
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/EGSciJr8n7QeA1aj0mh8lYKldpM.roa
File: EGSciJr8n7QeA1aj0mh8lYKldpM.roa (raw, json)
Hash identifier: irPXEU5VRMLEauH8lSSs+qQLdHJGrVK87LUkKgvU3so=
Subject key identifier: 10:64:9C:88:9A:FC:9F:B4:1E:03:56:A3:D2:68:7C:95:82:A5:76:93
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01985CB08683CD43E7ED0D67FB7506C4339D
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/EGSciJr8n7QeA1aj0mh8lYKldpM.roa
Signing time: Wed 30 Jul 2025 18:55:29 +0000
ROA not before: Wed 30 Jul 2025 18:55:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 80.242.57.0/24 maxlen: 24
92.63.176.0/22 maxlen: 22
92.63.176.0/24 maxlen: 24
92.63.177.0/24 maxlen: 24
92.63.178.0/24 maxlen: 24
92.63.179.0/24 maxlen: 24
109.196.98.0/24 maxlen: 24
109.196.99.0/24 maxlen: 24
109.196.100.0/24 maxlen: 24
109.196.101.0/24 maxlen: 24
109.196.102.0/24 maxlen: 24
109.196.103.0/24 maxlen: 24
185.42.14.0/24 maxlen: 24
217.78.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:b0:86:83:cd:43:e7:ed:0d:67:fb:75:06:c4:33:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 30 18:55:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10649c889afc9fb41e0356a3d2687c9582a57693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:1d:2e:cd:5c:f6:23:af:85:e9:1a:b2:a5:
af:25:e4:18:e6:c3:99:df:59:65:13:1a:ac:c1:e8:
06:59:5b:72:b6:88:89:dd:0d:28:1d:02:7f:81:f1:
74:72:b3:88:a7:d7:93:4f:2c:2d:e2:28:53:18:b4:
e8:9d:84:13:2a:d6:a2:ad:00:a1:38:8e:51:d7:50:
ac:0d:3c:7d:d2:31:cc:ce:c7:81:1c:93:ce:89:4f:
4c:b4:92:a2:15:ed:37:1e:6c:ac:db:23:bd:c3:39:
1e:85:0e:08:b1:97:ef:3e:b9:3e:6a:51:93:78:9c:
3f:9d:e9:f9:6b:50:07:af:41:48:52:84:41:de:34:
8b:7f:1f:1b:52:90:ac:82:d7:3b:07:c9:1f:f8:9a:
ac:e2:d9:b8:95:e1:8e:fc:7f:be:25:b1:cd:8d:db:
81:0e:90:5c:5b:1e:55:28:df:cd:0f:6f:7c:b1:22:
a9:ac:3b:d9:50:19:aa:5b:7a:54:ad:02:90:e3:9a:
a5:3b:ef:a5:b9:af:64:c5:07:b8:e4:60:4a:a9:d1:
9b:a9:ae:b1:37:75:2b:9c:a7:66:eb:56:8a:d5:d6:
98:9b:4d:80:80:b6:04:f3:a4:f9:12:06:ad:3b:ef:
14:fc:9d:8a:3c:81:8e:b8:45:a7:98:be:69:b6:c0:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:64:9C:88:9A:FC:9F:B4:1E:03:56:A3:D2:68:7C:95:82:A5:76:93
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/EGSciJr8n7QeA1aj0mh8lYKldpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.57.0/24
92.63.176.0/22
109.196.98.0-109.196.103.255
185.42.14.0/24
217.78.234.0/24
Signature Algorithm: sha256WithRSAEncryption
72:cf:33:a4:2a:12:d0:f7:7d:c3:a2:fd:dd:e8:c8:1a:c5:c5:
57:11:0c:7f:05:78:a3:32:42:ac:b4:bb:42:f7:db:ca:19:b4:
35:44:4c:aa:1f:7e:8d:62:2a:fa:3a:4d:b4:ea:28:01:79:3c:
06:21:8c:30:cd:d5:ff:91:05:12:d1:5b:f4:e8:d2:4c:a9:f4:
48:9a:32:0e:90:0c:d1:12:40:42:5e:14:1e:05:4c:0b:24:62:
09:ad:6d:71:f4:8f:43:b7:2b:e1:fa:ed:15:96:dc:f7:71:f4:
46:42:ed:03:a4:8a:b6:21:c7:fe:db:13:01:92:93:ed:66:80:
9f:26:40:a2:39:08:50:a5:4d:31:3b:ef:c0:02:ee:f4:8a:11:
3e:0d:30:99:8f:8a:2e:92:1f:08:b3:dc:86:24:a4:fa:69:d5:
72:9a:50:11:29:ce:6e:fe:5e:78:cd:94:bc:e3:53:75:4c:ef:
af:84:bf:3d:f1:d7:57:e7:b8:24:6d:71:55:49:0c:30:58:1c:
50:a7:f4:f4:8a:4e:13:ee:ed:8e:1e:d6:bd:30:2c:a0:18:11:
ba:8b:93:69:3f:eb:e6:19:1d:83:d1:a1:ae:44:dc:aa:35:f8:
87:4d:c6:ca:a7:d6:da:7d:54:0b:4b:15:a8:9d:6c:37:54:7b:
1c:9e:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:09:50 2025 by rpki-client