Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa
File: EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa (raw, json)
Hash identifier: sPo+QlStQLftRhFxrU43bCn4hciRtjvqBLkRQ+qUaq4=
Subject key identifier: 10:45:CD:0A:D1:7D:43:EA:FE:8D:D2:D0:1E:D8:8C:29:BD:A5:5F:F9
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 01985516A8A3460190FEFD1B0418490E99BC
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa
Signing time: Tue 29 Jul 2025 07:30:04 +0000
ROA not before: Tue 29 Jul 2025 07:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6205
IP address blocks: 185.70.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:16:a8:a3:46:01:90:fe:fd:1b:04:18:49:0e:99:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jul 29 07:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1045cd0ad17d43eafe8dd2d01ed88c29bda55ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:33:4e:4e:f0:a8:ce:fa:8d:0f:0a:3e:22:
6f:ef:d7:3d:ab:8f:04:43:1c:4d:4f:b5:1f:00:cb:
a1:76:5a:3e:14:43:3a:d4:40:7f:78:4d:fb:c7:d7:
43:1b:b5:d8:35:33:86:8a:35:33:bb:05:b7:64:b8:
f4:35:4d:bf:fd:a4:70:d2:33:cc:f2:91:9e:eb:0f:
3c:ba:a6:78:44:ce:99:c0:e6:ac:fa:27:81:52:1d:
5e:2d:10:45:75:e8:f6:fe:08:74:e8:99:b4:43:ba:
9e:19:01:77:7b:65:0c:8e:b9:5d:11:89:16:29:9c:
65:61:41:3f:5d:fd:7f:94:f1:a4:92:f6:40:f2:94:
69:cc:c7:62:ca:aa:9a:14:02:7b:bd:cf:37:2f:25:
02:38:17:27:a9:0d:fe:13:51:91:18:15:35:c1:0a:
72:23:a5:a9:4c:1e:5e:a5:ad:d8:3e:3a:73:52:15:
aa:0c:b1:8b:8f:e7:75:85:df:92:e4:0a:96:9b:cb:
85:ed:b2:45:5b:23:f4:cd:fe:14:a2:e0:98:0f:17:
09:74:c9:9e:ea:cf:2c:06:33:fa:e7:cf:0d:1a:20:
77:1f:f9:49:f2:bc:98:68:9b:09:9b:0f:e3:f3:b7:
12:21:91:8f:6c:71:20:45:13:eb:68:8b:e3:d1:33:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:45:CD:0A:D1:7D:43:EA:FE:8D:D2:D0:1E:D8:8C:29:BD:A5:5F:F9
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.97.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e6:6f:77:22:73:3f:c8:26:c1:a4:88:a5:f6:a3:7a:3c:e8:
21:2b:85:9e:fc:40:cf:ea:75:85:70:ca:f9:61:fa:05:b3:39:
d4:00:e2:53:80:56:5f:68:2a:83:8c:30:28:f2:5e:27:e3:f9:
f1:4f:df:73:c2:55:70:19:b8:fc:62:db:0d:25:ff:62:f5:2a:
46:6a:24:9b:a2:cc:4f:26:16:80:ac:50:49:71:cf:cc:35:84:
ff:9f:09:95:e4:09:8b:3a:4d:cd:54:2a:5d:e9:65:d9:79:00:
c2:4d:bf:6d:54:94:94:4d:da:28:e2:bc:5d:8a:7e:67:07:8b:
9e:3a:e9:aa:e6:57:da:d8:b8:a2:8c:4d:ce:09:d3:9a:97:cc:
36:36:b9:2b:d7:2d:21:a1:fc:11:e4:b0:63:94:dd:57:46:ea:
11:2d:64:15:7d:13:d6:a8:3a:34:c5:60:e3:fa:75:78:9a:ab:
7a:e0:00:34:16:3b:ac:7a:f2:9f:b6:3d:56:a5:94:b9:c6:da:
a6:d5:ca:4c:c3:f7:29:be:8a:27:75:8d:9b:fd:a8:1f:5c:75:
11:f9:8f:43:c3:25:b6:13:a3:b4:d2:8f:ee:1b:f1:0e:2c:09:
93:6c:56:12:e3:b3:5d:5e:9a:df:00:b6:9d:8b:fe:e4:f6:4a:
05:c0:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:20 2025 by rpki-client