Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/eGSHlG0EkLHxKJr3m4XWKvi4FDE.roa
File: eGSHlG0EkLHxKJr3m4XWKvi4FDE.roa (raw, json)
Hash identifier: KSBVppHXh5GaOp6rIqFzma8M+CxkT9xkf7FurYUushA=
Subject key identifier: 78:64:87:94:6D:04:90:B1:F1:28:9A:F7:9B:85:D6:2A:F8:B8:14:31
Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial: 0198A2F2E754004A77DC6103C69EA5112387
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/eGSHlG0EkLHxKJr3m4XWKvi4FDE.roa
Signing time: Wed 13 Aug 2025 10:21:24 +0000
ROA not before: Wed 13 Aug 2025 10:21:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56754
IP address blocks: 185.246.92.0/24 maxlen: 24
185.246.93.0/24 maxlen: 24
185.246.94.0/24 maxlen: 24
2a0d:7280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:f2:e7:54:00:4a:77:dc:61:03:c6:9e:a5:11:23:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
Validity
Not Before: Aug 13 10:21:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=786487946d0490b1f1289af79b85d62af8b81431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:f4:e0:60:40:a9:6c:d1:fc:3a:f5:f6:64:
8b:4c:b8:10:57:99:d1:85:15:86:66:1d:0e:55:25:
72:62:f9:ed:1d:ba:47:88:00:bf:7d:a0:e1:d3:49:
f2:81:f5:46:11:52:5e:2d:ea:19:fc:ce:62:56:2c:
25:77:a3:cf:9f:9d:d5:3e:56:c9:ba:79:2f:b6:94:
4b:a7:f9:42:d3:f4:3b:f9:76:64:9b:41:0a:0e:3c:
ca:77:68:84:ef:fc:2e:a2:8e:5f:38:0b:96:85:9f:
fe:34:70:de:44:d7:80:71:4c:ff:22:9f:7a:79:90:
e2:b4:7c:12:ed:55:97:65:ad:16:af:e5:5e:9c:f5:
d6:4a:e1:3c:fd:82:7c:48:64:f5:f9:c4:8b:d0:80:
89:7a:6f:95:24:5d:99:39:e7:14:43:62:29:dc:e1:
c4:9b:f5:ee:39:42:e7:b6:5f:e8:70:57:ec:81:be:
06:73:72:a3:42:31:ec:77:6c:74:e7:03:cd:7a:d0:
b9:85:4b:aa:1e:3e:6e:40:5e:1c:d0:0f:6d:dc:ec:
41:0a:3e:ec:c9:f5:98:48:30:8f:18:db:1c:ed:82:
b3:35:24:b0:d7:a8:6e:5e:39:14:15:d8:a8:8e:61:
5d:a5:af:0e:3b:15:27:ff:50:d9:e5:cd:57:88:74:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:64:87:94:6D:04:90:B1:F1:28:9A:F7:9B:85:D6:2A:F8:B8:14:31
X509v3 Authority Key Identifier:
keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/eGSHlG0EkLHxKJr3m4XWKvi4FDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.92.0-185.246.94.255
IPv6:
2a0d:7280::/29
Signature Algorithm: sha256WithRSAEncryption
8b:8d:40:ea:27:4c:a3:ee:f5:a4:43:b5:12:c9:ac:6b:9c:17:
85:8f:83:85:f8:04:82:b1:9e:8a:d0:e5:bc:27:dc:30:0e:ab:
07:b2:13:66:50:b5:74:46:54:64:ad:49:8d:03:c0:a6:46:f4:
35:b9:a7:28:bd:42:90:ba:f8:f5:52:97:bf:5d:5c:b2:04:6e:
d4:28:e4:f6:4f:08:94:44:ac:9c:8e:46:db:20:8f:61:fc:94:
ec:3b:02:ff:74:0d:c1:7b:f0:50:dc:00:d4:ba:46:68:a1:0c:
9c:d0:64:a1:fc:f9:c4:7d:49:9c:4f:11:5f:b6:a1:8a:d5:9b:
d5:ae:c4:ce:dd:b7:7c:f9:3c:f4:38:eb:19:5f:43:5b:85:a7:
9f:ec:24:4c:af:a6:f0:78:e2:e9:3e:da:03:ac:fa:82:9d:ee:
b5:11:2f:20:ed:9c:7f:a8:af:79:4c:79:18:10:98:54:ed:8a:
67:c6:31:4e:4f:2b:ac:74:6f:95:0c:98:e4:57:67:ad:c0:e7:
f6:9b:79:06:29:5e:8a:e8:25:7f:f2:a8:58:ff:59:51:75:af:
73:73:5e:07:92:41:ca:6b:11:3c:6c:5b:23:39:3c:ba:f9:76:
f0:e7:a6:80:b0:1c:fa:69:64:55:b8:2a:a8:fa:04:63:85:6d:
1d:30:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:23 2025 by rpki-client