Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/e1cAyM2TJIkd7H54W6Y9ZDTXR90.roa
File: e1cAyM2TJIkd7H54W6Y9ZDTXR90.roa (raw, json)
Hash identifier: 2UOGrZ62RhFS7lpGz9yJNfexfRhxQJMWFrqgW5i8YXY=
Subject key identifier: 7B:57:00:C8:CD:93:24:89:1D:EC:7E:78:5B:A6:3D:64:34:D7:47:DD
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019C5765280E56FA0D7B77B3872DA1C6BB34
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/e1cAyM2TJIkd7H54W6Y9ZDTXR90.roa
Signing time: Fri 13 Feb 2026 14:26:13 +0000
ROA not before: Fri 13 Feb 2026 14:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.81.174.0/24 maxlen: 24
185.81.184.0/24 maxlen: 24
185.81.187.0/24 maxlen: 24
185.89.104.0/23 maxlen: 24
185.89.108.0/22 maxlen: 24
185.95.101.0/24 maxlen: 24
185.95.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:65:28:0e:56:fa:0d:7b:77:b3:87:2d:a1:c6:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 13 14:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b5700c8cd9324891dec7e785ba63d6434d747dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:54:3c:9a:16:5c:88:e9:f3:00:21:a3:4a:
db:a7:d2:bb:6c:a9:39:75:4b:4a:d4:e9:31:3c:6e:
b7:7b:de:c3:22:36:ad:83:fa:5a:83:ce:c5:65:3a:
20:a7:95:63:f3:24:87:24:db:cc:ad:9d:83:7b:ab:
4b:e6:a8:23:10:05:f8:d5:3a:af:ca:18:5f:dd:46:
e2:27:0b:44:43:22:b3:54:f6:14:4f:56:54:51:91:
09:3e:cd:96:96:84:21:18:18:2d:c5:4c:e4:f5:ec:
9b:41:d2:a4:d3:cc:75:ce:16:89:80:f1:a6:27:93:
41:d8:01:1e:93:f6:d0:88:47:c5:8c:32:0b:dc:e5:
c8:36:f7:23:28:c5:47:df:42:60:52:de:36:0c:4e:
8d:76:48:6d:08:b8:3e:06:f7:91:1f:69:56:b1:55:
ae:53:00:1c:dd:a0:0f:9e:9e:63:8c:53:54:7c:79:
fc:32:18:07:ef:95:1c:61:c1:6e:4f:8f:ca:f8:d3:
30:6d:06:6f:aa:51:ea:30:4e:01:00:46:43:33:32:
d2:f7:62:34:a2:54:70:98:ee:34:92:25:8f:48:9e:
a4:2f:5e:50:30:ee:c7:7e:0f:ed:ee:42:fe:d5:2c:
57:1c:9a:7e:d2:b7:12:6c:60:3d:8e:1a:b3:da:80:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:57:00:C8:CD:93:24:89:1D:EC:7E:78:5B:A6:3D:64:34:D7:47:DD
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/e1cAyM2TJIkd7H54W6Y9ZDTXR90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.174.0/24
185.81.184.0/24
185.81.187.0/24
185.89.104.0/23
185.89.108.0/22
185.95.101.0-185.95.103.255
Signature Algorithm: sha256WithRSAEncryption
92:39:ea:c4:e7:66:84:b7:cc:3b:74:99:7b:c8:0a:f2:17:d2:
7e:73:26:28:49:c1:15:60:38:e1:96:20:f5:a9:54:71:d6:9f:
b0:8a:52:3d:ef:4a:4e:b9:ac:db:f4:c3:7a:d5:78:17:95:c8:
12:02:f9:25:11:3f:45:1c:88:8a:bf:43:4e:89:55:8c:95:3b:
16:03:be:c6:8b:6a:49:98:89:e0:a4:04:92:b4:28:62:6e:e1:
d8:7b:78:0d:96:db:e0:f4:d0:c6:dd:99:2d:5d:3b:c9:2f:2e:
11:46:88:5d:7e:8a:80:8a:35:47:75:4f:5e:7a:2a:f2:49:18:
b4:70:15:76:11:69:60:10:22:c4:e9:3c:00:9b:4a:ab:90:f2:
71:34:f3:ad:46:a2:55:28:9e:92:e8:e0:a7:2f:bd:90:8b:fb:
24:b5:98:98:42:8e:55:6a:ea:1a:d5:7d:61:91:fa:03:88:42:
60:46:ec:04:bd:92:b1:ae:63:f9:8c:c3:83:6e:58:f6:06:f5:
e5:3e:e7:ce:82:57:f9:b0:18:ca:e5:11:5d:46:68:95:e3:a8:
61:54:2a:3d:9e:ff:90:1c:bb:97:97:e5:a4:62:af:ba:6b:a5:
90:14:e6:ed:5f:67:e6:fb:af:15:74:e5:21:84:3a:a6:de:89:
4e:ea:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:32:38 2026 by rpki-client