Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ENLLPezhWR3xNQf2TR0sxvASU2I.roa
File: ENLLPezhWR3xNQf2TR0sxvASU2I.roa (raw, json)
Hash identifier: WAmN+DtHsifvA7JPWxe/8LJttWhbkPL7HKjb3C+7zN8=
Subject key identifier: 10:D2:CB:3D:EC:E1:59:1D:F1:35:07:F6:4D:1D:2C:C6:F0:12:53:62
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019A35275DE06258946541E570816859402E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ENLLPezhWR3xNQf2TR0sxvASU2I.roa
Signing time: Thu 30 Oct 2025 12:46:03 +0000
ROA not before: Thu 30 Oct 2025 12:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 81.180.202.0/23 maxlen: 23
194.176.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:27:5d:e0:62:58:94:65:41:e5:70:81:68:59:40:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 30 12:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10d2cb3dece1591df13507f64d1d2cc6f0125362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:49:fb:d9:f7:43:7c:76:fc:bf:aa:54:21:
5f:ba:09:35:5c:27:a6:f6:f4:40:f2:e4:26:e4:a5:
3c:4f:3b:8f:2b:21:3c:52:8d:39:68:f5:66:6b:c9:
32:97:c5:a9:dc:bb:2f:7e:d9:85:66:9a:82:d9:71:
7c:f7:fb:c1:30:22:42:72:af:8e:3b:c9:3e:d1:6a:
f9:7d:ff:ae:0d:cd:68:24:0c:34:b3:3b:2f:72:16:
f1:7c:62:d3:1e:cf:cc:a4:34:56:01:e8:93:09:00:
ef:04:ec:e4:72:85:89:e1:45:5b:49:43:fd:64:70:
a1:c3:28:ee:17:5a:2d:f3:08:e8:3c:5b:be:26:34:
20:c6:8f:39:d8:36:aa:e5:9d:0d:3f:0b:53:36:1b:
56:3f:2c:7a:d0:58:4f:1b:b7:29:df:d0:9e:f8:88:
2e:d3:8a:0c:90:85:26:9e:f8:c7:df:b6:1a:92:8a:
b4:9d:43:92:80:3e:ec:19:d6:24:22:a1:74:06:39:
69:1c:88:94:e5:49:7d:0f:46:05:16:8e:d9:a1:0e:
27:b7:6f:3f:65:3f:fa:82:6a:3a:3a:85:e1:07:a1:
ed:dd:a5:54:47:b2:fa:0a:40:4e:2d:c5:35:6a:08:
98:80:13:ed:ac:37:28:b7:d2:50:a1:5b:92:9c:4d:
48:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:CB:3D:EC:E1:59:1D:F1:35:07:F6:4D:1D:2C:C6:F0:12:53:62
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ENLLPezhWR3xNQf2TR0sxvASU2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.202.0/23
194.176.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:8c:3d:be:72:80:16:98:d3:28:0a:83:74:d2:8a:44:e2:7b:
42:2c:22:80:b5:40:9a:59:b5:b5:d8:d1:f5:25:77:15:1b:80:
e0:1c:17:da:df:8e:54:ef:30:56:bd:e5:18:ff:9b:06:54:03:
9c:e3:1f:28:ac:e7:0f:39:30:47:f8:8f:26:51:ea:3a:f6:37:
1e:fc:cb:88:1f:42:6f:20:ce:f4:24:ea:93:e7:53:60:4b:07:
67:61:a8:b6:f9:d8:1f:ba:90:a2:4e:93:40:b2:3e:9d:89:81:
0f:17:02:f6:00:a9:cc:88:2a:ee:8e:ee:15:31:6d:84:f2:d6:
9e:10:c5:ba:a1:f5:01:b5:bb:56:06:40:f7:b0:22:a8:8e:3e:
af:b0:d9:74:a2:99:b2:24:64:17:ff:f9:99:21:8c:6e:62:ce:
56:9d:bd:f9:d4:e0:93:a1:14:45:d7:96:fe:df:ec:df:8f:e0:
e9:e6:27:51:91:08:46:6e:46:97:cb:50:f3:df:b2:d0:2b:ab:
2b:9d:ea:37:5c:4c:a2:3c:40:e5:04:48:16:89:81:b7:b9:eb:
c0:51:79:87:4d:9f:86:20:82:c0:c0:6d:5d:af:56:7a:5a:14:
2d:3e:06:d0:37:b6:2c:d3:6b:21:b9:fe:aa:40:28:3d:41:d0:
1a:56:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:19 2025 by rpki-client