Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/h-EWcWkmbvgj39jkxm-JcD4jNys.roa
File: h-EWcWkmbvgj39jkxm-JcD4jNys.roa (raw, json)
Hash identifier: 5gX5iFM/ehmHTHBUKpjDT1zVGwl4cU31igc51yeX2UU=
Subject key identifier: 87:E1:16:71:69:26:6E:F8:23:DF:D8:E4:C6:6F:89:70:3E:23:37:2B
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F23690ED1FDE3F7531002DA3AF7436E4B
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/h-EWcWkmbvgj39jkxm-JcD4jNys.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200848
IP address blocks: 185.94.4.0/22 maxlen: 22
213.109.172.0/22 maxlen: 22
2a09:fc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0e:d1:fd:e3:f7:53:10:02:da:3a:f7:43:6e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87e1167169266ef823dfd8e4c66f89703e23372b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:6f:b7:ec:57:88:16:90:77:32:4e:75:b6:
28:9e:a9:8f:71:fe:01:87:b4:18:2f:c5:e0:7e:33:
d8:b3:92:1f:0c:12:f2:f4:e9:85:6e:24:ca:d4:71:
d5:51:cb:f5:b4:13:e3:4b:57:5b:ba:91:15:69:66:
1a:9a:39:52:db:b7:6c:1a:ab:b3:4f:e8:66:45:11:
3b:b5:cc:df:ec:4d:73:50:3f:c8:ce:25:17:52:47:
ef:fa:e4:89:2e:e1:7e:d0:b5:17:bf:80:56:4f:12:
81:6a:17:9a:26:7d:20:59:22:5c:03:d7:90:97:05:
84:37:5d:b6:24:d4:0a:86:30:d0:f3:56:f3:43:6b:
15:0e:ac:b2:96:fb:c4:48:4a:90:1c:cc:e3:76:bb:
be:0b:b9:f2:f7:07:3d:ae:29:57:ee:26:81:6c:ab:
fb:a9:1e:d0:bc:69:58:fe:d8:53:8b:78:f7:d0:fc:
95:02:22:33:73:cc:ad:7f:75:49:4b:20:6f:3c:10:
d9:b2:01:c8:41:25:f5:15:fb:ab:f9:dc:24:08:38:
f7:01:7e:42:20:55:89:de:d1:ee:7e:25:2d:ca:fb:
a3:ce:e4:1b:29:05:cc:d9:d0:f2:47:73:aa:ff:d5:
93:ec:f1:dd:12:6d:ea:ba:2a:e1:a5:7f:30:a4:8a:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E1:16:71:69:26:6E:F8:23:DF:D8:E4:C6:6F:89:70:3E:23:37:2B
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/h-EWcWkmbvgj39jkxm-JcD4jNys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.4.0/22
213.109.172.0/22
IPv6:
2a09:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
93:7a:46:ec:62:86:db:81:77:b4:c7:a1:91:e7:2e:f2:74:0a:
78:1d:aa:48:dc:59:49:56:69:2b:99:77:e6:48:2b:52:2d:49:
cf:f0:fe:89:ad:08:7a:44:60:5f:66:cb:ef:3f:f4:c4:98:4c:
22:83:c5:bd:19:31:4e:fb:67:6f:eb:1e:22:a1:af:00:82:37:
a9:0a:92:64:d7:b5:4a:bb:cd:9e:ff:1f:68:5a:72:ad:ac:cd:
c7:93:96:44:23:51:31:3a:d3:f8:92:42:76:21:0f:fe:13:d0:
26:18:7e:5f:e8:72:24:eb:35:8a:84:ee:f8:51:71:12:1c:88:
69:d7:3a:9c:c4:e3:87:2a:9c:1e:39:e3:59:3a:91:7c:ac:7a:
f1:35:85:3f:5d:6f:32:94:7a:e5:4e:db:7a:80:84:31:75:fb:
45:c6:e0:4e:b5:40:01:75:14:3c:23:3f:a0:1b:b4:51:92:db:
d5:3d:f9:84:c4:15:59:06:75:be:65:c7:ba:91:45:0d:1f:94:
78:ea:aa:c1:d2:4a:d4:2e:2b:6e:88:6e:f8:14:8f:20:69:54:
8f:b3:3a:2e:a2:ef:85:0b:2e:ba:7e:45:e8:0e:30:4e:d6:70:
cf:00:67:58:7e:a6:e4:79:36:e4:25:fe:49:9a:3e:85:aa:0d:
8b:d6:38:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:22 2026 by rpki-client