Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E3XY1nGwKr0yW7y-uX9iCF3eAXo.roa
File: E3XY1nGwKr0yW7y-uX9iCF3eAXo.roa (raw, json)
Hash identifier: JPAxkgggqwlg+FKGdswANj53+MBW1O7HOHlGltB3Imc=
Subject key identifier: 13:75:D8:D6:71:B0:2A:BD:32:5B:BC:BE:B9:7F:62:08:5D:DE:01:7A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019A25894501EEE43ED7B65618D127B970CF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E3XY1nGwKr0yW7y-uX9iCF3eAXo.roa
Signing time: Mon 27 Oct 2025 11:59:04 +0000
ROA not before: Mon 27 Oct 2025 11:59:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201591
IP address blocks: 93.171.136.0/24 maxlen: 24
93.171.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:89:45:01:ee:e4:3e:d7:b6:56:18:d1:27:b9:70:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 27 11:59:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1375d8d671b02abd325bbcbeb97f62085dde017a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:ba:16:d5:ae:03:a5:d2:ae:66:a6:5e:c4:
d4:72:ae:ad:e3:8c:e8:17:15:7e:48:07:0a:93:74:
c5:0e:aa:e5:58:13:2a:31:33:1d:d7:db:57:fa:aa:
c7:39:57:b5:c8:b3:7f:5b:bb:ef:7a:99:30:37:a7:
63:86:38:cc:cb:fb:63:e8:0a:45:c5:a5:91:bf:b2:
46:c9:44:8e:38:c4:58:92:35:79:f3:99:52:9b:4f:
0c:50:18:a7:96:3e:89:e8:52:38:d3:f1:8f:16:0a:
2f:f1:48:15:10:63:21:c8:85:32:b5:5b:09:e2:c4:
a4:33:1e:d0:0c:f2:07:43:75:42:92:3d:8a:08:5c:
d6:08:91:b1:e4:7f:0c:f7:86:8b:1f:f4:82:0c:cd:
d5:9f:20:90:c1:04:3f:8e:8d:24:74:59:dd:b7:eb:
ec:ed:e1:9a:7c:38:0e:6a:fc:77:10:6d:01:b7:57:
16:95:c2:2c:f5:43:e5:12:ae:f8:b8:95:74:32:f1:
05:5b:c4:50:24:a6:36:41:17:c0:31:69:80:74:de:
ea:5c:b1:30:d8:8d:64:ab:3a:70:72:98:c3:39:d7:
0f:ab:1f:aa:84:0c:02:99:66:f3:e7:56:ee:63:6a:
3f:f4:60:56:83:5c:8b:a0:fc:8b:42:6a:b0:96:3b:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:75:D8:D6:71:B0:2A:BD:32:5B:BC:BE:B9:7F:62:08:5D:DE:01:7A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E3XY1nGwKr0yW7y-uX9iCF3eAXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.136.0/23
Signature Algorithm: sha256WithRSAEncryption
97:a9:37:e5:48:8f:f4:f0:1f:e4:30:eb:0b:30:ae:d8:f0:a0:
97:eb:5c:53:a1:0a:41:1c:43:a2:35:5e:c6:b7:7e:ad:44:51:
50:6e:6d:28:ca:8d:2a:76:09:f8:ab:ea:e9:19:6d:40:de:a6:
d4:e5:f8:d5:06:6c:88:a9:a7:58:ab:e0:7b:b4:82:79:50:b1:
8a:e5:84:63:d4:73:83:8a:88:62:da:90:ce:04:f6:64:2e:91:
4d:26:7c:a0:89:14:b8:35:21:05:60:98:64:a3:f6:eb:7d:02:
17:06:df:a9:24:c1:92:17:c1:e4:14:ff:99:a3:81:fb:fd:79:
03:ec:7d:79:56:87:1b:b4:e5:f6:bc:ea:01:e0:8d:7d:d9:f3:
aa:38:79:8f:ea:d4:7e:a4:c9:24:d0:b8:a2:0b:4c:61:0b:26:
8b:fd:07:3b:31:5d:d2:28:88:1c:d5:16:8d:45:a1:1d:52:b0:
99:11:6d:76:d1:1d:a5:ea:b4:e2:58:b9:1b:64:71:69:94:f7:
b7:f4:f6:3f:b3:1d:07:33:9f:0a:67:7e:f5:3d:72:4a:a9:5a:
98:20:ba:b1:93:43:bf:eb:4a:ee:92:67:61:ca:20:ce:d2:13:
ac:53:18:bd:ee:f2:fc:c6:48:7b:21:9b:b4:2c:52:3e:bd:d0:
0c:82:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:49:07 2025 by rpki-client