Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/EOBtHTjA0ZDsrADWjmriNqh0ee4.roa
File: EOBtHTjA0ZDsrADWjmriNqh0ee4.roa (raw, json)
Hash identifier: TxDODlaafoC1OYemDEfnXQw9tVDBB6F8dgEKF8cHaBQ=
Subject key identifier: 10:E0:6D:1D:38:C0:D1:90:EC:AC:00:D6:8E:6A:E2:36:A8:74:79:EE
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019F94213DA7D5F11DA60DBD8B2C72BEB30F
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/EOBtHTjA0ZDsrADWjmriNqh0ee4.roa
Signing time: Fri 24 Jul 2026 12:37:14 +0000
ROA not before: Fri 24 Jul 2026 12:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42295
IP address blocks: 85.187.16.0/24 maxlen: 24
93.152.231.0/24 maxlen: 24
93.152.232.0/24 maxlen: 24
185.240.133.0/24 maxlen: 24
195.95.156.0/24 maxlen: 24
195.191.34.0/23 maxlen: 23
2001:67c:530::/48 maxlen: 48
2a0c:2180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:21:3d:a7:d5:f1:1d:a6:0d:bd:8b:2c:72:be:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Jul 24 12:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10e06d1d38c0d190ecac00d68e6ae236a87479ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:51:6f:ba:e0:fa:68:49:31:61:61:be:dd:
33:a5:54:d4:31:fa:0a:ba:ff:8b:08:5e:c7:b4:fd:
53:68:f2:25:db:3e:b2:4e:76:f6:8d:3a:41:13:5a:
3a:f1:a8:e1:c1:42:fb:8c:88:51:31:51:2b:b1:3f:
43:b2:14:b4:ed:09:c4:e5:f2:28:d2:86:19:08:88:
fd:5d:20:30:7e:d0:a6:cb:eb:57:cb:cd:fc:01:01:
d9:50:83:b0:f2:09:ce:1b:18:cc:e7:8f:da:f8:8b:
f0:87:19:7c:39:86:6d:b3:e0:ed:1b:ff:66:9d:6d:
66:bf:ea:59:af:5f:04:d2:1d:16:d9:34:21:ca:6f:
41:94:67:2f:ec:df:86:96:c7:55:bd:7d:fe:1a:28:
21:08:f5:56:36:8f:e8:8f:23:eb:8d:bf:1b:a6:98:
a1:f2:fe:47:64:a7:ef:c6:d3:f9:63:02:fd:85:68:
9f:84:be:24:e0:15:ae:85:9c:81:40:95:ee:ca:d8:
e3:7f:4c:d3:60:2e:3d:84:8b:01:bb:2d:c5:d2:35:
13:dd:ab:68:d2:d1:e3:3d:4d:2e:8d:29:42:5e:45:
2e:c3:1d:97:f4:6e:f4:a4:dc:1d:7f:88:37:6f:36:
b4:27:8b:ff:5d:69:83:94:50:1f:be:3f:78:97:bd:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:6D:1D:38:C0:D1:90:EC:AC:00:D6:8E:6A:E2:36:A8:74:79:EE
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/EOBtHTjA0ZDsrADWjmriNqh0ee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.16.0/24
93.152.231.0-93.152.232.255
185.240.133.0/24
195.95.156.0/24
195.191.34.0/23
IPv6:
2001:67c:530::/48
2a0c:2180::/32
Signature Algorithm: sha256WithRSAEncryption
38:ef:72:11:d8:8a:0b:26:2e:81:27:b5:ba:b1:b4:40:45:b0:
8e:50:6e:30:e1:f1:89:3e:dd:5d:55:45:a2:1a:0c:78:1f:6e:
3a:78:4c:2e:bb:6c:f2:52:c7:e4:a8:cf:59:30:4c:14:f6:d4:
51:48:1f:5f:15:b3:3e:75:76:70:bd:fa:03:ef:1a:d1:76:8d:
03:69:cd:55:75:61:8e:dd:6d:47:70:d7:b9:46:5f:eb:b1:55:
b6:51:4b:da:94:e7:8d:e0:16:50:5b:43:09:1d:80:d2:6b:33:
b2:cc:64:86:c1:28:93:a6:63:b1:ec:77:57:ae:64:1f:3c:da:
e6:b9:11:d6:59:6b:40:ea:fc:ff:6a:8d:0c:49:af:f4:60:e3:
09:23:a8:b6:25:7b:44:9f:e5:92:ee:b7:57:9a:50:a5:af:69:
06:2e:3e:c7:b5:c2:d0:cb:52:34:71:fb:8c:29:a4:dd:9e:87:
b0:c3:08:69:62:be:88:8b:91:61:31:2c:36:58:7e:70:72:45:
19:0d:67:c6:30:c5:b9:df:3b:d3:58:73:43:60:9f:5f:4a:db:
4d:c0:8b:01:20:21:e4:fa:f4:7c:b4:4a:c9:7c:b0:b6:46:c4:
90:01:e7:9d:0c:05:ee:f5:0b:02:ff:7d:f9:aa:dd:70:31:12:
65:62:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:24 2026 by rpki-client