Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/eHALFgV9am-1IrhPHRlbdBxoSTc.roa
File: eHALFgV9am-1IrhPHRlbdBxoSTc.roa (raw, json)
Hash identifier: 7YuLDtKyJ3ZE+0GcVPCYmJswf2D7KxEtyodJ5yEZh/Y=
Subject key identifier: 78:70:0B:16:05:7D:6A:6F:B5:22:B8:4F:1D:19:5B:74:1C:68:49:37
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019EBF3BDC8B7D73506811331D3CD6FCC9B3
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/eHALFgV9am-1IrhPHRlbdBxoSTc.roa
Signing time: Sat 13 Jun 2026 04:27:11 +0000
ROA not before: Sat 13 Jun 2026 04:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213732
IP address blocks: 37.32.42.0/24 maxlen: 24
37.32.44.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
178.239.144.0/24 maxlen: 24
178.239.149.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
178.239.157.0/24 maxlen: 24
185.243.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:3b:dc:8b:7d:73:50:68:11:33:1d:3c:d6:fc:c9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 13 04:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78700b16057d6a6fb522b84f1d195b741c684937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:e4:d0:e7:65:b1:27:87:d2:12:8c:de:20:
ae:36:f6:e5:f3:91:62:41:7c:97:dc:df:d7:09:94:
56:20:f2:14:a3:fe:94:d1:2a:f6:a7:3e:94:b1:2d:
52:63:82:51:a4:35:11:e8:44:80:33:c9:c2:b9:45:
d7:2a:77:2d:30:db:a7:51:70:9f:33:77:72:2e:88:
7c:ec:07:f2:5c:a6:06:94:a6:1a:cb:f4:89:ba:fd:
cd:e6:18:26:37:88:2a:54:91:f4:c3:bf:9d:8a:7b:
58:76:a0:ff:01:6c:38:c9:02:4b:e5:67:57:05:03:
d7:02:37:59:d3:96:ea:f5:e4:cd:b2:1e:32:0c:a8:
16:a4:ff:c5:54:d9:8c:c7:a9:55:71:d3:78:52:6d:
31:3b:b5:2c:97:02:50:50:d7:2b:47:2f:94:11:36:
7d:c6:6b:3c:4c:87:b3:82:b8:64:b2:e3:f7:94:07:
78:48:89:95:ea:44:69:0a:03:84:e3:05:0c:e1:28:
db:f9:e6:c9:d3:46:d5:55:b9:a0:21:dc:f3:02:de:
f6:7a:a8:05:c4:9e:75:42:e6:0d:30:13:83:8d:e4:
02:61:63:66:f0:5c:5a:50:26:3a:7f:d4:2b:19:62:
43:24:a7:39:68:a5:cd:c1:f7:62:69:2e:d2:40:3d:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:70:0B:16:05:7D:6A:6F:B5:22:B8:4F:1D:19:5B:74:1C:68:49:37
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/eHALFgV9am-1IrhPHRlbdBxoSTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.42.0/24
37.32.44.0/23
178.239.144.0/24
178.239.149.0-178.239.150.255
178.239.157.0/24
185.243.49.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:01:cd:a1:09:0f:e0:f4:27:f3:72:bf:3b:85:54:ba:f0:8f:
65:f2:05:d0:3f:68:0e:0c:b6:f4:b4:9d:9e:d6:de:d6:71:d3:
ac:1b:b2:58:a6:c0:14:a3:9d:e1:03:c2:1f:14:41:92:cb:c5:
e8:60:f7:c2:9e:ad:e1:22:75:61:5a:8f:3a:9c:ec:25:3a:91:
ca:ab:50:c2:e5:4a:a8:9c:e2:06:22:b1:38:aa:70:3f:18:cf:
21:4b:49:33:00:69:cd:ae:4d:42:72:40:40:11:38:bd:14:bf:
45:01:61:43:06:7c:d1:35:f6:ea:61:7c:3f:82:c7:9e:ad:e5:
41:ae:91:3c:5a:26:62:b9:00:f6:bb:3b:96:a8:8d:21:e5:b0:
1e:76:b3:d4:10:47:86:8c:f4:5f:35:33:4c:fd:62:1b:d6:52:
f1:11:17:ea:fd:37:3e:f5:3a:66:72:04:8e:4b:0e:1b:d1:9c:
8e:3b:35:cb:20:b0:0a:d1:36:0d:bf:42:8c:1c:70:04:e4:34:
c9:e6:ee:f6:7d:fb:13:43:85:66:b1:6f:f2:00:31:b5:04:5d:
0f:d3:d5:92:f0:a0:69:94:4a:cb:38:d4:17:f4:74:1b:84:9a:
d0:39:f7:4f:10:cc:28:ed:ca:05:a8:81:0e:c2:de:9c:1e:4c:
32:84:0e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:43 2026 by rpki-client