Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/EkhjhvBga-pOZcKQYHzx81PL74Q.roa
File: EkhjhvBga-pOZcKQYHzx81PL74Q.roa (raw, json)
Hash identifier: D/4rtr9uXbwRRBeoPwWbT2YwGXeqoCsTX3oCjTbbKu0=
Subject key identifier: 12:48:63:86:F0:60:6B:EA:4E:65:C2:90:60:7C:F1:F3:53:CB:EF:84
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 0199B3C560B4D5CAAA0F6734D823F75DDE3B
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/EkhjhvBga-pOZcKQYHzx81PL74Q.roa
Signing time: Sun 05 Oct 2025 09:48:00 +0000
ROA not before: Sun 05 Oct 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215160
IP address blocks: 185.18.224.0/23 maxlen: 24
185.18.224.0/24 maxlen: 24
185.18.225.0/24 maxlen: 24
193.8.95.0/24 maxlen: 24
2a14:3540::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b3:c5:60:b4:d5:ca:aa:0f:67:34:d8:23:f7:5d:de:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Oct 5 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12486386f0606bea4e65c290607cf1f353cbef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:a7:8a:eb:39:47:23:09:59:57:86:4b:7c:
60:2d:71:b8:e9:57:18:73:34:06:9b:f8:4b:69:11:
88:22:35:5d:8d:2e:13:9c:10:2a:75:57:a8:29:c9:
c7:97:cd:17:b1:3c:d9:8a:cf:51:78:14:9a:0e:16:
51:6d:a8:21:bd:3d:d7:a4:8b:8f:0b:17:3a:5e:6d:
8f:64:ee:4a:d2:01:88:c3:0b:79:fa:b5:1a:51:f4:
7f:73:90:d5:20:cd:6f:85:bf:a8:49:35:9d:6c:9a:
86:83:b9:46:56:87:92:f0:40:f6:1c:a0:e7:b4:f3:
9d:ab:5b:d2:c2:96:e0:99:a3:6f:45:a9:5d:a5:3d:
cc:f9:e1:16:51:bc:f9:37:b8:2c:67:b8:73:28:4e:
d8:70:f3:30:44:a7:ce:33:a8:1c:f2:03:47:50:f0:
15:eb:a2:03:19:0f:eb:4b:1e:83:c6:13:cf:f4:d8:
16:84:58:62:04:b3:db:8d:19:d0:47:d7:29:21:cf:
f5:d7:5e:30:a6:7e:db:60:00:38:48:4d:c7:37:8f:
af:ee:27:d6:e4:e2:22:78:d2:a6:78:93:c9:71:fe:
3f:27:78:20:91:a1:ec:b8:da:20:a9:76:e2:c9:b3:
54:da:d2:57:5b:c4:10:f7:d3:0a:b1:4b:3b:22:66:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:48:63:86:F0:60:6B:EA:4E:65:C2:90:60:7C:F1:F3:53:CB:EF:84
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/EkhjhvBga-pOZcKQYHzx81PL74Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.224.0/23
193.8.95.0/24
IPv6:
2a14:3540::/32
Signature Algorithm: sha256WithRSAEncryption
36:05:c1:a0:fd:51:9b:29:66:89:f6:0a:20:82:0e:5f:37:18:
82:fa:7c:65:da:1f:52:32:ab:b4:d7:4b:ba:6e:f3:36:6f:59:
7e:37:4e:ed:3d:61:77:00:14:8a:c7:2e:c9:1e:49:21:c8:76:
36:4f:1a:2e:f1:6a:73:76:df:85:e4:e6:3b:0d:72:cc:57:fa:
37:39:89:cc:c7:46:c4:65:d9:40:05:dd:36:c3:c9:6a:3e:ec:
b1:78:b6:73:82:81:87:64:a8:87:7c:80:c9:b7:88:86:11:2c:
fe:d0:77:c0:a8:9e:95:0c:29:13:db:90:98:33:49:20:01:b6:
a0:c3:93:71:b3:52:b1:41:dd:d0:28:3c:77:f9:d1:d9:70:63:
da:91:a4:09:c3:f1:12:aa:83:67:31:0d:fe:87:de:33:28:ba:
18:ff:a5:a0:2d:37:a3:d7:59:07:85:4a:19:67:87:c0:80:43:
19:f4:7b:ef:20:27:70:54:72:aa:8c:d7:23:0d:69:58:17:f4:
98:f0:85:a9:42:f8:08:08:6b:ad:d0:3c:3e:2c:95:e7:b3:4c:
f9:51:14:7e:c5:b3:1c:0f:9d:18:95:b1:bb:45:cf:99:58:ed:
ed:bd:0e:8c:03:25:be:4c:e7:3d:38:9f:d7:5c:7a:cf:a9:9d:
4d:bd:5d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:45 2025 by rpki-client