Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EEgyL_vocsCWaynIK6qU6vbqyA4.roa
File:                     EEgyL_vocsCWaynIK6qU6vbqyA4.roa (raw, json)
Hash identifier:          lx0nHNu3uhUx1KBSGw7ERPPpVbQ9pdd8mDGdTxTRVag=
Subject key identifier:   10:48:32:2F:FB:E8:72:C0:96:6B:29:C8:2B:AA:94:EA:F6:EA:C8:0E
Certificate issuer:       /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial:       01A03CA9AFD797FF0E79B8E3834E65C4F67B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EEgyL_vocsCWaynIK6qU6vbqyA4.roa
Signing time:             Wed 26 Aug 2026 06:02:28 +0000
ROA not before:           Wed 26 Aug 2026 06:02:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     402265
IP address blocks:        147.90.105.0/24 maxlen: 24
                          147.90.108.0/24 maxlen: 24
                          147.90.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3c:a9:af:d7:97:ff:0e:79:b8:e3:83:4e:65:c4:f6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
        Validity
            Not Before: Aug 26 06:02:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1048322ffbe872c0966b29c82baa94eaf6eac80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:32:00:38:4b:cf:f8:df:1d:5c:f9:5d:8b:
                    2b:39:46:9d:66:bc:f7:72:96:b3:3e:ea:5b:fa:89:
                    4e:ad:08:ad:9a:53:da:e8:e6:5b:1a:c5:e7:67:fd:
                    cd:1e:af:23:02:5c:f3:d8:52:be:0c:10:ae:29:3f:
                    94:a0:d5:58:c5:0e:ce:c8:21:73:b1:4e:4b:27:c5:
                    43:87:e0:92:30:8a:77:6e:c7:e5:c1:9f:88:6f:3e:
                    51:39:2f:bd:94:e2:f7:b2:8c:26:22:c6:04:95:03:
                    bb:10:79:f9:2f:f5:63:ec:88:94:5a:20:58:f9:16:
                    1a:f9:2c:e9:aa:b6:cd:eb:f6:d6:61:86:c2:89:ec:
                    73:c2:76:41:45:78:20:97:67:75:71:dd:7c:68:52:
                    c2:af:8f:08:c4:cb:70:ae:b7:5b:39:01:1f:39:57:
                    79:77:88:0d:72:6d:ef:b4:13:e6:4a:1f:88:d0:85:
                    a7:e6:e3:74:b2:40:7f:1f:b6:7f:1f:7b:a5:31:19:
                    fe:96:57:79:d6:29:91:59:1d:15:36:19:00:3e:b5:
                    23:83:6f:44:12:7a:18:f5:d6:a8:f1:c8:bf:e5:c7:
                    e8:e0:60:eb:4b:24:10:a1:70:06:23:55:21:52:f0:
                    dc:5a:6b:e1:8d:c9:f3:d3:34:c0:cf:6f:ea:a0:82:
                    95:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:48:32:2F:FB:E8:72:C0:96:6B:29:C8:2B:AA:94:EA:F6:EA:C8:0E
            X509v3 Authority Key Identifier:
                keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EEgyL_vocsCWaynIK6qU6vbqyA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.90.105.0/24
                  147.90.108.0/24
                  147.90.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:67:5b:27:26:70:cc:d1:24:e4:22:d6:42:82:de:c1:65:26:
         2d:18:aa:54:b7:7f:50:ae:8a:ec:13:60:17:5e:ab:f0:1d:46:
         24:b6:f4:a0:7d:42:6d:41:2d:3b:cf:c0:f4:b1:d6:79:6e:52:
         b3:cc:ad:ee:c7:d8:39:fb:59:15:f9:d6:3c:8e:70:f0:d4:b3:
         5e:29:49:fc:f1:b3:67:68:72:b9:5f:38:13:b1:ba:7f:ff:b8:
         34:1b:ab:57:36:21:6c:d7:01:81:ca:c3:83:06:41:fc:0f:a1:
         7b:dc:15:4c:63:cf:2c:d9:22:18:71:a1:ca:26:ea:f8:5f:1f:
         49:ed:ac:b8:aa:7b:b2:d5:6a:6e:29:d5:4a:0e:26:c2:83:5d:
         39:5f:cf:6e:80:b0:9a:c5:d1:79:f2:a6:8f:e1:8e:00:16:60:
         e4:13:cc:d0:c1:c7:ba:3d:14:fd:62:5a:89:f3:b1:f7:57:c5:
         cd:e4:1a:4d:1a:ad:69:0b:0b:7c:fd:5e:72:5f:c4:b2:cb:0e:
         2e:c4:9b:e2:5f:91:8b:4a:be:e3:7e:38:d5:8a:00:14:51:78:
         eb:ef:db:e6:08:97:63:91:68:4c:7b:f1:8e:3a:51:65:42:83:
         45:95:09:f8:fa:ff:7d:30:fc:c0:ab:57:ae:e0:1e:bf:f2:33:
         05:a0:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:26 2026 by rpki-client