Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EBEZfgkSChcKKEbex8tuTn-vz2g.roa
File: EBEZfgkSChcKKEbex8tuTn-vz2g.roa (raw, json)
Hash identifier: oxdmDhnZw6trjT4VpgEctRUb1dRjUTosNx67SWm4R6Q=
Subject key identifier: 10:11:19:7E:09:12:0A:17:0A:28:46:DE:C7:CB:6E:4E:7F:AF:CF:68
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0198A47D7F981F12A45642EE07AC59593924
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EBEZfgkSChcKKEbex8tuTn-vz2g.roa
Signing time: Wed 13 Aug 2025 17:32:24 +0000
ROA not before: Wed 13 Aug 2025 17:32:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.180.252.0/23 maxlen: 23
5.180.254.0/23 maxlen: 23
5.253.244.0/24 maxlen: 24
45.84.199.0/24 maxlen: 24
45.91.251.0/24 maxlen: 24
45.131.109.0/24 maxlen: 24
45.134.108.0/23 maxlen: 23
45.134.108.0/24 maxlen: 24
45.134.109.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
45.145.224.0/23 maxlen: 23
46.243.76.0/22 maxlen: 24
185.132.55.0/24 maxlen: 24
204.11.1.0/24 maxlen: 24
212.87.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a4:7d:7f:98:1f:12:a4:56:42:ee:07:ac:59:59:39:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 13 17:32:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1011197e09120a170a2846dec7cb6e4e7fafcf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:0e:a7:3a:df:67:8c:58:17:95:96:1f:68:
2f:43:de:d1:90:16:78:ad:c9:d5:f8:2d:d7:b3:a6:
03:5a:a5:5e:92:49:3a:05:1f:29:20:04:b9:82:ed:
f7:6e:19:a4:6a:34:b9:73:99:ff:1e:d8:11:f6:a5:
bc:09:32:69:f3:3e:45:2f:23:9a:26:b9:b3:95:02:
d9:b3:7b:89:8c:20:90:5d:68:52:3a:8c:81:76:a8:
2c:1a:f8:ef:a6:22:56:b2:fa:ee:03:5b:be:d6:d7:
5e:75:dc:79:b5:ab:f5:93:bf:49:40:f9:e9:72:e7:
f0:ae:ff:4e:8c:e8:d7:98:d2:f3:18:2d:5c:f0:3a:
c0:42:5f:2e:7a:05:b4:41:9d:38:16:e8:3a:1c:fd:
82:28:25:ac:6f:56:cb:c8:2c:00:7f:df:71:8d:a2:
74:23:0a:9a:a3:1a:fe:23:e8:d2:a2:2c:62:51:5d:
3a:ff:84:2d:4a:ba:e5:bd:e8:2f:62:0d:b3:4f:5d:
f8:03:89:be:34:4f:38:54:88:39:fc:21:4e:4c:17:
16:3b:6f:e1:fc:10:e0:ab:1d:79:10:6d:82:48:72:
6f:f8:c6:e2:2e:43:70:d7:cb:a0:3b:d2:98:db:f2:
96:88:47:e9:4c:e7:fe:55:91:9e:2d:5e:5e:72:0f:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:11:19:7E:09:12:0A:17:0A:28:46:DE:C7:CB:6E:4E:7F:AF:CF:68
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EBEZfgkSChcKKEbex8tuTn-vz2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.252.0/22
5.253.244.0/24
45.84.199.0/24
45.91.251.0/24
45.131.109.0/24
45.134.108.0/23
45.137.71.0/24
45.145.224.0/23
46.243.76.0/22
185.132.55.0/24
204.11.1.0/24
212.87.214.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:0b:8b:15:38:7f:6f:e2:da:71:6e:d9:da:20:43:ba:85:2b:
19:88:0c:ab:45:ae:f8:46:69:3a:08:cc:79:cd:c1:04:81:b8:
3c:d7:be:c5:d3:79:a6:d4:1a:40:55:95:86:50:04:76:73:ba:
c0:0d:b0:5a:e0:57:6d:b4:c1:de:b9:e5:4d:6f:31:fa:cc:d7:
39:6b:c2:ac:9f:72:d7:db:32:da:14:de:16:0f:76:2b:37:54:
fb:8f:f4:55:c5:0a:fb:a9:8a:99:a3:b4:82:62:0d:d1:47:83:
d4:1c:d4:31:7e:c8:40:ca:46:bf:71:9a:a9:0e:46:28:34:52:
32:3d:1f:ff:00:e8:08:b3:2c:c6:cf:59:00:67:3e:94:cb:12:
ac:e2:87:36:58:74:eb:1d:5e:7d:b6:ee:ad:5e:22:5d:b6:37:
db:94:ab:eb:b7:b6:f7:a2:0d:28:4e:c1:a9:b2:e0:ed:4b:ad:
c7:30:5b:70:5b:51:ca:0a:46:b6:11:a6:df:d5:0d:8f:01:32:
1e:70:96:9c:ec:69:38:1f:42:c6:25:91:14:f7:e3:be:c9:bd:
d0:99:6e:a2:c0:c4:1c:1f:8a:61:d9:50:71:fc:89:60:89:93:
c4:01:6a:5d:64:dc:af:60:7b:7e:31:d6:f7:d6:37:cd:40:d4:
c2:3d:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:15 2025 by rpki-client