Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/Ih8rk3uqI5xQTCSXowB1z5HD6eU.roa
File: Ih8rk3uqI5xQTCSXowB1z5HD6eU.roa (raw, json)
Hash identifier: AF0bSkxKf4TUhgKd0vFX0C3IhqypQQwyzx0OntMhOGE=
Subject key identifier: 22:1F:2B:93:7B:AA:23:9C:50:4C:24:97:A3:00:75:CF:91:C3:E9:E5
Certificate issuer: /CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
Certificate serial: 019CBCD7386AA2D2722701513533EEF3B00E
Authority key identifier: 13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/Ih8rk3uqI5xQTCSXowB1z5HD6eU.roa
Signing time: Thu 05 Mar 2026 07:12:27 +0000
ROA not before: Thu 05 Mar 2026 07:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59497
IP address blocks: 185.189.184.0/22 maxlen: 22
185.189.184.0/24 maxlen: 24
185.189.185.0/24 maxlen: 24
185.189.186.0/24 maxlen: 24
185.189.187.0/24 maxlen: 24
194.8.156.0/22 maxlen: 22
194.8.156.0/24 maxlen: 24
194.8.158.0/24 maxlen: 24
194.8.159.0/24 maxlen: 24
195.140.228.0/22 maxlen: 22
195.140.228.0/24 maxlen: 24
195.178.18.0/23 maxlen: 23
195.178.18.0/24 maxlen: 24
2a09:87c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bc:d7:38:6a:a2:d2:72:27:01:51:35:33:ee:f3:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
Validity
Not Before: Mar 5 07:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=221f2b937baa239c504c2497a30075cf91c3e9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:1a:87:3f:86:65:4a:ca:94:1e:4a:41:73:
2c:0d:11:b9:cb:cb:df:4e:72:65:ac:21:f5:a5:ef:
50:e7:5b:2e:5e:d6:0b:33:ac:71:0d:61:25:35:1f:
26:a5:7b:6c:ae:cd:40:3d:cc:7a:48:81:6b:55:92:
f0:80:c5:73:5b:d5:76:2b:8c:ea:91:ea:df:ff:5d:
d2:e5:3d:05:10:3c:76:39:1c:b9:43:1d:60:be:6d:
eb:27:7b:f8:8c:5d:7c:75:70:83:7c:b1:41:09:e5:
c3:24:7e:62:9e:03:88:44:1b:2a:de:ed:fa:1a:49:
34:36:9e:a3:83:42:f6:6d:74:19:a4:43:6e:2d:2a:
2e:c7:ac:88:20:bb:d4:2b:78:c4:e5:d9:57:84:e8:
e8:25:ee:16:24:37:0a:9d:80:b8:af:e9:56:de:54:
d7:e2:d3:6e:56:f6:d6:c4:ed:88:e6:97:6e:e7:74:
e2:2a:36:0c:b8:64:40:d2:ff:58:e8:dc:d2:a5:39:
ec:8b:82:e4:bf:94:f1:5b:4b:10:c4:db:a5:ca:6d:
02:8a:9a:0e:77:1f:c7:60:a2:44:26:09:25:64:c7:
92:34:1c:a0:3a:a4:88:6c:d0:7d:cd:1e:3e:c7:17:
dd:6e:79:1b:1c:61:90:5e:16:1e:43:3c:84:d2:e7:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1F:2B:93:7B:AA:23:9C:50:4C:24:97:A3:00:75:CF:91:C3:E9:E5
X509v3 Authority Key Identifier:
keyid:13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/Ih8rk3uqI5xQTCSXowB1z5HD6eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.184.0/22
194.8.156.0/22
195.140.228.0/22
195.178.18.0/23
IPv6:
2a09:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:b4:1d:fb:d9:87:78:2f:95:cd:b1:ee:e3:56:fe:e9:b2:12:
da:9c:7b:69:7a:32:1f:6e:1b:1a:46:48:a1:d5:78:0d:d4:05:
f3:65:1d:6e:8c:51:fe:4d:e2:1c:c2:d3:cc:a8:70:1e:01:fe:
7c:a5:8c:ba:1a:f6:2c:7d:4e:bf:01:d0:e3:57:7e:73:47:c4:
4f:86:9c:1b:ed:a2:c6:f5:e4:3f:5f:e6:f6:97:74:08:b7:6b:
28:84:36:64:c4:df:be:bd:ac:09:d8:12:51:86:0b:84:8d:1d:
9d:13:00:45:e2:a2:2b:c0:36:6d:c5:f6:93:fb:3a:52:cb:3f:
e3:3d:c9:fb:d3:1f:08:a7:4c:b6:d1:f3:41:4a:62:af:a2:44:
05:41:26:13:6b:0f:1b:b0:6f:12:b5:52:6d:f6:d0:d3:ed:29:
0b:74:d9:ff:71:24:55:70:e6:44:4d:38:40:e5:70:a4:78:49:
e9:59:aa:ef:d4:69:9e:81:bf:00:b5:69:0c:e0:22:57:b2:1b:
bb:98:d3:d2:56:d6:e2:20:ac:66:4e:b8:3b:ea:db:c2:87:87:
83:be:df:49:8d:d7:6f:0f:48:f7:9a:e3:a4:a5:79:26:f0:fa:
9d:6d:05:cf:f0:42:cc:9f:3c:29:7a:02:65:b8:51:e8:c6:5b:
99:56:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:36:33 2026 by rpki-client