Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eQQOZ9DF67SUz__4dLyvsUqIB3o.roa
File: eQQOZ9DF67SUz__4dLyvsUqIB3o.roa (raw, json)
Hash identifier: bIFhqxzAuKRZcjIDWHlKvof0ghMW5XL4pBU5V+dfrHw=
Subject key identifier: 79:04:0E:67:D0:C5:EB:B4:94:CF:FF:F8:74:BC:AF:B1:4A:88:07:7A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01984DF6EE8B6D35361E3CB28C4AD4B5EA54
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eQQOZ9DF67SUz__4dLyvsUqIB3o.roa
Signing time: Sun 27 Jul 2025 22:18:05 +0000
ROA not before: Sun 27 Jul 2025 22:18:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214809
IP address blocks: 185.121.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:f6:ee:8b:6d:35:36:1e:3c:b2:8c:4a:d4:b5:ea:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 27 22:18:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79040e67d0c5ebb494cffff874bcafb14a88077a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:bc:2e:fc:04:5b:7a:9b:86:5d:64:bf:aa:
b7:32:98:46:62:ae:be:b8:29:74:8a:fd:6a:7e:8a:
48:cd:b8:be:87:54:f9:ad:9e:1a:b3:16:fb:41:83:
15:20:1f:cb:47:1f:99:27:38:0d:9c:1a:64:3d:e2:
c1:13:d9:6e:37:78:69:10:ea:da:26:13:f4:2b:ed:
64:a9:0c:4f:a5:1c:35:04:e7:5a:93:1c:ea:db:f4:
3d:c5:b7:13:6b:b8:93:12:29:5f:32:cd:32:f0:d4:
70:63:82:e1:06:50:79:87:41:5a:5e:5e:53:85:4c:
df:bd:0e:03:44:42:81:11:fd:50:c8:0b:d4:57:d6:
da:b0:e2:f0:d3:60:f4:1b:d7:67:23:69:3f:5a:4b:
33:04:49:10:02:c1:7c:73:08:7a:4f:24:13:de:49:
3f:75:b0:26:ad:6d:cf:db:ae:bc:91:36:ef:25:4f:
e7:3d:8e:5b:66:2f:f6:c4:da:c4:3f:d4:ef:97:67:
71:bf:e4:b3:ed:e1:63:f0:09:20:13:6b:e6:cb:ad:
69:7f:8f:c9:76:6c:dc:c3:9a:2e:51:bc:a0:a7:54:
84:2a:3d:21:eb:36:3a:b9:cc:2d:c4:06:bb:ec:ed:
82:9c:59:34:c6:3c:98:61:6e:ad:7e:1b:c6:b6:41:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:0E:67:D0:C5:EB:B4:94:CF:FF:F8:74:BC:AF:B1:4A:88:07:7A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eQQOZ9DF67SUz__4dLyvsUqIB3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
44:89:03:49:ab:ab:38:a9:1a:a2:4e:ec:6b:b6:0c:8a:f6:0d:
4a:69:b9:fd:8b:13:65:03:d0:8d:ff:a1:d8:b4:46:23:16:76:
2a:d2:96:40:93:4c:92:35:f0:3e:95:df:e4:b4:17:0a:d0:c3:
43:25:78:da:75:b6:d0:96:5e:cc:62:32:e5:5a:06:ee:83:f5:
18:45:e3:f8:99:79:cd:eb:4c:8a:25:b8:38:e8:6a:4d:52:c9:
ab:11:73:4f:89:09:54:58:e1:88:d9:c7:1e:36:77:7b:ab:02:
37:a0:b4:38:da:01:1d:f2:40:e1:ec:63:43:4a:46:fd:b9:c2:
84:a1:2a:de:c5:a1:32:62:ad:71:06:82:2a:d9:c6:a1:3b:5b:
4b:b2:6f:18:44:02:33:d8:1a:d2:6d:39:fb:34:5a:3c:0c:aa:
3b:44:31:48:a6:55:ba:bf:54:7b:cb:ea:91:d2:13:a8:e2:ee:
34:e0:82:d9:c9:62:c6:e1:e8:12:e8:3a:0c:a2:90:6b:ab:d4:
a5:eb:aa:1b:19:e6:a5:36:4a:fd:cb:9b:bc:64:56:f3:e1:e2:
bd:7e:7b:e5:f4:33:8e:dc:3e:fc:b4:92:fb:d5:e0:04:72:15:
b1:2b:15:89:58:25:6b:f1:d2:a3:aa:3d:81:8f:51:5f:1a:8c:
6f:55:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:23 2025 by rpki-client