Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eiqfvIfjBw-eRSh3LPfk_8hHvQU.roa
File: eiqfvIfjBw-eRSh3LPfk_8hHvQU.roa (raw, json)
Hash identifier: KZu+4wfNQ2V2eo7ZrhA9G3udiS7jpKNg31VoW7m+bB0=
Subject key identifier: 7A:2A:9F:BC:87:E3:07:0F:9E:45:28:77:2C:F7:E4:FF:C8:47:BD:05
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01976A103B341E75A25E6F15DA7FC79F9804
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eiqfvIfjBw-eRSh3LPfk_8hHvQU.roa
Signing time: Fri 13 Jun 2025 16:12:18 +0000
ROA not before: Fri 13 Jun 2025 16:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 213.218.248.0/24 maxlen: 24
213.218.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:10:3b:34:1e:75:a2:5e:6f:15:da:7f:c7:9f:98:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 13 16:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a2a9fbc87e3070f9e4528772cf7e4ffc847bd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:84:6d:18:cc:d3:c2:30:4f:02:fa:c8:d9:a5:
fb:c5:1f:2d:fb:f7:23:fb:b2:1e:5e:c9:dd:9b:02:
97:82:b4:14:f5:b1:81:ea:68:6c:10:4a:85:9a:30:
11:dd:e3:46:e6:13:fd:82:1c:d9:12:71:91:04:e7:
b3:a0:e4:48:9e:40:68:b8:ad:08:8e:76:28:09:90:
35:4d:1f:17:21:40:a4:3c:6a:ed:7a:9f:28:61:5b:
83:1a:b8:1d:30:9c:72:93:44:9c:d7:d2:60:87:68:
61:cf:b5:2c:38:3a:9c:6a:2c:f6:52:99:13:a4:12:
69:1f:a1:43:15:34:80:e8:3f:c1:0d:0d:96:16:3c:
c5:0b:33:3b:65:2c:29:a3:93:f0:04:f9:6e:db:0f:
41:fb:f1:55:76:df:7b:e1:d4:1e:63:36:63:16:2f:
eb:4e:9f:34:e2:c0:fd:77:fe:18:57:08:0e:a5:7e:
47:4f:d6:26:a0:22:6b:e8:e2:d4:10:5c:3a:53:e2:
cf:d6:0a:73:08:a5:75:95:a3:ab:15:69:ca:65:ed:
2a:ab:47:df:66:ee:c3:a7:a9:48:f0:2f:9d:83:f3:
e7:61:9a:06:3e:ae:84:e6:45:dd:1b:17:31:e9:ab:
2b:bb:01:34:b9:da:70:4f:a9:49:a0:53:d3:48:b4:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2A:9F:BC:87:E3:07:0F:9E:45:28:77:2C:F7:E4:FF:C8:47:BD:05
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eiqfvIfjBw-eRSh3LPfk_8hHvQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.248.0/23
Signature Algorithm: sha256WithRSAEncryption
03:a7:93:19:65:86:f2:e8:c5:c3:4d:c0:9f:d5:b3:c9:c1:e1:
99:5a:6e:73:1d:23:4e:51:87:12:03:42:cb:d2:1e:1f:bf:58:
3d:9d:d2:2c:90:5b:69:37:d0:6f:65:5d:60:56:30:0c:36:ad:
80:55:6f:09:93:d8:0d:dd:44:53:a6:01:04:4c:ee:f4:97:30:
ab:99:e4:71:ed:bb:91:81:bc:f4:f9:49:ff:93:97:d1:1f:aa:
a7:a5:66:be:b0:17:4b:a3:66:38:bf:dd:5f:cf:76:a7:23:d1:
03:c4:5b:ec:67:94:0a:97:42:5b:86:a0:cf:14:15:96:6d:3e:
af:ea:11:87:d6:49:41:86:e6:02:00:3d:1d:2d:0f:ec:5f:c1:
af:61:ff:16:57:d9:2d:4b:56:b0:f9:06:c5:25:37:72:1c:7d:
6b:e8:5a:b3:10:01:bf:2d:a1:cd:98:62:52:30:aa:45:cb:68:
29:f9:0e:ad:ce:d7:05:34:9e:60:5c:fa:c9:92:b7:de:93:ab:
ad:84:23:05:ce:4e:0d:b3:23:0d:93:d3:53:43:18:96:fe:42:
49:ce:91:46:c3:7b:c0:c6:40:bb:03:08:89:70:86:30:4f:59:
7e:db:61:bf:45:bf:71:73:ac:d4:ae:8a:c1:1d:49:0e:0c:28:
8f:eb:be:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdqEDs0HnWiXm8V2n/Hn5gEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNjEzMTYxMjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTJhOWZiYzg3ZTMwNzBmOWU0NTI4NzcyY2Y3ZTRmZmM4NDdiZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/oRtGMzTwjBPAvrI2aX7xR8t+/cj
+7IeXsndmwKXgrQU9bGB6mhsEEqFmjAR3eNG5hP9ghzZEnGRBOezoORInkBouK0I
jnYoCZA1TR8XIUCkPGrtep8oYVuDGrgdMJxyk0Sc19Jgh2hhz7UsODqcaiz2UpkT
pBJpH6FDFTSA6D/BDQ2WFjzFCzM7ZSwpo5PwBPlu2w9B+/FVdt974dQeYzZjFi/r
Tp804sD9d/4YVwgOpX5HT9YmoCJr6OLUEFw6U+LP1gpzCKV1laOrFWnKZe0qq0ff
Zu7Dp6lI8C+dg/PnYZoGPq6E5kXdGxcx6asruwE0udpwT6lJoFPTSLQSiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHoqn7yH4wcPnkUodyz35P/IR70FMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZWlxZnZJZmpCdy1lUlNoM0xQZmtfOGhIdlFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1dr4MA0G
CSqGSIb3DQEBCwUAA4IBAQADp5MZZYby6MXDTcCf1bPJweGZWm5zHSNOUYcSA0LL
0h4fv1g9ndIskFtpN9BvZV1gVjAMNq2AVW8Jk9gN3URTpgEETO70lzCrmeRx7buR
gbz0+Un/k5fRH6qnpWa+sBdLo2Y4v91fz3anI9EDxFvsZ5QKl0JbhqDPFBWWbT6v
6hGH1klBhuYCAD0dLQ/sX8GvYf8WV9ktS1aw+QbFJTdyHH1r6FqzEAG/LaHNmGJS
MKpFy2gp+Q6tztcFNJ5gXPrJkrfek6uthCMFzk4NsyMNk9NTQxiW/kJJzpFGw3vA
xkC7AwiJcIYwT1l+22G/Rb9xc6zUrorBHUkODCiP675A
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:19 2025 by rpki-client