Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/eSKsGHyxbWYwro-1UQoDIzgXZL0.roa
File: eSKsGHyxbWYwro-1UQoDIzgXZL0.roa (raw, json)
Hash identifier: Z+2EIYf0yK8lCQZu34hQ6FGPR1zzM9h/hZgRWuizAuo=
Subject key identifier: 79:22:AC:18:7C:B1:6D:66:30:AE:8F:B5:51:0A:03:23:38:17:64:BD
Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial: 01989B177CDA8058F5535E62118DE51C48B5
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/eSKsGHyxbWYwro-1UQoDIzgXZL0.roa
Signing time: Mon 11 Aug 2025 21:44:24 +0000
ROA not before: Mon 11 Aug 2025 21:44:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 95.128.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9b:17:7c:da:80:58:f5:53:5e:62:11:8d:e5:1c:48:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
Validity
Not Before: Aug 11 21:44:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7922ac187cb16d6630ae8fb5510a0323381764bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:db:3e:a8:2d:ec:27:5d:83:a0:6a:e5:d7:
74:70:6d:53:06:c4:2a:e3:d0:4b:b3:e0:db:bd:31:
3c:6d:8d:58:ff:87:e6:39:92:b3:ea:fd:64:29:37:
a3:91:31:c3:a4:78:b8:9c:4b:2d:80:f4:3c:66:67:
79:d4:cf:63:8f:23:8f:e6:a2:4c:a7:d6:3b:af:e3:
11:14:a9:4a:5e:9b:42:7d:72:6c:66:a7:dd:8a:9a:
b9:5a:9d:03:12:65:84:f6:cc:d1:ac:9e:d3:ee:dc:
14:55:1e:3b:6a:31:70:65:29:92:01:74:f2:92:a4:
82:c8:fd:8a:10:7c:41:6a:fd:5b:a4:3f:53:e7:08:
79:c5:47:a9:f5:84:9b:2e:7a:45:eb:02:86:4a:fd:
9f:f6:78:45:fd:52:57:8f:86:ea:fe:f8:f5:f8:23:
90:95:3c:f9:f3:01:27:b0:31:8e:1f:b8:05:db:f5:
96:70:42:fb:e9:b1:ae:37:85:e3:a8:83:36:ff:d7:
59:1e:cb:ea:f6:61:54:cb:bf:ff:5c:68:24:8a:c5:
7a:fd:92:1c:ee:d3:01:77:d9:4d:da:75:32:b7:69:
3f:a9:6b:1c:fd:0e:7d:2b:35:c6:0e:0f:0b:ac:f0:
35:39:cf:5e:f4:c0:66:49:03:4a:a0:13:4f:71:42:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:AC:18:7C:B1:6D:66:30:AE:8F:B5:51:0A:03:23:38:17:64:BD
X509v3 Authority Key Identifier:
keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/eSKsGHyxbWYwro-1UQoDIzgXZL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.158.0/24
Signature Algorithm: sha256WithRSAEncryption
69:49:26:d9:20:27:a0:87:7c:97:b3:08:54:04:77:23:df:bb:
f6:19:33:3b:af:d4:8e:e4:9b:d0:51:d3:cd:50:1b:2e:db:79:
58:9f:f2:d0:63:3c:4d:6c:6b:05:8a:8b:28:34:fc:e3:c9:11:
2d:16:aa:fc:0b:31:a8:31:0e:36:89:b3:ef:2d:c7:a4:22:5a:
66:7a:e2:d2:a7:06:db:49:95:30:3a:64:2f:44:7f:af:c3:c7:
e0:fa:33:62:38:e7:87:c9:53:63:74:77:10:c4:45:dd:b5:bf:
1a:83:06:1d:18:d7:2f:03:57:94:d2:0e:e0:d7:12:c4:b0:49:
a2:40:35:3e:b5:d7:4c:6a:3b:b1:42:2a:d1:ec:cb:c2:ea:c1:
1a:9d:72:92:68:bd:b3:24:c9:ca:eb:01:92:ba:23:87:e9:9a:
7c:4a:51:d3:8c:60:a8:90:46:b1:84:eb:77:a6:6c:a1:71:f7:
b9:3a:7e:27:d1:45:b3:43:dd:55:60:84:31:9d:46:7a:d7:52:
3a:dc:95:ee:b0:74:6e:55:c8:24:4a:66:21:35:71:a5:81:b1:
a2:3b:f6:cb:59:dc:04:d8:77:ac:08:ef:9e:69:41:22:1d:ab:
9e:94:06:60:70:fd:b6:6f:5f:d0:bc:bb:6d:57:74:f1:21:57:
98:c6:82:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 11:28:53 2025 by rpki-client