Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/EqQMeL6zx5KJ7G-6yvg5oeaml80.roa
File: EqQMeL6zx5KJ7G-6yvg5oeaml80.roa (raw, json)
Hash identifier: +hIYVqIF3npRwqzc+KC9S17raCPIuUeac2Niy0EAaaQ=
Subject key identifier: 12:A4:0C:78:BE:B3:C7:92:89:EC:6F:BA:CA:F8:39:A1:E6:A6:97:CD
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0198F0898779FE4ABD5A3E7F9D15CE11D0B7
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/EqQMeL6zx5KJ7G-6yvg5oeaml80.roa
Signing time: Thu 28 Aug 2025 11:56:41 +0000
ROA not before: Thu 28 Aug 2025 11:56:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213784
IP address blocks: 78.143.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:89:87:79:fe:4a:bd:5a:3e:7f:9d:15:ce:11:d0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Aug 28 11:56:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12a40c78beb3c79289ec6fbacaf839a1e6a697cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:31:10:35:3c:77:e3:70:0d:2f:c1:09:b7:b0:
6a:9b:ac:2a:a6:46:33:0b:85:27:14:c5:ec:5e:e4:
4d:c2:10:d6:b3:0f:a4:4f:0d:b1:a8:74:d5:7f:2a:
61:85:cb:db:65:aa:00:86:26:a9:92:94:5a:e3:eb:
9a:ec:f5:ba:b0:05:dd:46:19:37:80:91:c0:30:c5:
0c:da:58:30:e4:06:c0:a2:a4:88:fa:3f:17:06:83:
70:42:b6:20:c1:7a:3a:75:19:14:2a:e4:e0:e3:63:
cf:cd:16:38:a4:99:43:f4:e7:11:85:1f:6b:94:5d:
8e:6a:77:e1:23:10:38:c7:eb:9e:97:de:2e:23:1a:
93:17:fd:85:03:66:8b:7e:32:3f:6c:c3:ee:64:44:
58:61:ea:09:0f:66:bd:1b:3d:85:4f:cf:18:6d:7d:
56:04:f0:72:41:20:b5:ea:3a:83:83:34:1f:9d:cf:
2d:cc:15:5a:44:5f:d0:ae:b8:85:be:ee:14:37:e0:
47:99:19:b9:93:9d:28:20:bd:9b:f7:5f:65:d6:e5:
6f:9c:83:8e:23:b3:d9:2b:4f:42:6e:22:ac:51:d0:
a9:08:62:f2:7f:6c:f3:2f:3a:95:3e:e0:9a:92:34:
af:80:e9:ea:b7:09:20:88:c1:34:e5:61:4b:14:c2:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:0C:78:BE:B3:C7:92:89:EC:6F:BA:CA:F8:39:A1:E6:A6:97:CD
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/EqQMeL6zx5KJ7G-6yvg5oeaml80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:e1:a1:1a:4c:bf:55:d3:53:07:b9:52:7c:c4:31:5b:6a:43:
46:1e:b2:79:be:aa:5a:bf:01:cc:9c:e3:fb:cd:61:93:fc:52:
a1:6f:5d:f2:07:b5:f4:89:2c:35:a2:25:6c:cf:06:4d:1d:7b:
1c:3f:ed:de:9f:d8:95:d9:09:4e:1d:3b:d1:82:1e:15:dd:86:
e2:f9:04:1d:47:fe:a9:f7:24:b8:3d:e5:e2:ef:b1:c4:16:97:
bf:98:90:3d:66:1e:72:19:7a:33:84:a5:e7:bf:e1:b6:ed:03:
b9:46:fc:36:69:55:0b:7d:ac:07:a5:70:57:7c:da:be:4a:73:
fd:67:55:2e:45:84:2b:6c:6e:3d:9e:11:1f:66:21:1f:f0:d4:
c3:d9:a0:f7:58:41:3f:97:7c:39:3b:1e:63:34:76:34:ed:25:
84:66:f4:60:99:84:e6:e8:92:7a:a5:1e:ee:39:fa:01:47:c7:
d3:1a:ab:5b:3b:fc:9f:d8:96:05:8e:a6:e9:5b:38:eb:11:26:
53:3b:40:c5:43:b2:2a:29:d8:84:67:a3:dd:97:6d:bf:34:63:
3a:82:04:5a:59:f1:08:fc:54:a7:22:9a:22:3f:2a:e6:c5:c7:
dd:ad:6c:62:34:90:00:5d:ab:12:1d:c3:5b:c7:62:ee:96:d7:
96:4e:6d:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjwiYd5/kq9Wj5/nRXOEdC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjUwODI4MTE1NjQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmE0MGM3OGJlYjNjNzkyODllYzZmYmFjYWY4MzlhMWU2YTY5N2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zEQNTx343ANL8EJt7Bqm6wqpkYz
C4UnFMXsXuRNwhDWsw+kTw2xqHTVfyphhcvbZaoAhiapkpRa4+ua7PW6sAXdRhk3
gJHAMMUM2lgw5AbAoqSI+j8XBoNwQrYgwXo6dRkUKuTg42PPzRY4pJlD9OcRhR9r
lF2OanfhIxA4x+uel94uIxqTF/2FA2aLfjI/bMPuZERYYeoJD2a9Gz2FT88YbX1W
BPByQSC16jqDgzQfnc8tzBVaRF/QrriFvu4UN+BHmRm5k50oIL2b919l1uVvnIOO
I7PZK09CbiKsUdCpCGLyf2zzLzqVPuCakjSvgOnqtwkgiME05WFLFMLFIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBKkDHi+s8eSiexvusr4OaHmppfNMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvRXFRTWVMNnp4NUtKN0ctNnl2ZzVvZWFtbDgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTo/oMA0G
CSqGSIb3DQEBCwUAA4IBAQA64aEaTL9V01MHuVJ8xDFbakNGHrJ5vqpavwHMnOP7
zWGT/FKhb13yB7X0iSw1oiVszwZNHXscP+3en9iV2QlOHTvRgh4V3Ybi+QQdR/6p
9yS4PeXi77HEFpe/mJA9Zh5yGXozhKXnv+G27QO5Rvw2aVULfawHpXBXfNq+SnP9
Z1UuRYQrbG49nhEfZiEf8NTD2aD3WEE/l3w5Ox5jNHY07SWEZvRgmYTm6JJ6pR7u
OfoBR8fTGqtbO/yf2JYFjqbpWzjrESZTO0DFQ7IqKdiEZ6Pdl22/NGM6ggRaWfEI
/FSnIpoiPyrmxcfdrWxiNJAAXasSHcNbx2LulteWTm2j
-----END CERTIFICATE-----
Generated at Thu Sep 18 23:33:27 2025 by rpki-client