Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/eqCDANE_fuS0r95zd9g8GpN0eGI.roa
File: eqCDANE_fuS0r95zd9g8GpN0eGI.roa (raw, json)
Hash identifier: nneXP3G6KZ2ntgKmkYAWK50i7W7NUhSBte9IttrD85k=
Subject key identifier: 7A:A0:83:00:D1:3F:7E:E4:B4:AF:DE:73:77:D8:3C:1A:93:74:78:62
Certificate issuer: /CN=896e19713dfa1f516ffd9e5d085d470dc5029675
Certificate serial: 019F23691C2F5C514D3F5D9C8F58FEBC7B37
Authority key identifier: 89:6E:19:71:3D:FA:1F:51:6F:FD:9E:5D:08:5D:47:0D:C5:02:96:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/eqCDANE_fuS0r95zd9g8GpN0eGI.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204144
IP address blocks: 185.41.204.0/23 maxlen: 23
185.107.252.0/22 maxlen: 22
185.108.212.0/22 maxlen: 22
185.111.164.0/22 maxlen: 22
185.112.236.0/22 maxlen: 22
185.113.72.0/22 maxlen: 22
185.113.76.0/22 maxlen: 22
185.163.236.0/22 maxlen: 22
185.236.216.0/23 maxlen: 23
185.236.218.0/23 maxlen: 23
188.114.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:2f:5c:51:4d:3f:5d:9c:8f:58:fe:bc:7b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896e19713dfa1f516ffd9e5d085d470dc5029675
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7aa08300d13f7ee4b4afde7377d83c1a93747862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:25:e3:17:c1:6f:64:fb:11:bf:34:b6:a9:
fb:a7:8a:08:68:70:7c:a8:45:c0:8d:de:bb:92:a5:
2f:2c:8e:2d:fc:4f:4b:bd:12:79:6d:b0:d5:e6:1c:
fd:80:36:35:9a:e4:d7:f2:77:d8:9b:04:e0:51:c6:
61:ad:4a:55:02:3a:36:eb:90:fe:e1:6c:11:b8:f7:
32:73:b1:02:9d:1a:8e:6d:82:b9:53:84:6b:ad:66:
3a:4d:2b:68:24:ed:ff:24:74:30:d1:dd:45:9e:96:
b3:0c:db:fc:9b:05:ba:ac:ee:fc:80:94:0c:cc:13:
68:91:e0:bb:95:60:d1:ee:ca:8c:ec:08:20:a7:d1:
f1:78:73:cd:2d:79:2b:88:38:d3:4b:92:09:17:32:
8c:88:89:f3:68:99:7c:38:3d:d4:03:5f:22:98:6b:
ac:3c:85:60:c7:79:e4:d3:4c:d1:53:d0:0a:4c:d5:
8a:41:1b:bd:81:69:55:d5:6c:88:50:de:b6:3a:a3:
6c:94:4a:ca:a9:7c:ae:7a:bd:66:b0:5b:41:1e:29:
2d:8c:33:5a:dc:a1:c7:fd:4e:f5:77:b7:87:dd:d2:
f2:48:a9:56:35:eb:00:24:06:7c:d4:02:2a:52:5a:
33:98:37:20:bd:89:f2:8e:31:04:2e:25:6f:4a:c3:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:83:00:D1:3F:7E:E4:B4:AF:DE:73:77:D8:3C:1A:93:74:78:62
X509v3 Authority Key Identifier:
keyid:89:6E:19:71:3D:FA:1F:51:6F:FD:9E:5D:08:5D:47:0D:C5:02:96:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/eqCDANE_fuS0r95zd9g8GpN0eGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/iW4ZcT36H1Fv_Z5dCF1HDcUClnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.204.0/23
185.107.252.0/22
185.108.212.0/22
185.111.164.0/22
185.112.236.0/22
185.113.72.0/21
185.163.236.0/22
185.236.216.0/22
188.114.208.0/20
Signature Algorithm: sha256WithRSAEncryption
52:aa:81:75:c7:27:ef:39:02:88:a8:18:0f:d2:59:1e:10:85:
c8:22:b5:db:7c:67:45:83:fd:c3:e2:18:12:8b:fa:d7:94:b7:
e4:aa:48:65:33:ad:29:6b:ca:b9:af:3b:b8:9b:fe:79:0f:6a:
0b:0c:98:77:0f:e2:92:ed:31:18:e8:51:87:5c:00:2e:bb:18:
76:32:5f:da:c3:a1:88:e0:ee:98:2e:33:00:f7:7c:33:58:59:
2f:d6:6c:c7:2c:da:98:50:0e:11:b6:4b:f0:6d:77:89:76:25:
46:de:dc:a8:94:36:1c:04:a6:3f:c6:04:02:91:63:63:d7:5d:
23:b0:e8:7f:35:69:c5:16:0a:2d:61:91:1d:02:cc:00:11:fe:
de:d0:b9:71:b8:27:24:07:26:12:e9:94:f2:c6:23:cc:06:e0:
48:14:ca:33:2b:9a:4d:b3:46:b9:d0:6f:cd:8d:86:df:67:0f:
45:6f:4c:21:d3:11:1d:47:9d:55:ec:40:68:62:9f:21:c1:bb:
15:6b:d8:4f:78:b5:fd:0a:99:47:5d:4f:94:8f:0f:ec:00:4e:
fe:1d:20:b7:23:9a:2d:f3:af:d8:08:fe:50:11:ad:2b:f1:fc:
a8:79:68:f0:5f:20:84:f4:eb:60:33:84:25:6d:bf:7c:fa:b4:
b4:84:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:59:26 2026 by rpki-client