Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/2eehhpEPxoZDYAkyLTsj7SmUYuY.roa
File: 2eehhpEPxoZDYAkyLTsj7SmUYuY.roa (raw, json)
Hash identifier: ZeZ8VQV480EMCE+i/B3c3mmGWFTCYBAnXl8e9gwrklA=
Subject key identifier: D9:E7:A1:86:91:0F:C6:86:43:60:09:32:2D:3B:23:ED:29:94:62:E6
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019FC8179128F7DE9321EA3B3ED4D9D45A21
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/2eehhpEPxoZDYAkyLTsj7SmUYuY.roa
Signing time: Mon 03 Aug 2026 14:46:55 +0000
ROA not before: Mon 03 Aug 2026 14:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:17:91:28:f7:de:93:21:ea:3b:3e:d4:d9:d4:5a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Aug 3 14:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9e7a186910fc686436009322d3b23ed299462e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:98:87:05:7a:c8:16:20:4d:ad:64:19:d6:
23:9c:f8:32:4a:90:fd:9e:a9:22:2c:a5:b1:39:e0:
b5:fe:12:84:cb:1e:8c:1b:f8:57:aa:cf:d6:0c:1c:
08:c1:6c:80:9b:7b:5b:29:a6:ae:af:a7:b3:b7:4b:
24:c9:34:d3:a1:5c:1c:2c:81:9b:ca:fc:a7:5d:83:
14:58:73:7b:d6:b1:2c:0e:54:d9:d3:be:30:d8:4f:
28:8e:fe:ca:da:68:d5:cd:0c:d6:3d:b3:45:c1:20:
3a:5f:b9:4d:55:b8:36:57:56:d1:3a:7a:51:9e:f1:
4e:29:8b:5c:4a:78:1f:f4:a3:a6:86:e8:91:bf:b8:
ae:f6:6d:0c:2d:0c:89:d0:5f:84:25:cd:95:58:f7:
77:d8:36:83:b6:5d:1f:ab:bf:e0:e8:53:14:5b:cf:
a0:15:f6:ad:f5:82:ad:5e:49:35:f2:a0:ea:d0:a3:
cd:cb:07:f2:34:ca:e1:62:a7:a8:69:ae:b5:a0:c6:
b7:d2:91:dd:b7:f9:b0:b5:54:3d:f1:6a:1f:27:7b:
25:a6:82:73:12:4a:96:17:5d:7d:f4:40:f8:01:bf:
fe:47:d3:d8:b3:51:26:be:a0:19:89:22:a8:1c:e7:
83:68:0a:aa:f4:c9:22:bb:ef:8b:9b:00:e1:99:72:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E7:A1:86:91:0F:C6:86:43:60:09:32:2D:3B:23:ED:29:94:62:E6
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/2eehhpEPxoZDYAkyLTsj7SmUYuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
36:39:4b:d8:8c:88:91:d1:11:7d:2c:60:38:cf:c5:70:ce:62:
00:5f:35:ef:c4:5b:26:73:34:7b:6b:a3:74:4d:1e:4f:4e:30:
26:47:67:75:15:1f:6f:9d:2b:c0:ac:65:bd:0d:c1:c1:ff:8a:
b7:8a:7d:1e:6e:c6:c9:1c:2c:05:de:38:2c:4d:fe:34:ca:c4:
a9:02:19:0e:6c:27:64:38:a1:31:b5:60:e4:8e:60:f3:7e:25:
94:8f:bc:7c:ff:83:a8:b5:a1:96:1e:13:23:30:dc:1d:cb:7c:
76:45:90:61:3b:21:a8:91:b3:ae:f0:93:60:1f:55:19:65:7c:
03:1e:c2:cc:7a:10:41:dc:99:e9:88:81:ad:0f:4a:09:e0:c7:
85:64:9a:3d:f2:1c:61:a5:1b:ba:9d:16:d3:7a:0d:70:4d:a4:
a3:84:ef:99:f1:ca:c5:2f:28:e9:42:f8:53:d7:ec:36:dd:c1:
2c:a9:13:55:6f:99:ce:26:90:23:67:46:e5:b1:47:43:0f:24:
d8:36:de:57:f7:c4:14:be:63:7c:a0:34:e3:94:56:2d:91:76:
d3:40:1d:54:8b:5c:e0:ce:1a:8c:77:45:be:f7:b7:cf:82:d6:
77:5f:1a:96:ae:d1:ab:9b:ef:36:aa:a6:b0:ff:d6:4c:e3:89:
c7:e0:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:53 2026 by rpki-client