Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/EGYTjO7QUfpx0ulGevFYUIiqj3s.roa
File: EGYTjO7QUfpx0ulGevFYUIiqj3s.roa (raw, json)
Hash identifier: g2MIGdqU/L1bshOQ8N/mggpTuJ9tqqfK/SHJoPKbENM=
Subject key identifier: 10:66:13:8C:EE:D0:51:FA:71:D2:E9:46:7A:F1:58:50:88:AA:8F:7B
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 01974ABA60EC4A4B87CBF11ABB23F12997AE
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/EGYTjO7QUfpx0ulGevFYUIiqj3s.roa
Signing time: Sat 07 Jun 2025 14:10:17 +0000
ROA not before: Sat 07 Jun 2025 14:10:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50369
IP address blocks: 89.46.168.0/22 maxlen: 22
89.46.172.0/22 maxlen: 22
185.135.64.0/24 maxlen: 24
185.135.65.0/24 maxlen: 24
185.135.66.0/23 maxlen: 23
188.241.210.0/24 maxlen: 24
193.105.71.0/24 maxlen: 24
194.150.216.0/23 maxlen: 23
195.200.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:ba:60:ec:4a:4b:87:cb:f1:1a:bb:23:f1:29:97:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: Jun 7 14:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1066138ceed051fa71d2e9467af1585088aa8f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:b8:90:8a:ad:2a:8f:ad:6e:2a:bd:7f:3c:
75:99:bf:26:77:12:0c:2a:d2:05:d5:9c:f6:0c:1f:
26:91:ca:80:7f:1c:fd:5c:71:3f:5f:6d:b6:28:e0:
6b:d4:2e:41:ff:df:18:16:61:37:91:1c:ec:48:48:
c3:44:0d:68:49:db:09:6d:d8:53:1e:7a:91:ec:25:
33:c7:03:df:7b:65:31:96:75:d5:05:c1:50:68:a9:
04:2c:06:66:2c:d1:2f:84:03:29:1d:9b:c6:37:2b:
4b:01:c0:8f:05:d2:a9:f0:27:b5:9c:fe:b9:38:91:
f8:bc:a6:da:f8:4b:e8:d6:17:a2:5a:2c:10:7f:32:
4d:ef:7b:e8:92:d1:9a:3a:57:b2:c7:73:7f:4e:19:
51:a5:f0:17:ec:a7:8b:78:75:e9:3a:7c:0a:22:1a:
4d:20:a1:b6:b0:c0:ed:83:38:b4:05:d5:4b:fc:eb:
6f:ab:d1:4c:b4:ce:d8:8c:a4:41:0a:e8:ac:7c:34:
5c:2a:76:e4:c9:f5:30:4d:89:91:34:bd:a2:66:b0:
0b:b1:c7:c8:ee:d7:b5:85:27:af:c2:3a:04:fc:e1:
3d:b2:05:3b:02:f0:b4:bd:d6:fa:16:6d:83:5c:b7:
a4:6a:16:a5:45:7b:50:b4:e1:c5:f7:25:f1:ec:37:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:66:13:8C:EE:D0:51:FA:71:D2:E9:46:7A:F1:58:50:88:AA:8F:7B
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/EGYTjO7QUfpx0ulGevFYUIiqj3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.168.0/21
185.135.64.0/22
188.241.210.0/24
193.105.71.0/24
194.150.216.0/23
195.200.86.0/23
Signature Algorithm: sha256WithRSAEncryption
08:24:2b:10:c5:15:a0:e8:33:e8:89:af:29:b4:03:2b:b7:aa:
62:30:9d:87:8b:db:12:12:a3:f0:52:5d:4b:06:54:7f:ca:e9:
d8:02:36:e6:35:d3:16:84:8e:d9:4b:03:2d:02:5b:bc:07:72:
c6:29:8a:8d:93:86:fb:55:9e:1e:a0:a9:eb:ea:42:e2:b7:25:
de:86:aa:21:0c:04:ce:ec:d6:b5:05:94:4d:a9:a2:45:f5:80:
5d:f3:ac:3d:4b:53:52:bf:b3:77:76:c4:7e:01:5b:c7:70:75:
8b:67:4d:da:15:a5:8e:b7:7f:d2:c4:09:08:34:d0:4a:1a:d7:
5d:02:ec:71:93:29:89:3d:ba:ca:2d:d0:13:95:e4:8d:de:a2:
f6:8a:d7:44:3b:a6:6c:7f:82:a2:9b:12:d1:88:58:6f:52:36:
a3:52:e1:84:0d:49:a9:36:65:34:0a:61:44:ef:ab:d1:dc:51:
c6:16:41:83:6f:3a:79:1f:fe:b9:42:8a:36:21:2a:b6:9d:f7:
38:e4:44:76:1a:64:47:3a:a7:a8:7d:c4:18:0e:0b:ac:86:3f:
0c:9b:b0:3a:92:b2:a1:7c:80:b3:60:33:95:85:1f:66:02:d4:
db:ae:92:dd:8b:e6:08:99:33:f8:05:7a:e1:46:41:ee:53:da:
9e:37:c8:2b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZdKumDsSkuHy/EauyPxKZeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDZiNDI5ZjhjNDk2MTFmY2ZlYTFlZmExYTUxYjljMGVk
ZGI2ZTcwHhcNMjUwNjA3MTQxMDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDY2MTM4Y2VlZDA1MWZhNzFkMmU5NDY3YWYxNTg1MDg4YWE4ZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Hu4kIqtKo+tbiq9fzx1mb8mdxIM
KtIF1Zz2DB8mkcqAfxz9XHE/X222KOBr1C5B/98YFmE3kRzsSEjDRA1oSdsJbdhT
HnqR7CUzxwPfe2UxlnXVBcFQaKkELAZmLNEvhAMpHZvGNytLAcCPBdKp8Ce1nP65
OJH4vKba+Evo1heiWiwQfzJN73voktGaOleyx3N/ThlRpfAX7KeLeHXpOnwKIhpN
IKG2sMDtgzi0BdVL/Otvq9FMtM7YjKRBCuisfDRcKnbkyfUwTYmRNL2iZrALscfI
7te1hSevwjoE/OE9sgU7AvC0vdb6Fm2DXLekahalRXtQtOHF9yXx7DdSCQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBBmE4zu0FH6cdLpRnrxWFCIqo97MB8GA1UdIwQY
MBaAFAFGtCn4xJYR/P6h76GlG5wO3bbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMt
ZWEyNmU3NDZhMGFkLzEvRUdZVGpPN1FVZnB4MHVsR2V2RllVSWlxajNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMtZWEyNmU3NDZhMGFk
LzEvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDWS6oAwQC
uYdAAwQAvPHSAwQAwWlHAwQBwpbYAwQBw8hWMA0GCSqGSIb3DQEBCwUAA4IBAQAI
JCsQxRWg6DPoia8ptAMrt6piMJ2Hi9sSEqPwUl1LBlR/yunYAjbmNdMWhI7ZSwMt
Alu8B3LGKYqNk4b7VZ4eoKnr6kLityXehqohDATO7Na1BZRNqaJF9YBd86w9S1NS
v7N3dsR+AVvHcHWLZ03aFaWOt3/SxAkINNBKGtddAuxxkymJPbrKLdATleSN3qL2
itdEO6Zsf4KimxLRiFhvUjajUuGEDUmpNmU0CmFE76vR3FHGFkGDbzp5H/65Qoo2
ISq2nfc45ER2GmRHOqeofcQYDgushj8Mm7A6krKhfICzYDOVhR9mAtTbrpLdi+YI
mTP4BXrhRkHuU9qeN8gr
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:36:38 2025 by rpki-client