Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/eHQbOAyv0RKETTpb2aGFBjCfswk.roa
File: eHQbOAyv0RKETTpb2aGFBjCfswk.roa (raw, json)
Hash identifier: ZOv+B97oBeSHjUy8HXIfk8kqKpqfJNlE9fjiuk6K76Y=
Subject key identifier: 78:74:1B:38:0C:AF:D1:12:84:4D:3A:5B:D9:A1:85:06:30:9F:B3:09
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 019B7B362404850CECBB9A811B7574DB2BCB
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/eHQbOAyv0RKETTpb2aGFBjCfswk.roa
Signing time: Thu 01 Jan 2026 20:18:24 +0000
ROA not before: Thu 01 Jan 2026 20:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213208
IP address blocks: 37.200.85.0/24 maxlen: 24
2a07:5200::/29 maxlen: 48
2a07:5200::/48 maxlen: 48
2a07:5201::/48 maxlen: 48
2a07:5201:1::/48 maxlen: 48
2a07:5202::/48 maxlen: 48
2a07:5202:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:24:04:85:0c:ec:bb:9a:81:1b:75:74:db:2b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Jan 1 20:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78741b380cafd112844d3a5bd9a18506309fb309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:e9:ff:30:e9:33:25:26:de:03:02:ad:1b:
d3:ca:87:89:33:60:e0:e3:34:2d:dd:49:6c:79:c5:
e1:8e:c5:57:22:e1:b8:ef:6c:c2:a7:4b:de:67:40:
a1:0f:b3:15:fd:b5:b3:b8:77:67:80:44:96:f2:06:
3c:91:5f:3d:15:f6:ac:fc:d7:dd:c1:f5:ce:9e:5c:
38:b6:c5:6a:9c:55:24:34:cd:3c:7f:65:ac:a8:94:
12:2d:07:1b:4a:2f:3d:fc:f2:4a:b5:58:f3:3b:c5:
b6:25:fe:e6:d7:d6:41:fc:8b:8d:31:91:a0:3a:ff:
7b:be:e0:b1:e0:c8:5d:16:31:59:43:5d:5e:a1:55:
50:b1:a1:2e:f0:80:2f:d5:9a:dd:ff:86:05:64:62:
37:51:10:b4:8f:bc:9c:47:01:62:98:41:6b:bf:5d:
80:9e:46:90:63:ea:7b:53:03:d1:cc:a8:f2:99:db:
e8:6e:e5:12:f8:42:bb:cb:b0:a3:66:37:b8:b5:0d:
77:b8:b8:89:8d:7c:6d:de:65:8f:a9:16:12:6c:d4:
b6:61:d0:35:d1:48:bc:61:1a:76:e0:3c:06:cf:12:
a1:9c:8f:24:23:2c:e5:d8:64:66:6b:13:4f:ad:82:
40:b9:39:e8:dc:f7:f3:f7:f4:c9:29:9a:7c:49:9f:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:74:1B:38:0C:AF:D1:12:84:4D:3A:5B:D9:A1:85:06:30:9F:B3:09
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/eHQbOAyv0RKETTpb2aGFBjCfswk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.85.0/24
IPv6:
2a07:5200::/29
Signature Algorithm: sha256WithRSAEncryption
65:94:bd:38:f0:bf:af:b3:e2:1b:0c:c3:5d:02:c0:4d:a4:2b:
d6:5d:4a:ca:fc:18:88:fa:f1:cc:3b:a9:b6:c0:e7:37:53:40:
90:94:56:0f:88:36:8b:33:dc:b6:20:01:40:5d:55:d4:81:3f:
b2:6b:6c:69:e2:30:d4:3e:86:5d:71:b1:c9:88:61:5e:88:f4:
bc:36:fd:56:84:09:07:99:bf:46:d5:5c:60:6c:5d:d5:61:64:
85:ab:03:b9:b0:2b:0f:7a:c8:e8:89:89:03:f5:12:b1:30:77:
19:da:38:33:07:e1:e4:d9:3f:a5:64:69:49:01:15:fa:66:50:
b9:bf:4f:ff:ba:05:d4:71:51:14:8c:2a:61:12:ef:04:b8:11:
9c:af:44:1c:68:cc:a4:c7:28:9d:0d:3b:58:76:d1:20:19:35:
f9:a2:60:92:31:cc:2a:dd:f7:94:ed:eb:25:a4:70:fb:42:9e:
06:5a:28:18:16:52:2b:fd:4a:05:8a:b5:7f:94:c4:1f:b4:92:
51:d1:79:50:fe:88:39:31:56:2d:11:3f:2e:f6:dd:58:24:5e:
9c:d8:0c:c2:d6:f3:71:92:ba:a7:15:06:df:51:35:be:01:b2:
eb:ea:11:76:b8:74:f6:ac:fc:1a:10:70:9e:e0:90:48:3b:2d:
69:23:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:25:12 2026 by rpki-client