Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/eojrh4FYJOqn2Ldzg006OCzOQCA.roa
File: eojrh4FYJOqn2Ldzg006OCzOQCA.roa (raw, json)
Hash identifier: wx1jFfpx9zsFd3AkjedbstvGgcY2Qb3PIq4eLA6x+1M=
Subject key identifier: 7A:88:EB:87:81:58:24:EA:A7:D8:B7:73:83:4D:3A:38:2C:CE:40:20
Certificate issuer: /CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Certificate serial: 019F23682D86482F05D034CE25B241D1078A
Authority key identifier: 35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/eojrh4FYJOqn2Ldzg006OCzOQCA.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202468
IP address blocks: 185.74.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2d:86:48:2f:05:d0:34:ce:25:b2:41:d1:07:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a88eb87815824eaa7d8b773834d3a382cce4020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:a3:b2:44:cb:2d:b0:b8:64:2e:f5:a1:37:
9b:28:b2:59:f1:53:04:e2:2b:ec:f9:83:74:91:47:
2b:22:aa:d8:b2:f0:95:b1:0d:d5:bc:b0:fd:0c:a3:
44:80:b9:6d:d9:f7:94:08:5f:f6:12:61:f0:1f:38:
76:36:c2:32:34:8f:14:95:9a:34:6d:32:b6:23:83:
63:39:78:be:79:56:48:3b:ac:7d:c4:25:9c:48:c8:
c5:df:fe:76:f0:a7:92:6b:2e:0a:96:95:37:86:fd:
91:8d:bc:5c:44:fe:d1:10:d4:2f:7d:25:6f:0a:df:
d4:a9:23:b8:bf:63:35:d7:ce:b5:d7:ed:ca:17:05:
0f:2c:1b:6e:d3:ab:8e:50:80:04:0c:41:f7:a7:fd:
41:9d:13:07:bc:2d:b9:b1:29:20:29:f0:48:e5:5f:
88:a7:8d:fa:89:eb:c8:4f:38:0a:cb:ff:70:6a:dd:
de:f7:25:e6:fe:0c:b9:0a:6b:3f:f8:8d:c6:c9:d6:
b6:08:47:7f:aa:8a:bc:7d:e2:81:07:0b:c0:22:9e:
56:b0:29:6f:1f:72:09:e3:58:70:27:d5:4e:29:50:
90:cf:a4:07:4e:6c:ae:aa:07:91:a8:8e:59:ea:86:
55:6d:64:73:35:b7:e3:7f:68:e8:53:9f:59:3d:be:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:88:EB:87:81:58:24:EA:A7:D8:B7:73:83:4D:3A:38:2C:CE:40:20
X509v3 Authority Key Identifier:
keyid:35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/eojrh4FYJOqn2Ldzg006OCzOQCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a5:34:2c:04:e7:ec:cc:de:89:5c:32:6e:e8:c4:9d:ea:d2:
77:46:a0:10:33:22:ce:d6:08:70:c5:d0:64:6d:fa:00:de:ba:
4a:9f:1c:42:07:ec:25:82:89:36:d5:f5:80:da:61:f0:5b:e2:
06:bb:f6:df:f2:7b:1f:80:a4:55:7f:f5:50:3f:24:13:2d:53:
c8:6e:cc:a0:21:72:c4:88:1d:02:67:63:8d:08:cb:e0:c5:4c:
2e:8f:3d:dd:5f:3b:7e:f5:75:6f:55:8f:83:89:95:d3:b8:b1:
e0:f9:8e:50:51:c4:22:d6:4e:41:f0:cb:dd:f7:d5:3a:c1:f8:
b5:6c:67:e1:64:8d:f8:45:0b:9d:85:0c:df:70:a9:54:04:ab:
e8:04:6f:74:73:97:5c:4a:27:48:5b:82:39:f6:c5:f7:8b:cf:
d5:10:66:c9:2b:6c:fc:d5:b6:d4:71:08:e6:0c:bc:89:75:ef:
31:c1:c6:44:cf:f2:60:b1:b0:2e:36:e1:be:72:62:9e:e9:a6:
1a:c1:ac:07:26:cc:af:47:95:31:f1:40:a1:74:92:2f:28:6d:
0d:61:90:ae:cd:ad:9b:28:5f:b7:39:0c:dc:b4:b5:91:0f:d7:
d4:2f:b8:31:3a:c2:ff:68:c4:c9:4c:57:70:3d:22:93:b4:8a:
22:45:8a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:24 2026 by rpki-client