Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/htoJ_0dduxdMY_BvIY9vc_7YCmo.roa
File: htoJ_0dduxdMY_BvIY9vc_7YCmo.roa (raw, json)
Hash identifier: 2HIsy/NoK7pwW79rakzhrblUBxkuPIr9/QfEg6QVGp0=
Subject key identifier: 86:DA:09:FF:47:5D:BB:17:4C:63:F0:6F:21:8F:6F:73:FE:D8:0A:6A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F952BAADAB29C6582956D1E2B66A41310
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/htoJ_0dduxdMY_BvIY9vc_7YCmo.roa
Signing time: Fri 24 Jul 2026 17:28:14 +0000
ROA not before: Fri 24 Jul 2026 17:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209336
IP address blocks: 74.112.156.0/22 maxlen: 24
89.106.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:2b:aa:da:b2:9c:65:82:95:6d:1e:2b:66:a4:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 24 17:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86da09ff475dbb174c63f06f218f6f73fed80a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:6c:67:6d:ad:d5:b3:84:d7:4a:8b:1f:59:
cf:86:46:c1:b3:79:a2:ef:fd:fe:08:be:86:84:36:
96:9c:6a:b5:98:88:97:a7:8d:ae:ff:d4:6e:4d:4b:
b3:f4:b3:a3:e2:8b:b7:73:04:ca:e5:fe:1f:0d:3f:
5d:69:c8:3a:f3:50:a2:0b:78:73:f2:89:ab:0d:a1:
25:1f:a5:d4:5d:b1:1d:79:f7:de:49:19:c5:de:95:
c4:d3:74:35:98:06:b0:82:9b:ed:97:86:cb:e1:df:
c9:9f:6f:22:74:da:c0:c4:81:9b:63:a0:5d:fd:08:
9a:3f:68:69:97:ba:88:46:a1:86:70:a1:f2:c6:cc:
d6:55:73:a8:2e:f7:ab:33:c4:4e:63:8f:d6:e5:f8:
c9:ca:f1:1f:87:2c:ff:8e:3c:1e:d1:6f:21:33:9e:
71:55:f5:47:99:1c:5e:34:bf:6a:ae:e2:87:34:44:
8a:6e:f4:c3:27:06:1e:94:8f:f1:47:6b:ec:47:14:
7b:e1:21:38:4b:91:79:20:f7:84:4a:1e:49:8f:54:
54:57:b0:c9:69:5d:86:3f:75:de:55:8e:99:1e:f7:
16:ae:77:29:1c:f7:08:ee:a2:5f:84:c1:b3:a2:69:
99:38:8b:a4:48:e3:ef:96:95:e9:5c:c2:77:44:1a:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DA:09:FF:47:5D:BB:17:4C:63:F0:6F:21:8F:6F:73:FE:D8:0A:6A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/htoJ_0dduxdMY_BvIY9vc_7YCmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.156.0/22
89.106.27.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:27:5a:c0:e8:c4:78:2e:44:e1:ba:83:a0:c9:4b:bf:78:c1:
36:76:cb:b0:20:f2:ad:61:0f:60:68:6b:39:49:8f:8b:7f:e1:
6e:8f:85:63:04:ee:44:02:96:07:1c:dc:67:5a:bd:9d:90:77:
0f:51:f3:6d:29:0c:50:bc:45:a7:93:b1:3e:61:73:9b:9f:67:
34:9c:7c:16:a9:06:1c:71:fc:58:b6:c1:ca:99:da:c6:97:73:
ef:a1:4b:a8:92:9f:10:94:96:ce:fc:19:c6:fb:dc:f5:0e:35:
c1:62:aa:56:4f:9f:c2:00:b9:3e:44:a9:6b:fb:14:41:fb:65:
6b:d0:3f:c8:12:af:dc:f0:12:ef:d5:94:c1:a8:a8:43:57:0a:
57:c9:47:0c:83:4a:3f:3c:76:e2:66:5d:29:a3:c7:10:5f:c6:
10:f8:95:f0:7b:7a:8f:99:d4:c8:03:7f:d1:a8:0f:5e:50:7f:
31:4d:e3:68:b9:6e:26:63:c3:1d:f8:fd:95:93:97:c3:ea:85:
89:65:11:0a:24:6d:0c:99:73:37:95:10:e9:66:c6:11:fe:76:
2f:d4:48:dd:bb:41:fb:23:d3:39:b2:fc:76:cb:08:39:b7:b2:
44:18:be:45:6a:00:f4:8d:d3:80:04:de:cb:b7:49:f7:17:44:
27:a1:bb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:57 2026 by rpki-client