Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/eqHQLvrEyFem_zOL2dGPtQbOrHE.roa
File: eqHQLvrEyFem_zOL2dGPtQbOrHE.roa (raw, json)
Hash identifier: xkijKwZrCJTocpD11ugimO21ZJdJ5XVb/oBsAvogKmM=
Subject key identifier: 7A:A1:D0:2E:FA:C4:C8:57:A6:FF:33:8B:D9:D1:8F:B5:06:CE:AC:71
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 0198097E4CF0B910B754E38149B7A4165870
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/eqHQLvrEyFem_zOL2dGPtQbOrHE.roa
Signing time: Mon 14 Jul 2025 15:12:08 +0000
ROA not before: Mon 14 Jul 2025 15:12:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216321
IP address blocks: 176.10.89.0/24 maxlen: 24
202.181.204.0/24 maxlen: 24
2a13:d8c0::/40 maxlen: 40
2a13:d8c1::/32 maxlen: 32
2a13:d8c1:ce00::/40 maxlen: 40
2a13:d8c1:fe00::/40 maxlen: 40
2a13:d8c2::/32 maxlen: 32
2a13:d8c3::/32 maxlen: 32
2a13:d8c4:2::/48 maxlen: 48
2a13:d8c4:7::/48 maxlen: 48
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:7e:4c:f0:b9:10:b7:54:e3:81:49:b7:a4:16:58:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Jul 14 15:12:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aa1d02efac4c857a6ff338bd9d18fb506ceac71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:b0:ab:b8:f6:66:1b:66:11:cc:4e:8d:9f:
a4:e5:d9:0d:50:2f:05:95:32:b8:b2:9c:94:bc:bb:
ac:a0:b0:d7:5b:c7:12:a0:65:7a:81:35:9e:c3:4f:
63:90:dc:9f:b4:54:75:66:1f:72:2a:19:0a:96:fc:
c2:3c:ec:c6:2d:d4:f8:32:16:1d:3b:05:f1:f3:7f:
97:3a:19:99:44:c9:01:f7:66:83:b1:8e:e8:40:b8:
98:95:b3:6f:f3:a5:f0:c7:17:91:49:7e:77:cc:e5:
d1:6e:1f:60:36:76:47:e0:d4:ba:39:24:ab:0b:34:
2d:bb:4f:7b:6c:17:7b:93:70:ef:f0:43:b7:77:65:
43:44:81:4f:f8:a3:48:4b:03:65:53:04:ae:ff:26:
36:d1:9e:ce:0a:5a:ff:06:ee:71:2a:89:5f:5e:0d:
06:89:18:f8:0c:d4:aa:57:23:21:d4:3c:fa:dc:ba:
03:33:0c:37:63:db:52:c4:55:83:e6:79:03:b7:f8:
c9:60:c1:b7:11:b9:e7:e8:13:88:8c:91:81:0f:52:
0f:82:57:ef:2c:f3:53:79:ba:2e:c5:10:65:b7:4a:
60:5f:62:39:6e:e9:50:e7:be:dc:79:6f:90:b9:cd:
19:d5:56:13:ca:79:08:fa:fb:b1:98:61:6f:47:24:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A1:D0:2E:FA:C4:C8:57:A6:FF:33:8B:D9:D1:8F:B5:06:CE:AC:71
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/eqHQLvrEyFem_zOL2dGPtQbOrHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.89.0/24
202.181.204.0/24
IPv6:
2a13:d8c0::/40
2a13:d8c1::-2a13:d8c3:ffff:ffff:ffff:ffff:ffff:ffff
2a13:d8c4:2::/48
2a13:d8c4:7::/48
2a13:d8c5::-2a13:d8c7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
06:bc:79:bb:76:2d:79:db:af:83:64:d0:d7:56:0a:4c:9c:71:
2c:c0:44:b1:ba:95:46:2a:3f:58:3b:19:41:eb:12:7f:e8:2d:
02:71:5c:ed:04:53:0a:2a:ee:42:74:74:3b:c5:85:77:a5:5a:
0f:ca:73:30:08:27:7b:36:5c:89:8d:53:0d:08:bd:ea:c5:2a:
4b:b8:d8:96:08:ab:a9:4f:bf:3e:09:df:e8:d6:57:38:de:8c:
28:9e:75:53:5f:82:d4:ed:8d:26:9a:cc:7b:fb:84:74:a8:ea:
64:dd:04:ae:4b:78:81:9e:6c:4c:a4:c4:21:b7:0e:f1:c7:fe:
59:3a:24:88:a0:d9:9a:74:6f:b6:18:a0:9e:12:0c:13:07:5f:
26:7c:2f:02:ed:5b:52:f4:89:41:5c:56:66:d6:03:39:15:cf:
f4:30:04:e9:70:6f:9e:dd:3b:04:4a:7e:26:3e:8c:21:4f:c6:
b3:f4:e3:ca:e6:b9:45:50:50:47:db:22:51:74:2f:6c:6a:68:
19:b0:ba:68:d9:b7:90:b2:b2:fb:c2:b4:16:2d:5a:a2:c4:d0:
0d:bb:c7:35:26:02:9a:50:bd:b2:5f:99:d7:0b:db:1e:ef:57:
fa:e9:07:b5:18:0c:e6:d1:42:2f:f5:7a:4a:6b:e3:e7:3a:00:
ad:06:fb:2b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZgJfkzwuRC3VOOBSbekFlhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj
NjgxMzcwHhcNMjUwNzE0MTUxMjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWExZDAyZWZhYzRjODU3YTZmZjMzOGJkOWQxOGZiNTA2Y2VhYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrSwq7j2ZhtmEcxOjZ+k5dkNUC8F
lTK4spyUvLusoLDXW8cSoGV6gTWew09jkNyftFR1Zh9yKhkKlvzCPOzGLdT4MhYd
OwXx83+XOhmZRMkB92aDsY7oQLiYlbNv86XwxxeRSX53zOXRbh9gNnZH4NS6OSSr
CzQtu097bBd7k3Dv8EO3d2VDRIFP+KNISwNlUwSu/yY20Z7OClr/Bu5xKolfXg0G
iRj4DNSqVyMh1Dz63LoDMww3Y9tSxFWD5nkDt/jJYMG3Ebnn6BOIjJGBD1IPglfv
LPNTebouxRBlt0pgX2I5bulQ577ceW+Quc0Z1VYTynkI+vuxmGFvRyRCwQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFHqh0C76xMhXpv8zi9nRj7UGzqxxMB8GA1UdIwQY
MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct
OTBlYTM3MjljNTc0LzEvZXFIUUx2ckV5RmVtX3pPTDJkR1B0UWJPckhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDctOTBlYTM3MjljNTc0
LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjASBAIAATAMAwQAsApZAwQA
yrXMMEAEAgACMDoDBgAqE9jAADAOAwUAKhPYwQMFAioT2MADBwAqE9jEAAIDBwAq
E9jEAAcwDgMFACoT2MUDBQMqE9jAMA0GCSqGSIb3DQEBCwUAA4IBAQAGvHm7di15
26+DZNDXVgpMnHEswESxupVGKj9YOxlB6xJ/6C0CcVztBFMKKu5CdHQ7xYV3pVoP
ynMwCCd7NlyJjVMNCL3qxSpLuNiWCKupT78+Cd/o1lc43owonnVTX4LU7Y0mmsx7
+4R0qOpk3QSuS3iBnmxMpMQhtw7xx/5ZOiSIoNmadG+2GKCeEgwTB18mfC8C7VtS
9IlBXFZm1gM5Fc/0MATpcG+e3TsESn4mPowhT8az9OPK5rlFUFBH2yJRdC9samgZ
sLpo2beQsrL7wrQWLVqixNANu8c1JgKaUL2yX5nXC9se71f66Qe1GAzm0UIv9XpK
a+PnOgCtBvsr
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:04 2025 by rpki-client