e3:ec:33:a3:88:f1:6e:0c:05:97:95:a9:
41:5b:21:e2:02:2c:61:9d:74:47:51:4d:21:89:38:
33:25:02:6e:d8:61:c0:59:62:09:2a:4b:8c:a2:e3:
a8:87:9c:f3:e2:d0:24:87:62:bc:a2:85:dd:e1:31:
d7:aa:ee:81:1f:5a:f4:b1:bb:80:9c:7d:dc:de:dc:
34:45:bc:98:eb:86:15:b1:7e:04:dd:3e:9f:10:5e:
d1:6a:40:d8:73:6f:4b:4e:02:75:47:e4:c7:8f:18:
e7:15:8e:e6:6c:8c:17:18:d8:5b:da:a9:1c:02:32:
18:97:b1:83:15:c1:a8:95:f3:84:f1:c3:09:28:6d:
be:79:cc:e0:01:e0:18:38:dd:ec:6f:a6:21:e8:b0:
96:4e:47:3e:d6:6d:2d:94:5a:42:7d:17:0a:4c:bc:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:06:B0:DB:7D:1C:26:17:E6:20:55:4C:07:1D:B1:6A:ED:3D:17
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zScGsNt9HCYX5iBVTAcdsWrtPRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
45.151.143.0/24
77.111.96.0/22
77.111.102.0/23
77.111.105.0/24
77.111.108.0/24
94.229.213.0-94.229.214.255
94.229.219.0/24
103.41.44.0/23
Signature Algorithm: sha256WithRSAEncryption
88:1c:6c:e6:e8:11:23:44:cf:1d:09:5e:d1:b7:90:bd:da:bd:
58:19:8c:f0:18:1c:a3:ca:91:31:d0:88:81:0a:4f:5f:7c:79:
b3:2b:d0:de:9f:5a:b0:c7:5d:4f:6e:c5:18:79:f0:77:5a:7d:
a7:6b:a0:f8:ad:9d:37:a0:ce:98:2a:85:4b:f0:89:9b:7c:34:
ad:99:a1:af:49:bb:c5:61:22:06:4d:21:97:04:15:f9:bd:aa:
8a:eb:77:1c:a8:da:2e:fa:2b:12:43:8f:e3:2e:fc:a5:9a:aa:
d8:d0:48:ee:bd:d9:53:29:25:a7:99:3d:3d:a5:c9:ac:34:23:
e5:e4:23:d3:9c:6c:66:54:28:4f:60:6b:4f:80:e8:c9:be:ee:
51:e6:e7:2e:2d:80:04:ae:b1:63:88:bf:7d:c2:62:70:20:b5:
c4:4b:66:c4:0f:3e:71:a7:d8:c7:41:ef:5f:a9:22:73:c9:09:
f4:33:ad:f4:0b:93:4c:cb:f6:0c:b9:77:4d:63:87:de:32:4b:
b3:ea:14:03:58:85:45:ee:db:76:cd:74:cd:52:fb:2c:36:ac:
ca:05:25:26:ef:31:a0:43:5e:01:28:d8:49:a5:49:cd:03:bb:
2b:35:cc:6b:d3:fe:22:88:28:a4:5b:ab:2a:63:b6:62:ff:69:
55:81:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:31:40 2025 by rpki-client