Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/ehySIEsads4WV7sp7DowBNHPfFg.roa
File: ehySIEsads4WV7sp7DowBNHPfFg.roa (raw, json)
Hash identifier: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=
Subject key identifier: 7A:1C:92:20:4B:1A:76:CE:16:57:BB:29:EC:3A:30:04:D1:CF:7C:58
Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial: 019C6676453DDB5B227F63244EBE3B59C655
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/ehySIEsads4WV7sp7DowBNHPfFg.roa
Signing time: Mon 16 Feb 2026 12:39:12 +0000
ROA not before: Mon 16 Feb 2026 12:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39305
IP address blocks: 89.40.176.0/22 maxlen: 22
94.24.24.0/22 maxlen: 22
94.24.30.0/23 maxlen: 23
152.89.197.0/24 maxlen: 24
158.247.56.0/22 maxlen: 22
185.56.160.0/24 maxlen: 24
212.6.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:76:45:3d:db:5b:22:7f:63:24:4e:be:3b:59:c6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Validity
Not Before: Feb 16 12:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a1c92204b1a76ce1657bb29ec3a3004d1cf7c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:69:6b:ea:48:e1:1b:97:c4:dc:20:a4:56:
cb:fc:77:1e:25:d7:7a:7f:50:5c:15:31:93:df:c3:
41:5b:26:4e:60:59:c9:c0:dd:fb:cc:89:68:e9:c0:
20:26:33:e1:95:eb:56:bb:f6:56:44:07:2b:ed:63:
eb:cc:68:c7:a8:a9:1d:22:75:a5:88:54:e2:cc:1e:
c2:19:34:17:59:a1:5d:79:87:94:08:54:b5:d8:cf:
4a:91:e7:9b:9b:43:bd:2f:f0:06:67:d5:83:83:6b:
6d:bf:ed:f6:60:42:64:eb:fb:33:43:47:2e:96:c3:
34:56:0a:d5:15:f6:76:7f:ed:46:6e:d1:f3:30:94:
7e:32:84:9c:c6:18:5e:c1:7c:8e:c5:be:6f:e2:d5:
84:d6:71:00:d2:9e:da:91:86:80:20:d4:bb:df:37:
40:2b:45:09:82:88:c5:43:b9:6b:7a:b6:73:3e:0e:
d8:d2:1a:3f:2f:a1:22:d8:03:ee:71:aa:7b:80:ef:
c2:8f:14:48:a3:45:9f:7e:a7:f8:7d:7d:01:fb:20:
74:78:f5:42:04:17:8a:71:a9:eb:cb:2b:cf:a5:99:
81:2a:e0:fa:7d:c4:c1:3f:1b:9a:f5:5f:b4:71:bd:
fc:95:01:ba:c8:85:4b:15:9b:bf:10:d8:70:16:d4:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1C:92:20:4B:1A:76:CE:16:57:BB:29:EC:3A:30:04:D1:CF:7C:58
X509v3 Authority Key Identifier:
keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/ehySIEsads4WV7sp7DowBNHPfFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.176.0/22
94.24.24.0/22
94.24.30.0/23
152.89.197.0/24
158.247.56.0/22
185.56.160.0/24
212.6.47.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e7:67:23:d0:06:c3:25:0d:1c:ad:15:c3:97:db:81:c3:0e:
be:52:f8:9e:98:e0:27:4d:b9:e5:f6:3d:e3:a8:3d:19:b2:73:
5c:c4:3c:5d:2d:80:ef:e7:b6:81:2c:ce:48:0f:e1:d2:5a:21:
95:de:14:18:ae:db:84:fa:d4:7d:0f:6e:08:1a:29:b0:4f:b7:
3c:73:a7:79:5c:57:83:96:fc:33:78:6d:30:ab:20:db:be:db:
f2:4a:57:93:d8:6d:a0:4d:69:e1:81:3f:36:a3:f0:3d:0a:f5:
3f:3d:45:65:9e:30:ad:1b:be:f7:04:61:22:2e:c8:a4:6d:97:
06:7d:f3:48:bb:4b:fc:5d:93:7b:4e:0b:a1:a7:33:dc:1e:27:
88:df:3c:4f:be:66:9f:22:f4:eb:d1:6f:2d:5f:05:5d:87:ac:
03:69:b2:7b:a9:16:e7:d8:66:4f:97:18:9f:21:0c:25:0e:c3:
f1:31:a7:de:ba:2d:38:0e:5d:58:fc:97:83:ef:1e:e9:6e:f9:
95:f8:45:28:68:7a:bd:39:02:cd:ec:26:f2:2f:3b:9b:66:09:
ce:f4:89:9b:4e:aa:11:0d:91:5a:37:87:b4:b0:78:c7:28:be:
29:a1:3c:86:ec:2b:59:f6:2e:40:cd:19:4e:b2:4a:fd:84:1f:
f0:a9:ed:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:32:50 2026 by rpki-client