Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/eutcB4XE0eEM4eyxFjMyU9Wtcsk.roa
File: eutcB4XE0eEM4eyxFjMyU9Wtcsk.roa (raw, json)
Hash identifier: lAwc3uWm+AaQ5JvjoDVtmKeHt76LzcXeYzYWfm4Odtk=
Subject key identifier: 7A:EB:5C:07:85:C4:D1:E1:0C:E1:EC:B1:16:33:32:53:D5:AD:72:C9
Certificate issuer: /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial: 019836DD89B41C11869804883F3A53F34446
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/eutcB4XE0eEM4eyxFjMyU9Wtcsk.roa
Signing time: Wed 23 Jul 2025 10:39:05 +0000
ROA not before: Wed 23 Jul 2025 10:39:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28910
IP address blocks: 195.69.188.0/22 maxlen: 22
195.69.188.0/24 maxlen: 24
195.69.189.0/24 maxlen: 24
195.69.190.0/24 maxlen: 24
195.69.191.0/24 maxlen: 24
2a05:45c7:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:dd:89:b4:1c:11:86:98:04:88:3f:3a:53:f3:44:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Validity
Not Before: Jul 23 10:39:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aeb5c0785c4d1e10ce1ecb116333253d5ad72c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:67:85:09:a2:87:5c:c7:d9:ea:3d:b2:0a:af:
a2:8a:df:b0:14:61:8b:a7:11:87:09:90:36:23:fc:
52:fe:0c:1a:a3:52:d8:93:98:a8:ee:d9:35:f2:f3:
ee:47:20:11:66:d4:38:85:0b:c3:a2:17:ac:d9:8a:
2f:b3:9b:62:60:96:fb:ce:ac:90:cf:52:be:bf:7f:
6c:64:34:c0:5d:e2:12:99:44:e7:00:03:d6:9a:e9:
d1:14:43:97:bb:43:1c:da:77:ab:7b:f9:29:35:7c:
cc:72:1f:3d:7b:06:a6:93:00:35:e0:2c:26:43:3e:
2c:05:b3:a8:05:9b:6f:d2:c3:24:2a:6b:5b:18:ea:
92:09:b8:88:18:27:96:8e:69:28:de:cb:18:4b:e6:
69:ab:ed:b9:a3:fb:ee:0e:b7:f0:da:09:5d:0a:98:
1f:15:a8:ed:be:56:ad:c7:fe:1b:55:3c:11:be:b0:
86:19:49:f0:15:f9:c4:4f:49:ec:79:0c:06:bf:34:
bc:a0:de:70:29:7c:8c:7d:c0:ef:0e:6d:2e:ef:cd:
5b:17:47:a5:7f:d3:df:cb:80:48:e0:e3:d8:b2:6d:
c6:ff:69:f9:f5:c0:b0:76:ac:11:89:86:07:13:95:
c7:c9:5e:dd:a6:fb:14:6a:60:d8:cc:30:f1:63:f1:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EB:5C:07:85:C4:D1:E1:0C:E1:EC:B1:16:33:32:53:D5:AD:72:C9
X509v3 Authority Key Identifier:
keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/eutcB4XE0eEM4eyxFjMyU9Wtcsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.188.0/22
IPv6:
2a05:45c7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
c0:01:0d:8b:0a:b6:61:d1:d5:d6:db:aa:fc:b9:b3:99:3f:67:
e4:48:f9:f9:57:24:5e:f0:8a:1e:87:26:bd:44:05:1d:56:b4:
16:f6:c7:3c:f8:26:e2:d2:ee:ef:bf:48:0f:62:9a:cf:cb:08:
5b:1c:37:7e:97:3e:f8:4c:1b:aa:4a:b0:f6:92:9d:65:ec:08:
a1:06:fe:c2:17:cd:65:fe:48:54:dc:b6:81:f7:d4:4c:21:02:
3d:dd:00:5f:12:9b:b3:b9:ec:a3:5b:95:67:53:d9:2f:b0:e4:
bb:af:9e:e9:a8:ae:68:37:62:72:de:a2:89:7e:4e:cd:d3:36:
18:c1:2f:65:d3:46:a6:4f:b4:1f:45:20:1c:cf:2b:f2:60:ca:
ab:72:38:75:ab:a8:73:da:20:68:b5:5f:c0:3d:44:cf:76:63:
a1:ae:52:3e:42:81:c2:79:70:bd:db:a9:88:38:21:43:e4:88:
9f:d5:ef:57:bf:ae:e4:97:1b:66:28:22:96:8f:cc:fc:c3:ff:
21:c8:0d:cb:27:11:51:c3:84:d2:38:ba:3b:84:db:16:81:e9:
bd:85:d6:9a:2b:97:6e:4a:e1:d5:a3:c6:b4:75:12:16:b4:c7:
80:35:0d:d0:84:62:71:41:4d:77:41:74:d4:47:bb:c3:f5:43:
33:37:8c:fc
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZg23Ym0HBGGmASIPzpT80RGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Yzk2ZDM4NmQ3Y2Y1OWE5OTBkMzk5NGYwZGY4NDkzZGZj
YTQ5YjMwHhcNMjUwNzIzMTAzOTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWViNWMwNzg1YzRkMWUxMGNlMWVjYjExNjMzMzI1M2Q1YWQ3MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WeFCaKHXMfZ6j2yCq+iit+wFGGL
pxGHCZA2I/xS/gwao1LYk5io7tk18vPuRyARZtQ4hQvDohes2Yovs5tiYJb7zqyQ
z1K+v39sZDTAXeISmUTnAAPWmunRFEOXu0Mc2nere/kpNXzMch89ewamkwA14Cwm
Qz4sBbOoBZtv0sMkKmtbGOqSCbiIGCeWjmko3ssYS+Zpq+25o/vuDrfw2gldCpgf
Fajtvlatx/4bVTwRvrCGGUnwFfnET0nseQwGvzS8oN5wKXyMfcDvDm0u781bF0el
f9Pfy4BI4OPYsm3G/2n59cCwdqwRiYYHE5XHyV7dpvsUamDYzDDxY/EHbQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFHrrXAeFxNHhDOHssRYzMlPVrXLJMB8GA1UdIwQY
MBaAFCTJbThtfPWamQ05lPDfhJPfykmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk1sdE9HMTg5WnFaRFRtVThOLUVrOV9LU2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YmVkNjMtNDA2ZS00MDVjLWE3ZjAt
N2NkOWMzYmFiYTI1LzEvZXV0Y0I0WEUwZUVNNGV5eEZqTXlVOVd0Y3NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83YmVkNjMtNDA2ZS00MDVjLWE3ZjAtN2NkOWMzYmFiYTI1
LzEvSk1sdE9HMTg5WnFaRFRtVThOLUVrOV9LU2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCw0W8MA4E
AgACMAgDBgQqBUXH8DANBgkqhkiG9w0BAQsFAAOCAQEAwAENiwq2YdHV1tuq/Lmz
mT9n5Ej5+VckXvCKHocmvUQFHVa0FvbHPPgm4tLu779ID2Kaz8sIWxw3fpc++Ewb
qkqw9pKdZewIoQb+whfNZf5IVNy2gffUTCECPd0AXxKbs7nso1uVZ1PZL7Dku6+e
6aiuaDdict6iiX5OzdM2GMEvZdNGpk+0H0UgHM8r8mDKq3I4dauoc9ogaLVfwD1E
z3Zjoa5SPkKBwnlwvdupiDghQ+SIn9XvV7+u5JcbZigilo/M/MP/IcgNyycRUcOE
0ji6O4TbFoHpvYXWmiuXbkrh1aPGtHUSFrTHgDUN0IRicUFNd0F01Ee7w/VDMzeM
/A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:06:16 2025 by rpki-client