Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/eEjb8DAP9bahq2O5j_HQb2xzlO4.roa
File: eEjb8DAP9bahq2O5j_HQb2xzlO4.roa (raw, json)
Hash identifier: fOyU7lhmD+ZIHBvuQudHEnoFTSwbSNrbIy4UHUxoCs0=
Subject key identifier: 78:48:DB:F0:30:0F:F5:B6:A1:AB:63:B9:8F:F1:D0:6F:6C:73:94:EE
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019A4DA3F936F71FE7129766D74B0269CEC5
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/eEjb8DAP9bahq2O5j_HQb2xzlO4.roa
Signing time: Tue 04 Nov 2025 06:53:03 +0000
ROA not before: Tue 04 Nov 2025 06:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.52.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:a3:f9:36:f7:1f:e7:12:97:66:d7:4b:02:69:ce:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Nov 4 06:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7848dbf0300ff5b6a1ab63b98ff1d06f6c7394ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:13:29:48:b3:ee:d6:11:5b:3c:84:e9:a8:
01:0d:ca:25:84:73:c2:d0:6a:ea:6d:45:79:e6:05:
c0:c8:df:dc:cb:0e:ca:b9:be:f4:99:97:3d:e8:1a:
ac:ad:b1:ed:36:90:08:60:f7:70:e2:ac:da:a7:35:
af:d1:98:db:53:e6:15:4c:da:2d:ba:b3:bc:e7:ff:
31:89:23:62:40:6e:27:35:bd:80:f3:07:c6:68:20:
29:7e:bb:4f:94:f4:f6:ca:ba:c2:e7:d9:ec:ef:2e:
32:65:46:83:5b:5d:91:93:d4:0a:d3:51:59:be:e8:
73:08:44:a1:08:88:4d:9a:03:53:6b:e0:48:1d:2a:
f4:19:7a:ad:5c:f5:be:44:68:8f:e6:cc:1e:12:71:
16:aa:27:f3:c6:bf:96:23:a5:4c:68:c7:42:e4:db:
0a:7f:f4:fa:67:d2:3f:ba:46:dc:e9:01:9f:08:82:
65:95:89:91:16:43:fc:62:0b:b7:f2:55:cd:69:0b:
f4:9d:60:9f:e3:3c:6c:05:13:41:48:fb:51:3c:89:
32:7c:e6:84:f3:56:3a:23:3c:b0:0a:e9:fb:7f:36:
f7:19:59:01:db:b6:30:98:ee:7c:a4:99:54:6e:4b:
17:77:c5:d5:48:89:5e:24:65:6e:3b:be:ab:a9:d5:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:48:DB:F0:30:0F:F5:B6:A1:AB:63:B9:8F:F1:D0:6F:6C:73:94:EE
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/eEjb8DAP9bahq2O5j_HQb2xzlO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.229.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:62:56:41:e3:25:fd:19:0b:c1:05:a2:21:b4:52:76:fc:fa:
36:9f:9d:91:8e:f8:14:f2:2f:4a:ab:b3:0d:c0:e2:d2:c9:7c:
c8:32:07:8e:0b:0a:4a:52:90:6e:43:24:1c:f7:2b:23:89:bb:
d1:1d:ac:a4:de:74:3a:91:62:b0:27:cf:3d:26:34:c6:98:6d:
80:e2:5b:96:52:c1:ca:8b:6d:31:0e:65:9c:00:ca:e9:f6:bd:
64:73:c4:fa:44:29:1b:57:f4:4d:36:71:a5:d7:84:14:19:35:
67:c4:70:4d:58:01:a8:9f:aa:3b:12:c1:87:bc:a9:50:d2:88:
f5:0e:d6:cb:8a:7f:d5:9e:60:5f:e5:55:e9:fb:da:7a:ff:98:
36:1a:40:02:10:41:b3:54:15:08:38:a6:8f:12:ab:a4:47:71:
a1:29:6b:a9:14:34:b4:62:f2:4f:90:18:fb:20:41:a9:60:74:
d6:b3:6a:98:1a:db:d1:5d:ae:2e:0d:8d:ea:b0:05:64:3e:56:
5f:8c:67:bd:74:f5:ca:ef:f2:18:83:a0:77:fe:05:c4:1b:71:
64:ef:1e:d3:14:6b:8d:f9:ec:12:a7:72:31:92:df:39:60:2f:
48:a2:90:e4:dc:4d:17:a0:d7:f1:b7:a3:3d:c1:02:a7:23:cc:
80:4b:a8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:28:16 2025 by rpki-client