Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/1-EZfm36xDgODSAJSHjoDKqosl0A.roa
File: 1-EZfm36xDgODSAJSHjoDKqosl0A.roa (raw, json)
Hash identifier: YJXvTARkaZsNuPWx3R0tfgZi43JI9omATgYJzudFfVw=
Subject key identifier: F8:46:5F:9B:7E:B1:0E:03:83:48:02:52:1E:3A:03:2A:AA:2C:97:40
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01999F90AC769C6E62BD8116753774251F09
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/1-EZfm36xDgODSAJSHjoDKqosl0A.roa
Signing time: Wed 01 Oct 2025 11:38:02 +0000
ROA not before: Wed 01 Oct 2025 11:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 81.90.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:90:ac:76:9c:6e:62:bd:81:16:75:37:74:25:1f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Oct 1 11:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8465f9b7eb10e03834802521e3a032aaa2c9740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:21:ad:9c:e4:fd:a6:f3:2a:35:50:32:ad:
b2:6d:37:b8:23:44:af:9a:a4:eb:44:b4:69:5d:e1:
bc:23:47:74:4f:b2:f6:80:b6:c1:2d:59:f9:4b:d5:
2f:76:52:7c:6c:63:e0:2b:3c:86:08:29:15:1a:07:
69:28:c5:3b:cf:c6:32:3d:7a:8d:5f:40:08:68:61:
d0:ec:73:07:81:a4:36:dc:25:8d:72:95:e3:b1:1a:
52:51:69:fc:f5:9e:4c:20:c6:1b:9e:37:3d:69:16:
63:7b:22:f0:a2:ea:2b:0c:c3:81:ff:1f:6b:9b:93:
10:08:fb:fb:00:2d:a8:b6:e3:ca:ee:33:a7:6a:2a:
42:79:f4:06:fa:ee:12:79:4d:50:9e:ca:4e:16:8d:
d0:6b:6a:00:91:ec:22:b3:12:76:9c:d0:4b:43:9a:
e8:8d:0e:75:64:3a:cd:84:d3:19:b4:62:0b:6c:ee:
39:4c:3b:7c:3b:d7:9a:7b:db:d1:f3:b3:94:61:29:
47:93:c3:27:90:f0:38:4d:d6:d8:b1:e9:e4:d5:e3:
f4:06:48:77:64:3e:1d:bf:2d:a3:8f:67:d1:27:84:
78:c8:3d:e6:6b:34:ae:2d:08:c5:10:94:05:65:d3:
06:7d:bf:90:9e:c3:58:dd:b5:e0:16:34:c5:43:08:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:5F:9B:7E:B1:0E:03:83:48:02:52:1E:3A:03:2A:AA:2C:97:40
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/1-EZfm36xDgODSAJSHjoDKqosl0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.31.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c0:30:a2:5c:c2:06:dd:14:ee:7c:31:c7:65:db:f3:d7:3c:
c2:91:2d:8f:af:f4:c9:c9:81:a4:99:66:c8:00:04:bd:c6:9e:
1c:20:84:31:0b:2c:b0:c2:eb:6c:e2:8a:84:87:68:93:ec:c3:
2e:0c:ae:da:3d:c6:ff:cf:43:d2:f7:c2:e4:bf:c4:c2:c7:86:
04:91:7d:28:9a:c8:af:c5:50:39:e3:86:19:1c:75:60:56:02:
2f:a0:ce:66:21:4e:95:77:54:0c:cf:93:0f:8b:9a:5a:35:5f:
b2:d0:7d:08:52:2a:8e:45:bd:1b:81:90:4a:bb:e1:ba:b9:4c:
bf:df:ef:d3:8f:db:31:47:5c:f2:69:41:54:14:df:51:64:4a:
97:d8:fc:63:b3:d5:0e:87:3c:2a:8f:b8:a8:fd:de:bb:b4:d9:
42:ed:8f:4d:a5:96:8d:8b:0b:3e:44:dd:9d:fa:e4:7e:d8:6e:
d4:36:61:1a:ab:d2:9e:30:03:6e:3e:1c:ac:13:5c:91:97:65:
a8:eb:84:a7:7b:29:c0:5c:a5:70:cb:c9:4e:ee:fc:ba:79:9b:
0b:90:c2:fe:6a:98:2b:53:6f:5f:1f:ad:91:03:0c:a2:bf:bd:
de:e1:b0:fc:a4:19:68:b3:73:61:00:3a:0e:67:13:f1:e1:c7:
6a:b7:53:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 07:55:44 2025 by rpki-client