Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EyON4R6_fy9hqF5rQ10qt5Xmcyg.roa
File: EyON4R6_fy9hqF5rQ10qt5Xmcyg.roa (raw, json)
Hash identifier: ghtCRttXV8SNTDalgvhFoFry6BwD5hd/ubnSLcC4CEw=
Subject key identifier: 13:23:8D:E1:1E:BF:7F:2F:61:A8:5E:6B:43:5D:2A:B7:95:E6:73:28
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01981C7B1911A7C6262A646DBE98A76B2B96
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EyON4R6_fy9hqF5rQ10qt5Xmcyg.roa
Signing time: Fri 18 Jul 2025 07:41:26 +0000
ROA not before: Fri 18 Jul 2025 07:41:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210616
IP address blocks: 93.171.184.0/22 maxlen: 24
146.120.116.0/23 maxlen: 24
146.158.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:7b:19:11:a7:c6:26:2a:64:6d:be:98:a7:6b:2b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 18 07:41:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13238de11ebf7f2f61a85e6b435d2ab795e67328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:90:b6:74:97:c7:98:b9:36:76:7a:15:ef:ee:
b9:56:9d:8e:e6:96:65:a6:ff:f4:54:a8:6c:a0:9a:
8b:59:8a:d5:1c:11:e5:2e:4d:6d:d3:cc:5c:f1:a8:
0f:cd:56:df:1c:30:94:4d:13:3e:15:80:72:76:6a:
95:ee:d9:76:b4:2d:22:26:73:f8:6d:1f:f8:e0:a1:
7f:a7:f5:22:7d:de:af:ef:22:71:6d:47:06:94:45:
29:46:8b:a0:83:40:23:f4:19:e8:fe:65:a1:0a:4e:
0b:1c:d1:4b:f8:a0:7d:bf:89:da:19:1b:35:64:7a:
00:e7:58:13:e7:e1:7d:2a:42:72:cb:dd:ba:22:43:
a6:87:c3:27:0b:b1:f8:91:40:df:e0:43:99:7c:3d:
ca:47:ed:7e:86:6c:2e:df:47:61:75:47:8c:ba:44:
73:85:40:fb:80:e1:4a:cf:d6:8b:0b:ee:0f:a5:11:
11:fb:7d:e4:dd:5f:e0:b5:8d:c0:78:6c:9f:c9:d1:
47:c7:98:32:c0:c3:9a:a1:8b:fa:67:9f:30:1f:19:
45:8f:c5:d2:5d:ea:b5:6f:ab:cc:58:7d:1f:cb:5d:
b3:55:93:43:a5:5f:b0:46:7e:8d:27:25:a6:ea:a2:
23:07:6a:b9:99:c3:a2:96:e9:83:f1:93:a4:d9:08:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:23:8D:E1:1E:BF:7F:2F:61:A8:5E:6B:43:5D:2A:B7:95:E6:73:28
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EyON4R6_fy9hqF5rQ10qt5Xmcyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.184.0/22
146.120.116.0/23
146.158.96.0/19
Signature Algorithm: sha256WithRSAEncryption
83:74:c5:2f:e3:a9:63:e9:9b:52:96:4b:a3:75:44:20:60:5f:
d4:d8:cd:75:7b:3b:b1:58:36:6e:76:0e:9d:b0:7b:21:6d:e9:
f6:55:8a:a5:d5:11:7a:37:c6:e7:5d:e0:5e:4e:91:53:15:e3:
50:99:ca:a0:98:e2:de:c3:5f:b6:11:7d:5f:7a:8c:e2:4c:f0:
6c:e0:d5:56:30:c0:43:64:c3:dc:e1:f0:47:8a:11:fa:75:36:
96:3c:fe:c0:a4:9f:2d:cb:5e:83:f9:5b:63:98:11:00:59:8b:
08:d5:ff:b4:74:9f:78:fd:28:f6:40:c9:a2:0d:c0:71:b6:a8:
9f:e9:11:f9:40:2a:ab:aa:92:1a:14:45:e4:14:04:ae:25:b4:
5b:d6:e7:ec:4b:3a:d6:d4:dd:2e:e4:05:ef:c3:53:98:5a:74:
a3:52:47:f3:45:67:05:05:3e:87:24:e8:ee:dc:c3:77:3b:6e:
28:47:d5:2f:d0:45:7c:71:ae:20:a3:a6:00:f5:70:c8:14:b4:
29:36:f9:b1:38:1b:e0:ce:f9:a8:45:b3:22:9e:22:c1:9e:66:
cd:ab:c7:e9:f2:a8:ea:a8:74:b5:e2:4f:95:29:e6:87:6c:f1:
8a:7d:8d:e6:1e:f9:2a:ed:05:21:de:79:01:50:12:66:54:b4:
db:9d:1e:82
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZgcexkRp8YmKmRtvpinayuWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwNzE4MDc0MTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzIzOGRlMTFlYmY3ZjJmNjFhODVlNmI0MzVkMmFiNzk1ZTY3MzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipC2dJfHmLk2dnoV7+65Vp2O5pZl
pv/0VKhsoJqLWYrVHBHlLk1t08xc8agPzVbfHDCUTRM+FYBydmqV7tl2tC0iJnP4
bR/44KF/p/Uifd6v7yJxbUcGlEUpRougg0Aj9Bno/mWhCk4LHNFL+KB9v4naGRs1
ZHoA51gT5+F9KkJyy926IkOmh8MnC7H4kUDf4EOZfD3KR+1+hmwu30dhdUeMukRz
hUD7gOFKz9aLC+4PpRER+33k3V/gtY3AeGyfydFHx5gywMOaoYv6Z58wHxlFj8XS
Xeq1b6vMWH0fy12zVZNDpV+wRn6NJyWm6qIjB2q5mcOilumD8ZOk2QhQ0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBMjjeEev38vYahea0NdKreV5nMoMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvRXlPTjRSNl9meTlocUY1clExMHF0NVhtY3lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXau4AwQB
knh0AwQFkp5gMA0GCSqGSIb3DQEBCwUAA4IBAQCDdMUv46lj6ZtSlkujdUQgYF/U
2M11ezuxWDZudg6dsHshben2VYql1RF6N8bnXeBeTpFTFeNQmcqgmOLew1+2EX1f
eoziTPBs4NVWMMBDZMPc4fBHihH6dTaWPP7ApJ8ty16D+VtjmBEAWYsI1f+0dJ94
/Sj2QMmiDcBxtqif6RH5QCqrqpIaFEXkFASuJbRb1ufsSzrW1N0u5AXvw1OYWnSj
UkfzRWcFBT6HJOju3MN3O24oR9Uv0EV8ca4go6YA9XDIFLQpNvmxOBvgzvmoRbMi
niLBnmbNq8fp8qjqqHS14k+VKeaHbPGKfY3mHvkq7QUh3nkBUBJmVLTbnR6C
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:12:33 2025 by rpki-client