Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa
File: eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa (raw, json)
Hash identifier: 1hB/vcchKccjfMUEW19JzNX5vcI2nAxqryUItaWwuI8=
Subject key identifier: 7A:1F:BF:D4:82:BB:A0:20:FC:9D:B2:DC:C0:1D:61:FA:3B:22:BE:F4
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 019B7B364C11BEC18C620D58C4CE0040E31F
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa
Signing time: Thu 01 Jan 2026 20:18:34 +0000
ROA not before: Thu 01 Jan 2026 20:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209335
IP address blocks: 85.208.24.0/22 maxlen: 22
131.159.0.0/16 maxlen: 16
2a09:80c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:4c:11:be:c1:8c:62:0d:58:c4:ce:00:40:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Jan 1 20:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a1fbfd482bba020fc9db2dcc01d61fa3b22bef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:90:09:30:9c:47:6e:b6:66:98:6b:2c:54:
31:9e:90:e3:eb:70:39:04:30:8b:f6:82:cb:05:a7:
8b:aa:50:92:67:78:54:be:3e:12:fc:18:41:95:9c:
f2:d4:91:8a:f5:4a:fd:6f:75:49:e4:be:61:65:ea:
db:0d:f0:32:e6:0f:63:55:6c:77:b2:77:e4:86:08:
15:1c:47:9e:2a:f8:bc:eb:cd:ff:0a:37:75:f4:7c:
64:76:0d:66:72:d2:81:94:d6:d1:a4:3d:f8:13:e0:
5c:85:6f:71:3e:15:8f:9f:b3:fb:8a:63:d4:e1:cb:
a7:f2:c3:7b:8b:c4:50:04:28:78:06:bb:95:34:f7:
59:c8:11:f9:5f:9e:8c:a0:a2:0f:2b:20:ff:85:d4:
37:b7:30:ff:89:da:29:1d:19:02:39:8b:ac:cc:42:
c3:59:46:a3:7c:95:e5:c9:5b:d7:61:bc:af:20:81:
ba:e2:6c:6d:2a:11:35:63:7c:a6:45:c4:b6:90:d4:
81:00:fb:bb:f8:11:ea:5f:4c:c3:10:53:9d:d1:bf:
97:e0:85:e6:84:ed:e5:58:f7:04:e3:e9:5b:36:b3:
0e:2e:4d:4b:36:2b:78:39:96:b7:34:53:98:19:16:
8b:71:d7:60:8e:b0:69:d4:8d:95:4e:f4:85:14:fd:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:BF:D4:82:BB:A0:20:FC:9D:B2:DC:C0:1D:61:FA:3B:22:BE:F4
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.24.0/22
131.159.0.0/16
IPv6:
2a09:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:13:53:39:76:15:ba:78:5a:ea:d1:83:00:3a:83:c5:3c:e7:
db:29:c2:11:44:a4:c4:fa:ab:cd:03:5d:6f:77:69:ac:fa:a1:
92:28:71:e0:58:a0:b2:e6:8e:01:fd:a8:09:0a:ce:4f:55:86:
b7:27:fb:9f:79:da:6b:bb:b6:fd:3c:cc:c7:9d:ca:21:bc:bb:
e6:f9:68:48:a5:c6:26:56:70:0f:04:a2:04:6e:ba:c0:be:c7:
61:43:4c:7e:70:d6:10:68:d4:a7:d1:01:b0:45:2b:0a:3b:eb:
56:74:18:fd:15:bc:f9:c4:14:b1:d4:d9:bb:67:c4:cf:2b:8e:
1a:80:c6:ab:4a:f4:d8:de:d6:12:62:d4:ce:8a:4f:80:fc:19:
80:cb:c7:cb:ef:02:da:55:09:05:ee:c1:2f:3d:a0:69:e5:f9:
26:16:8b:79:a2:e8:30:7d:7b:f9:44:2a:e2:4c:7a:42:d6:8a:
9a:a0:3f:a2:b4:02:9e:30:dc:e8:11:05:b9:f8:d9:32:e4:cf:
d3:85:62:af:46:f6:cc:6d:40:b0:15:28:d0:6a:db:44:0b:ea:
94:9f:bb:e8:ff:aa:25:92:be:10:ef:74:09:5b:69:25:88:12:
4e:27:5d:70:e4:a1:08:ea:dc:7b:7c:8a:58:c4:04:68:36:f2:
17:ed:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:13 2026 by rpki-client