Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ezzIkm2UG1_Drbjklc8qPVompio.roa
File: ezzIkm2UG1_Drbjklc8qPVompio.roa (raw, json)
Hash identifier: ly1lA7vVzDO+GuYMNZtcofWpO0Wc4wNwO+rvEJYneEY=
Subject key identifier: 7B:3C:C8:92:6D:94:1B:5F:C3:AD:B8:E4:95:CF:2A:3D:5A:26:A6:2A
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 019A06746786B3A26501DD639EDD566EF452
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ezzIkm2UG1_Drbjklc8qPVompio.roa
Signing time: Tue 21 Oct 2025 11:08:03 +0000
ROA not before: Tue 21 Oct 2025 11:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 43.230.56.0/22 maxlen: 22
45.251.60.0/22 maxlen: 22
86.104.215.0/24 maxlen: 24
86.104.227.0/24 maxlen: 24
89.32.204.0/24 maxlen: 24
89.33.83.0/24 maxlen: 24
103.49.84.0/22 maxlen: 22
162.218.157.0/24 maxlen: 24
162.218.158.0/24 maxlen: 24
194.26.149.0/24 maxlen: 24
194.29.70.0/24 maxlen: 24
194.29.80.0/24 maxlen: 24
212.102.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:74:67:86:b3:a2:65:01:dd:63:9e:dd:56:6e:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Oct 21 11:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b3cc8926d941b5fc3adb8e495cf2a3d5a26a62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:7d:fa:3f:60:53:25:94:61:81:79:69:1b:
8d:74:36:fa:1f:c7:0e:7c:81:40:28:5d:43:a9:16:
f1:fb:b9:0a:90:ba:3f:a4:bf:c1:93:b7:18:d2:d5:
b5:eb:d7:71:8f:e8:6c:61:40:6b:6a:23:cb:8e:40:
ad:e8:9a:47:74:3d:f1:f0:1b:e4:73:71:f4:62:6f:
e0:de:69:1d:9e:3c:4a:65:a7:aa:83:88:7b:07:37:
e7:7d:61:3a:ac:3d:d1:fe:6c:56:6c:49:a0:32:8d:
14:2b:ba:00:ce:ff:ff:35:69:60:99:2a:46:55:1b:
ae:7b:53:90:2a:e1:60:3a:36:74:dd:bd:0f:1d:7b:
af:33:b6:49:86:d7:87:ab:84:b7:3c:1c:f8:fe:4e:
3e:d5:48:29:43:4a:1a:40:60:12:d5:8a:c4:e0:08:
77:d6:e9:b1:07:a2:cf:bf:d3:84:66:7f:2d:a0:b4:
a7:8b:d0:f1:5c:35:e6:5f:53:e8:2e:b6:da:a2:57:
c9:cd:b5:47:ce:0b:1e:04:47:6c:87:da:2a:c0:1b:
39:41:61:8d:60:0a:36:e0:32:ab:da:24:16:d0:4d:
e0:01:d9:16:37:a5:e4:73:9f:79:2c:78:95:ae:dc:
77:78:08:a2:48:02:e6:9f:12:47:18:f2:93:7a:3a:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3C:C8:92:6D:94:1B:5F:C3:AD:B8:E4:95:CF:2A:3D:5A:26:A6:2A
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ezzIkm2UG1_Drbjklc8qPVompio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.56.0/22
45.251.60.0/22
86.104.215.0/24
86.104.227.0/24
89.32.204.0/24
89.33.83.0/24
103.49.84.0/22
162.218.157.0-162.218.158.255
194.26.149.0/24
194.29.70.0/24
194.29.80.0/24
212.102.116.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:9b:fc:88:81:07:e1:05:53:2a:bf:65:40:15:00:c7:ed:22:
0b:c2:98:06:64:52:8d:0d:8b:f3:9e:03:dd:30:a1:85:f4:d3:
2c:80:2b:2e:6b:6c:bb:4b:cd:e3:f8:bd:8e:19:46:5f:28:fd:
fa:2b:1a:c6:e9:26:ea:34:65:28:93:4d:4f:4d:81:19:bd:ac:
9f:f6:13:fc:8a:d7:3d:69:38:9b:2e:b3:1c:4b:57:e1:02:56:
bb:0d:db:47:ee:0f:96:12:d9:07:7e:6d:f2:bc:f0:2a:4e:4c:
ef:9e:63:db:ec:b0:7e:5a:37:c9:1e:41:17:69:bd:f2:ea:bb:
67:a8:cf:0a:f4:41:4a:f5:cc:b8:a9:6c:a8:d2:d5:3d:37:1a:
b6:92:31:f6:00:e0:60:fa:4c:cf:6d:f0:e5:d8:82:32:ff:6e:
5a:c5:7b:5c:d5:38:a9:ee:b7:17:c3:0a:e2:d8:14:f5:ee:6c:
20:ac:69:b0:0d:3a:09:14:cf:15:bc:cd:69:a4:70:b1:d3:60:
80:1c:76:ff:c0:8f:82:bf:af:5c:9e:08:eb:78:f0:81:4d:37:
a7:ac:4e:47:5c:a4:8b:dc:e3:b8:8e:43:1d:2a:fa:8f:6e:f7:
8e:4b:25:be:bf:13:86:c8:85:3a:da:84:03:96:e4:93:42:bb:
67:7c:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:48 2025 by rpki-client