
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/iCDvku3m5w_U1YbhR5731sLz3Jk.roa
File: iCDvku3m5w_U1YbhR5731sLz3Jk.roa (raw, json)
Hash identifier: HSMFpcX3vFuZLy6ku/T5MzZVValf2apsDIQyRtjYsiM=
Subject key identifier: 88:20:EF:92:ED:E6:E7:0F:D4:D5:86:E1:47:9E:F7:D6:C2:F3:DC:99
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 0198554E82D4E128FE9A1340DB40572ED440
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/iCDvku3m5w_U1YbhR5731sLz3Jk.roa
Signing time: Tue 29 Jul 2025 08:31:05 +0000
ROA not before: Tue 29 Jul 2025 08:31:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34766
IP address blocks: 95.142.110.0/24 maxlen: 24
193.202.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:4e:82:d4:e1:28:fe:9a:13:40:db:40:57:2e:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Jul 29 08:31:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8820ef92ede6e70fd4d586e1479ef7d6c2f3dc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:97:52:63:ee:40:d1:ad:4e:9b:4d:e3:94:
c0:66:a9:e0:32:34:3a:ee:16:92:df:eb:a5:df:b9:
77:79:8e:08:c0:8c:90:9a:35:1d:66:aa:6f:c9:3d:
13:0c:9d:51:c3:c0:91:04:55:96:2a:98:8c:6c:f5:
0f:f9:c8:2f:2c:88:da:76:bf:98:91:9a:23:a4:83:
09:d0:2c:5a:b0:40:07:59:1d:ee:1b:1b:13:18:d6:
f6:7c:17:57:f8:3c:de:c2:c7:30:57:6b:63:ef:9b:
51:3d:0b:42:92:63:d1:fc:08:51:6f:42:14:26:3f:
24:e1:cd:ad:a6:4b:fa:11:6c:03:fe:1b:64:2a:29:
9f:ae:29:2e:6c:94:1c:ec:b8:33:de:43:d2:04:bd:
fd:bb:8c:76:71:8c:a6:72:82:03:f5:9c:de:f7:81:
b9:28:99:f1:d1:ff:14:33:44:ab:15:87:b9:2c:20:
f4:bc:5d:d0:a5:e6:4b:3f:e7:6f:df:f0:c8:14:1f:
5e:46:ed:8b:f4:e1:89:df:cd:c2:7d:2e:be:94:2f:
6f:86:56:9e:da:09:d1:df:53:50:4a:62:17:98:4b:
fb:f9:ae:17:84:84:66:b5:5f:eb:fe:3a:6f:ba:2c:
4f:b0:36:9c:0b:97:50:39:af:0f:ed:3a:14:45:4d:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:EF:92:ED:E6:E7:0F:D4:D5:86:E1:47:9E:F7:D6:C2:F3:DC:99
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/iCDvku3m5w_U1YbhR5731sLz3Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.110.0/24
193.202.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:01:89:d6:f8:a1:f9:0f:60:89:22:6d:68:b2:10:ba:48:23:
a7:0d:92:2a:5c:7c:5b:d3:98:f6:34:38:07:73:08:0a:a6:5c:
b8:39:e5:30:f4:6c:a7:17:8b:64:53:66:21:c9:d3:ee:e7:86:
17:2c:ed:8f:ff:23:86:ca:2d:c2:e0:6b:61:96:b7:bb:87:85:
b9:e2:a9:f0:79:f4:94:01:a3:76:7f:e9:c2:10:09:4c:17:5b:
9d:1c:fb:13:74:99:b1:eb:96:bc:37:4f:05:91:32:ad:75:af:
af:cb:49:ec:b6:7e:d1:89:38:04:11:6c:de:5d:14:44:45:40:
82:a2:a6:83:53:57:0f:44:9f:f4:37:a2:ce:4d:a7:53:ef:2b:
fb:8c:ff:7c:96:b8:0f:5c:20:32:85:ac:2c:d1:4b:5f:88:85:
81:67:e2:77:24:39:1d:66:54:f9:9a:c8:00:af:e6:4b:d0:ec:
45:95:aa:61:e2:d8:7f:eb:35:cd:f0:e1:5f:02:89:ff:e9:ab:
8b:b0:37:fa:d1:d7:6e:92:11:05:70:32:16:8b:40:0d:c5:35:
94:5a:63:57:bb:ac:a9:26:4c:49:45:44:eb:8d:2c:d0:43:40:
4c:9b:22:77:45:47:e3:e1:bc:89:22:0e:bf:ae:7b:48:5e:0d:
0f:1a:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:42 2025 by rpki-client