Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/eotweUrWEL_0DfUUqijHZZ3ruqM.roa
File: eotweUrWEL_0DfUUqijHZZ3ruqM.roa (raw, json)
Hash identifier: hrYq2mrzN6hWJEwmDix6SMerb76fJswO5RvjpH7bWc4=
Subject key identifier: 7A:8B:70:79:4A:D6:10:BF:F4:0D:F5:14:AA:28:C7:65:9D:EB:BA:A3
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0198E6B6EDE5213ABB8145197C226554A34A
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/eotweUrWEL_0DfUUqijHZZ3ruqM.roa
Signing time: Tue 26 Aug 2025 14:10:04 +0000
ROA not before: Tue 26 Aug 2025 14:10:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.106.0/24 maxlen: 24
146.247.108.0/24 maxlen: 24
146.247.111.0/24 maxlen: 24
146.247.112.0/23 maxlen: 23
146.247.114.0/24 maxlen: 24
146.247.115.0/24 maxlen: 24
146.247.116.0/24 maxlen: 24
146.247.117.0/24 maxlen: 24
146.247.120.0/24 maxlen: 24
146.247.121.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
146.247.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:b6:ed:e5:21:3a:bb:81:45:19:7c:22:65:54:a3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Aug 26 14:10:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a8b70794ad610bff40df514aa28c7659debbaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:f1:82:c6:28:97:48:8f:d0:b2:a7:45:41:
be:be:e8:bf:d8:82:16:2c:73:fd:53:fe:30:2f:cd:
0b:9c:00:de:cb:30:ac:99:40:b8:ec:ff:d8:f2:e1:
0a:b4:35:a4:dd:e8:17:15:f2:3c:49:e3:8f:28:15:
1d:99:e0:5a:13:5d:c3:8c:8f:16:2e:71:23:3f:28:
39:1b:6c:d1:fd:7d:5f:a5:7a:9b:c1:06:7b:74:d0:
06:1f:67:6a:64:26:53:3f:5a:0a:9c:01:9c:fe:af:
24:9e:60:fb:db:f7:98:e6:3e:f3:47:ee:e1:08:61:
f4:b3:06:fe:ba:5d:42:c8:47:64:de:50:a7:b6:8a:
f2:59:2e:aa:7a:d7:84:05:0f:af:b6:f3:35:e8:b4:
50:b8:38:a8:b7:ae:6b:5f:c9:42:be:1d:8d:c2:ec:
40:79:66:1f:1d:66:e7:55:8e:50:a5:87:c0:f3:25:
bd:85:88:b5:01:e2:39:bd:b5:fc:cb:8a:5b:6a:f3:
d6:09:b6:c3:7b:45:0f:ec:53:c6:67:4c:f6:a1:76:
b7:15:00:98:6e:07:2d:ab:d1:98:39:a6:a4:cc:7c:
82:22:81:55:61:5b:86:b5:53:13:34:ed:fa:29:3b:
16:d3:0c:46:47:19:8f:b1:ca:a2:3d:d8:e3:63:40:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:70:79:4A:D6:10:BF:F4:0D:F5:14:AA:28:C7:65:9D:EB:BA:A3
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/eotweUrWEL_0DfUUqijHZZ3ruqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.106.0/24
146.247.108.0/24
146.247.111.0-146.247.117.255
146.247.120.0-146.247.122.255
146.247.126.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:6b:f2:4a:96:f1:46:89:b5:aa:96:6a:8d:0d:e8:e7:fc:93:
88:d9:ca:08:06:b2:17:87:fe:82:9f:54:08:a4:ce:38:72:9e:
46:e6:05:01:46:5b:be:8d:a2:d9:8f:37:63:a2:54:10:47:af:
8e:7a:bf:ab:4d:84:64:fc:90:ef:eb:14:35:75:d8:c3:a3:2c:
be:e1:62:6c:cc:ce:a9:61:93:36:95:9f:8b:43:4b:d2:26:b0:
2e:32:d8:7f:a9:64:5f:92:bc:85:39:8c:a5:cb:03:af:97:f0:
4b:e2:82:2b:ac:bc:a0:fe:46:53:bc:97:28:c0:40:4e:7a:f8:
e6:dc:f9:99:ce:13:ab:81:66:79:d6:27:0a:13:c3:23:80:95:
32:92:f7:c6:93:19:cf:f7:24:91:91:15:e9:03:ac:ef:e5:a5:
e8:58:27:31:7b:30:06:42:fc:cf:b5:b3:95:b9:20:c4:6f:fe:
cc:98:44:35:4e:2b:0f:9e:a0:f3:32:78:d0:29:4c:f0:ee:0a:
87:a6:8f:b2:8b:94:aa:19:6d:9b:6c:ad:08:10:d9:36:bf:1f:
bb:b9:75:ef:e2:47:16:69:d0:80:17:bd:3c:1e:75:f3:12:f4:
b4:b4:22:31:85:07:45:c9:a6:47:73:cd:3f:1a:93:ba:f2:5b:
50:29:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:11:00 2025 by rpki-client