Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/e6BOh4A7Z0EqXS_Z7v985a00_NI.roa
File: e6BOh4A7Z0EqXS_Z7v985a00_NI.roa (raw, json)
Hash identifier: EqH9IVqgjmT9i4a41FluNoDodNsuWZemaPP3A4ZtRNU=
Subject key identifier: 7B:A0:4E:87:80:3B:67:41:2A:5D:2F:D9:EE:FF:7C:E5:AD:34:FC:D2
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 019888B119C5A3AC024A5BFBC58BCBE2382E
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/e6BOh4A7Z0EqXS_Z7v985a00_NI.roa
Signing time: Fri 08 Aug 2025 07:59:24 +0000
ROA not before: Fri 08 Aug 2025 07:59:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 146.19.142.0/24 maxlen: 24
185.218.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b1:19:c5:a3:ac:02:4a:5b:fb:c5:8b:cb:e2:38:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Aug 8 07:59:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ba04e87803b67412a5d2fd9eeff7ce5ad34fcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:17:d1:dc:c9:4c:a1:b8:73:dc:95:1d:7a:
d6:d9:e1:dc:8a:6d:cb:3c:93:8f:62:a0:07:47:6b:
b9:8f:aa:d2:6e:3d:3e:4c:32:5a:9e:cf:3b:1a:f4:
57:8f:d2:7a:c5:6b:5b:13:70:1e:50:cd:4c:f9:64:
3e:0c:66:c7:5e:51:e3:ed:d3:ae:b4:fa:fd:08:f7:
96:3c:13:6a:1f:15:42:04:c7:15:9a:52:58:42:01:
27:4b:16:fe:c8:b2:23:c6:be:e5:82:09:95:88:e4:
1b:58:c0:64:75:bd:ba:30:e1:89:60:bd:d6:36:66:
26:1e:3d:ea:5b:02:44:62:b7:05:96:84:fa:27:f8:
cd:c1:17:71:48:e4:24:45:a3:f8:d8:fc:b6:76:ae:
e6:8e:02:5c:b1:0c:01:47:dc:42:58:9c:d9:55:e5:
a4:de:89:ed:7b:ad:0d:df:c3:59:fa:58:55:6b:aa:
9c:bd:a3:a6:a5:98:73:39:e2:20:f1:37:c9:22:8c:
c9:78:71:da:99:7a:dc:b2:2c:8e:a8:6a:bd:43:4d:
1d:27:8e:a1:d2:93:eb:87:1d:8c:68:ce:dd:ab:ac:
5b:7d:f1:dc:33:d0:4b:10:af:6b:94:b9:da:a9:30:
39:4d:47:70:56:41:f5:44:61:ce:0b:c7:aa:cc:89:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A0:4E:87:80:3B:67:41:2A:5D:2F:D9:EE:FF:7C:E5:AD:34:FC:D2
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/e6BOh4A7Z0EqXS_Z7v985a00_NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.142.0/24
185.218.184.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:08:f3:c0:a9:d3:af:8b:c0:83:6b:f3:7a:7b:b6:df:42:aa:
72:fb:55:ad:3e:29:eb:e9:76:76:94:69:ec:81:34:4d:bd:06:
96:6e:fd:a1:88:0e:8b:a4:1c:10:08:dd:c2:50:43:8c:d0:1c:
c8:b1:c6:a6:50:30:68:1a:7a:9f:a3:60:af:c4:38:f9:69:4c:
07:af:e1:c0:3c:d1:de:dd:93:9a:68:6c:bb:31:46:c7:28:fb:
fd:b5:21:ef:fa:06:89:42:08:20:fd:21:e5:af:ca:09:6c:ac:
79:ee:99:9e:37:99:e9:4e:b6:88:ee:e1:a5:a1:48:d4:d8:7f:
4a:9d:57:fd:50:e1:a8:14:ce:f7:e6:1b:b7:38:f7:93:0e:8b:
40:a3:40:66:4a:e5:4c:aa:d0:b9:8c:5a:26:95:f4:4c:8c:9f:
6f:46:3e:0b:6c:4c:71:f7:8b:88:a9:73:9e:cd:75:09:94:e5:
62:3a:40:a5:84:38:e4:e6:d7:62:66:13:ab:44:6b:c5:8a:92:
f7:82:f6:05:5f:ee:64:7c:07:89:bb:32:95:76:c6:cf:e0:c6:
25:17:f8:04:55:68:65:c9:6c:75:dc:c5:c8:a6:57:01:b7:ce:
9f:0f:97:19:20:49:ab:d1:22:66:16:8f:e1:bb:ef:47:81:44:
d2:c0:dc:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZiIsRnFo6wCSlv7xYvL4jguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh
Y2IwY2UwHhcNMjUwODA4MDc1OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmEwNGU4NzgwM2I2NzQxMmE1ZDJmZDllZWZmN2NlNWFkMzRmY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1YX0dzJTKG4c9yVHXrW2eHcim3L
PJOPYqAHR2u5j6rSbj0+TDJans87GvRXj9J6xWtbE3AeUM1M+WQ+DGbHXlHj7dOu
tPr9CPeWPBNqHxVCBMcVmlJYQgEnSxb+yLIjxr7lggmViOQbWMBkdb26MOGJYL3W
NmYmHj3qWwJEYrcFloT6J/jNwRdxSOQkRaP42Py2dq7mjgJcsQwBR9xCWJzZVeWk
3onte60N38NZ+lhVa6qcvaOmpZhzOeIg8TfJIozJeHHamXrcsiyOqGq9Q00dJ46h
0pPrhx2MaM7dq6xbffHcM9BLEK9rlLnaqTA5TUdwVkH1RGHOC8eqzInyiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHugToeAO2dBKl0v2e7/fOWtNPzSMB8GA1UdIwQY
MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct
MDUwMzc0OWFkZWEwLzEvZTZCT2g0QTdaMEVxWFNfWjd2OTg1YTAwX05JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw
LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhOOAwQA
udq4MA0GCSqGSIb3DQEBCwUAA4IBAQDQCPPAqdOvi8CDa/N6e7bfQqpy+1WtPinr
6XZ2lGnsgTRNvQaWbv2hiA6LpBwQCN3CUEOM0BzIscamUDBoGnqfo2CvxDj5aUwH
r+HAPNHe3ZOaaGy7MUbHKPv9tSHv+gaJQggg/SHlr8oJbKx57pmeN5npTraI7uGl
oUjU2H9KnVf9UOGoFM735hu3OPeTDotAo0BmSuVMqtC5jFomlfRMjJ9vRj4LbExx
94uIqXOezXUJlOViOkClhDjk5tdiZhOrRGvFipL3gvYFX+5kfAeJuzKVdsbP4MYl
F/gEVWhlyWx13MXIplcBt86fD5cZIEmr0SJmFo/hu+9HgUTSwNx5
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:12 2025 by rpki-client