Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e9EbNXTtZLszG6OJzrlDr61Qg4E.roa
File: e9EbNXTtZLszG6OJzrlDr61Qg4E.roa (raw, json)
Hash identifier: sgpq4cyb+Rqu5pK11CvdlGJbCnlWTUH540C7eLwJals=
Subject key identifier: 7B:D1:1B:35:74:ED:64:BB:33:1B:A3:89:CE:B9:43:AF:AD:50:83:81
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A0B6116B8A638558FD64E8A6FA791B274
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e9EbNXTtZLszG6OJzrlDr61Qg4E.roa
Signing time: Wed 22 Oct 2025 10:05:03 +0000
ROA not before: Wed 22 Oct 2025 10:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 82.152.102.0/24 maxlen: 24
82.152.142.0/24 maxlen: 24
213.210.52.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:61:16:b8:a6:38:55:8f:d6:4e:8a:6f:a7:91:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 22 10:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bd11b3574ed64bb331ba389ceb943afad508381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:89:92:f5:0a:89:d3:5f:3d:01:f4:85:c0:
71:67:5b:4a:97:16:38:a8:e8:c3:4a:3f:a8:99:54:
70:f0:25:a2:48:6d:6e:3c:f7:75:5b:a6:1f:9b:ad:
67:09:46:b0:2e:41:61:26:73:e4:6f:e7:2b:a2:54:
68:fa:93:85:f2:2e:41:c0:2d:5a:b9:46:00:73:df:
68:08:30:32:9c:04:ae:ad:15:8f:72:ef:b2:c2:76:
cc:54:61:c4:fb:6f:48:2f:94:91:15:18:53:1a:34:
2a:2f:a0:d0:d0:5a:fd:58:80:73:b5:32:83:65:55:
bd:c4:f7:8a:fa:d6:5f:12:50:dd:eb:bb:a0:b3:ea:
c7:1b:21:20:b2:ce:47:ac:85:46:13:93:52:e9:c1:
85:76:ea:6b:b3:d6:8d:44:0b:66:94:e9:e2:51:16:
fe:4a:33:67:da:92:50:f2:a3:90:13:8c:70:fa:e6:
46:4a:df:a5:14:e9:a7:ce:f4:d0:05:fd:98:0e:cd:
1b:b9:6d:26:c8:df:52:3e:69:23:1b:8d:de:ca:e6:
0e:18:85:91:ba:ed:7c:33:ee:36:66:23:fc:37:3b:
d1:bf:2f:0b:c0:69:63:9f:5a:24:29:fd:dd:0a:f6:
73:ca:48:f1:44:03:94:9c:78:22:0d:e2:bf:33:a3:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:1B:35:74:ED:64:BB:33:1B:A3:89:CE:B9:43:AF:AD:50:83:81
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e9EbNXTtZLszG6OJzrlDr61Qg4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.102.0/24
82.152.142.0/24
213.210.52.0/23
217.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e9:02:fc:d4:73:b8:fb:f4:29:48:14:8c:8a:1a:88:c9:9d:
b7:d5:6b:d8:b4:05:3b:34:e0:2f:67:d2:48:dc:07:dd:e1:f4:
16:7b:97:3b:a4:62:0b:a8:01:fc:0b:77:12:b1:21:42:7e:93:
25:87:c8:34:4d:97:c7:e9:b9:26:23:24:75:84:04:04:ac:ea:
a8:2f:9e:f2:b1:3e:b1:64:f4:5d:2f:86:37:3a:fa:c8:29:2d:
41:f5:c7:dc:df:bc:f0:74:15:15:7f:be:6a:e8:29:cf:c1:49:
21:c8:88:76:15:33:80:b0:41:9c:5c:69:45:8e:91:4d:9a:4f:
b3:8f:6d:a6:29:fc:8e:3f:c1:1c:ef:13:fd:3a:e7:f8:10:03:
14:ae:b3:cc:b7:bf:46:e6:b7:41:fb:60:6a:3e:55:b7:a5:ac:
00:de:ad:29:1a:b4:1f:fb:3a:b4:dd:6e:c8:ca:4d:e0:10:ae:
38:bf:f8:56:29:91:bc:c2:8b:56:77:38:92:d4:8e:bb:48:93:
93:06:9d:52:66:a4:68:3a:43:66:08:61:15:96:f8:ac:46:4d:
0c:de:4f:5c:d4:6e:ea:b1:d0:21:18:3d:eb:37:b7:31:25:f4:
57:51:e9:5f:63:82:06:e8:0f:e0:63:1a:3c:93:fb:c1:69:2e:
71:df:6d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:15 2025 by rpki-client