Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/EQCLJlgmcNp6Np7zuKBQeJ1HMBg.roa
File: EQCLJlgmcNp6Np7zuKBQeJ1HMBg.roa (raw, json)
Hash identifier: k4j2l8243gZl27loBQC1srNx3SmtQxfanDuXrBBIDpw=
Subject key identifier: 11:00:8B:26:58:26:70:DA:7A:36:9E:F3:B8:A0:50:78:9D:47:30:18
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0198643FF331B6001370E22D2725C4D8E31F
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/EQCLJlgmcNp6Np7zuKBQeJ1HMBg.roa
Signing time: Fri 01 Aug 2025 06:09:29 +0000
ROA not before: Fri 01 Aug 2025 06:09:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:3f:f3:31:b6:00:13:70:e2:2d:27:25:c4:d8:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 1 06:09:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11008b26582670da7a369ef3b8a050789d473018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:a5:ea:9d:de:43:44:18:d0:ef:b0:72:bb:
9d:8f:d8:99:f4:53:dc:ee:59:9b:52:1b:ec:fa:8b:
74:76:ce:2c:5e:66:31:4a:88:99:cd:4b:a9:0a:c8:
68:d3:73:f0:68:e4:53:11:18:e7:e2:fc:95:e2:1f:
ca:63:6c:cb:bc:87:7c:16:c6:e6:fc:f1:a1:04:40:
27:05:51:41:67:ef:ea:23:e2:22:da:d2:66:8a:a2:
af:ba:34:f3:aa:68:9b:18:df:3b:df:03:1b:7f:02:
ce:56:a5:09:64:0b:20:0c:09:77:eb:47:fd:95:7c:
7c:69:7f:fe:7e:f9:f8:c4:ce:ae:a3:1d:fb:53:b3:
a8:68:1e:b6:0e:10:aa:30:61:de:f7:7b:0e:57:00:
07:28:c2:1a:40:53:1d:67:cc:69:4a:64:e3:89:45:
04:0e:b0:b6:8d:cd:8e:d4:80:9c:2d:60:5d:a6:44:
e8:c3:6a:8e:17:d8:ee:8c:26:07:e8:6c:58:0a:4d:
9c:fa:20:d6:27:ba:6d:b3:bd:ce:f5:6e:09:f4:e4:
66:92:34:c7:55:07:48:db:2a:5a:4e:f9:25:d2:9b:
e8:be:7e:b3:84:84:9b:00:8f:e8:3a:2d:b0:15:6b:
24:d7:e5:f3:b6:69:7b:0e:29:4b:84:55:4f:c6:c9:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:00:8B:26:58:26:70:DA:7A:36:9E:F3:B8:A0:50:78:9D:47:30:18
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/EQCLJlgmcNp6Np7zuKBQeJ1HMBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.176.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:93:1a:5c:0e:5a:3a:2b:44:38:bf:6d:41:97:dd:38:d6:0a:
a9:91:aa:44:51:67:96:4e:6d:fe:80:6c:c9:d1:28:cb:d9:cf:
4e:ec:8e:1f:4b:ff:9b:cc:47:33:cc:87:81:13:5d:b3:ad:07:
b7:86:57:83:b0:72:2f:a3:46:d2:e8:2e:b5:15:55:60:3a:b0:
62:ab:56:30:68:36:a3:fb:68:71:eb:b9:b4:69:b2:e7:09:c5:
d3:02:39:99:5f:25:c9:4d:21:2b:08:45:03:7f:f3:a1:8e:8a:
6f:45:b8:7e:67:9f:f6:71:ca:1f:17:8d:23:e0:df:ce:83:01:
63:a3:53:a1:37:4d:93:00:c6:09:5d:b2:8f:7b:56:a4:23:a5:
c5:c4:61:2d:d1:51:7f:4a:15:90:a1:9e:b9:1c:5e:4f:62:c6:
fe:27:77:d7:b3:69:76:fa:84:0e:65:ab:90:8c:51:d4:9f:15:
d9:63:3e:3f:7b:d6:04:10:67:87:99:6a:1b:8a:16:e0:21:00:
04:71:a7:f7:d0:9e:ac:7b:54:6c:59:77:07:58:61:ff:d7:dc:
35:39:0b:be:2f:d5:d5:be:e8:4c:14:be:c8:9a:6b:10:96:e9:
a1:51:0d:82:90:1f:d0:a4:cc:97:71:53:f7:b7:17:d9:c0:05:
4a:e6:80:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhkP/MxtgATcOItJyXE2OMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUwODAxMDYwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTAwOGIyNjU4MjY3MGRhN2EzNjllZjNiOGEwNTA3ODlkNDczMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD2l6p3eQ0QY0O+wcrudj9iZ9FPc
7lmbUhvs+ot0ds4sXmYxSoiZzUupCsho03PwaORTERjn4vyV4h/KY2zLvId8Fsbm
/PGhBEAnBVFBZ+/qI+Ii2tJmiqKvujTzqmibGN873wMbfwLOVqUJZAsgDAl360f9
lXx8aX/+fvn4xM6uox37U7OoaB62DhCqMGHe93sOVwAHKMIaQFMdZ8xpSmTjiUUE
DrC2jc2O1ICcLWBdpkTow2qOF9jujCYH6GxYCk2c+iDWJ7pts73O9W4J9ORmkjTH
VQdI2ypaTvkl0pvovn6zhISbAI/oOi2wFWsk1+Xztml7DilLhFVPxsngLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEAiyZYJnDaejae87igUHidRzAYMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvRVFDTEpsZ21jTnA2TnA3enVLQlFlSjFITUJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQET4SwMA0G
CSqGSIb3DQEBCwUAA4IBAQBfkxpcDlo6K0Q4v21Bl9041gqpkapEUWeWTm3+gGzJ
0SjL2c9O7I4fS/+bzEczzIeBE12zrQe3hleDsHIvo0bS6C61FVVgOrBiq1YwaDaj
+2hx67m0abLnCcXTAjmZXyXJTSErCEUDf/OhjopvRbh+Z5/2ccofF40j4N/OgwFj
o1OhN02TAMYJXbKPe1akI6XFxGEt0VF/ShWQoZ65HF5PYsb+J3fXs2l2+oQOZauQ
jFHUnxXZYz4/e9YEEGeHmWobihbgIQAEcaf30J6se1RsWXcHWGH/19w1OQu+L9XV
vuhMFL7ImmsQlumhUQ2CkB/QpMyXcVP3txfZwAVK5oCs
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:23 2025 by rpki-client