Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/1EmEaa4KkDBpQbNlqnkHOnBa5ww.roa
File: 1EmEaa4KkDBpQbNlqnkHOnBa5ww.roa (raw, json)
Hash identifier: 6l4N9QRRCNsTigbsBNhTvCtVipnXhrnl+qFxr2bq3fo=
Subject key identifier: D4:49:84:69:AE:0A:90:30:69:41:B3:65:AA:79:07:3A:70:5A:E7:0C
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01983C9AF6F409B5C7555443F3E4DB665FDC
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/1EmEaa4KkDBpQbNlqnkHOnBa5ww.roa
Signing time: Thu 24 Jul 2025 13:24:05 +0000
ROA not before: Thu 24 Jul 2025 13:24:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204528
IP address blocks: 62.56.156.0/24 maxlen: 24
81.199.3.0/24 maxlen: 24
81.199.4.0/24 maxlen: 24
81.199.15.0/24 maxlen: 24
81.199.20.0/24 maxlen: 24
81.199.94.0/24 maxlen: 24
81.199.97.0/24 maxlen: 24
81.199.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:9a:f6:f4:09:b5:c7:55:54:43:f3:e4:db:66:5f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jul 24 13:24:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4498469ae0a90306941b365aa79073a705ae70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:6d:0f:82:f7:cc:35:c7:a8:47:2a:f9:87:
61:22:0c:05:5e:a9:f0:70:44:7f:9d:29:62:fc:86:
d8:26:1d:5b:db:4e:6e:7a:8a:2b:21:55:b8:55:6e:
02:66:cf:db:24:ab:49:96:e6:3b:7c:e4:f6:29:9f:
61:32:72:6c:a0:5b:7b:f1:ae:fa:a4:e6:ae:65:8f:
22:25:e6:0a:53:0d:b6:6d:b3:44:88:31:0a:03:91:
a1:47:f2:7a:7c:22:ba:83:5b:18:a2:b7:85:d1:26:
79:65:31:65:d4:5f:c6:26:ea:36:ed:e5:f7:56:c6:
22:b5:54:59:36:a7:1c:23:dd:95:63:07:cf:d5:53:
63:c3:fc:a8:d9:42:d6:c9:77:7e:30:bf:da:0d:be:
1d:bc:5a:5d:b9:d7:12:91:25:ec:d7:b7:95:2f:25:
b5:28:f4:80:81:24:08:73:d5:79:6a:7f:db:45:56:
61:ed:97:04:6e:1a:c5:43:37:2f:21:a2:94:03:79:
86:4d:12:9c:1a:f3:67:c1:88:21:22:09:3a:31:fa:
d5:3d:fb:0f:20:e8:af:26:d9:8f:e2:3e:38:42:ca:
7a:5a:c4:ac:fd:ea:2e:69:48:ef:1e:e2:66:67:cd:
46:41:6e:0e:74:3c:70:c0:ce:bb:08:af:3c:b1:fa:
6c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:49:84:69:AE:0A:90:30:69:41:B3:65:AA:79:07:3A:70:5A:E7:0C
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/1EmEaa4KkDBpQbNlqnkHOnBa5ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.156.0/24
81.199.3.0-81.199.4.255
81.199.15.0/24
81.199.20.0/24
81.199.94.0/24
81.199.97.0/24
81.199.201.0/24
Signature Algorithm: sha256WithRSAEncryption
73:cb:8c:d9:1b:32:5a:d9:6a:67:89:c5:0b:72:cd:ee:a7:eb:
76:83:84:c1:ce:42:b7:79:8e:ef:58:da:f0:f4:df:d9:77:bb:
af:b0:0d:e6:dc:36:48:85:7e:64:73:f7:7a:bc:de:e8:a8:46:
91:7e:7f:b1:a6:29:52:2c:5c:6d:b9:ce:00:ec:3a:81:ce:1f:
b7:7e:99:0c:6c:e2:42:fe:9d:97:68:78:0f:50:26:d6:c7:06:
e2:e9:d7:a0:ad:1a:cc:75:aa:6b:ca:9d:e9:3f:b7:37:d6:f8:
8f:64:16:57:5d:3e:17:e7:06:fd:c0:85:10:a4:6d:cc:2d:bb:
95:fc:50:e7:34:af:b1:1b:5d:02:59:08:86:8e:43:3c:70:8f:
92:6f:cc:1a:09:b6:66:f2:c3:27:95:28:fc:ef:ef:1b:f6:c2:
fe:e0:eb:c3:2a:3d:3e:21:18:48:34:7b:82:76:65:8b:43:65:
67:69:d1:98:34:80:82:12:13:90:3b:19:16:45:8f:00:09:03:
ad:9f:98:45:f3:00:91:00:2e:d9:58:0d:8e:59:8a:95:07:96:
bf:93:55:15:e2:19:1c:f2:34:e8:95:ef:e0:e2:b9:6b:cb:77:
cd:6c:44:51:74:4b:be:aa:60:2e:8e:03:4e:94:69:89:ff:ae:
85:44:0d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:58 2025 by rpki-client