Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/E-hImeVcU4yLfQom4YFhlpczGik.roa
File: E-hImeVcU4yLfQom4YFhlpczGik.roa (raw, json)
Hash identifier: 8eBaGE5G0FZ8g3TpTAN9MiYqx4GyhwCO2B88eJuS4pk=
Subject key identifier: 13:E8:48:99:E5:5C:53:8C:8B:7D:0A:26:E1:81:61:96:97:33:1A:29
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 019FE26F46AE8732E0D198E07C72C2031C3B
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/E-hImeVcU4yLfQom4YFhlpczGik.roa
Signing time: Sat 08 Aug 2026 17:32:51 +0000
ROA not before: Sat 08 Aug 2026 17:32:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213069
IP address blocks: 85.8.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:6f:46:ae:87:32:e0:d1:98:e0:7c:72:c2:03:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Aug 8 17:32:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13e84899e55c538c8b7d0a26e181619697331a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:29:eb:b6:73:54:7b:fd:d5:93:d3:37:56:
7a:fa:a0:14:a6:8b:db:df:f4:e9:96:24:e7:55:b5:
d5:73:b9:52:70:20:1e:63:cf:dd:fc:ac:34:44:32:
a6:ba:cb:de:85:03:41:7f:b5:71:ef:69:5f:27:73:
ac:52:91:e9:d1:e8:2b:20:ca:d9:f3:96:20:f2:cd:
94:a5:df:61:8e:56:f3:67:0b:7a:4e:a1:7b:26:38:
eb:75:8b:42:eb:cb:65:d1:f7:0a:01:54:60:a1:e9:
c3:78:94:6d:cb:2c:df:31:5d:f9:31:11:c2:57:7f:
8f:e6:21:0f:08:68:70:be:10:e8:6f:52:15:5c:ba:
d8:de:19:a2:6f:8e:ed:57:3e:45:e2:d6:5a:79:13:
83:d8:7e:b6:5c:0e:14:b5:15:22:58:f0:c7:12:a1:
ce:37:85:86:ad:f2:2c:99:08:0c:cf:d8:33:1b:f5:
ef:ae:4c:78:20:21:53:9b:ac:35:c1:5d:d5:58:68:
dd:04:e8:d2:e2:16:b9:b0:74:00:7b:d8:c1:1a:a6:
d2:a9:b7:64:86:fc:f6:98:a0:ee:1d:9e:08:c2:ac:
12:53:26:78:43:9c:3b:1b:eb:16:7c:29:2d:aa:80:
b0:94:94:3e:6c:d0:5c:f1:73:14:03:44:2e:12:6c:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E8:48:99:E5:5C:53:8C:8B:7D:0A:26:E1:81:61:96:97:33:1A:29
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/E-hImeVcU4yLfQom4YFhlpczGik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.243.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e3:61:1a:f1:88:06:57:14:f4:ea:2c:e9:d4:5c:14:58:7b:
a2:c5:78:c9:a5:8b:9d:f1:3f:41:b4:18:49:39:7f:e2:74:d5:
e1:c4:3f:4a:c7:f7:1e:be:a9:df:a8:1a:64:e2:6d:74:6c:b8:
24:d8:63:bc:52:ce:38:08:25:50:1c:5e:5f:0c:91:8c:61:d8:
63:7b:6c:99:61:1b:30:74:78:50:b3:a7:cd:c8:d8:43:b4:e4:
50:2f:0d:fc:35:b3:54:a7:57:65:9a:4e:22:3f:76:07:76:32:
98:b7:35:cb:35:69:51:92:ee:e2:60:52:00:65:e3:92:07:db:
ae:8b:e2:d3:db:dc:cc:a0:22:98:b2:a6:00:6b:b6:87:65:97:
e8:c6:9e:51:27:65:84:a0:79:04:e8:c6:d6:81:02:3f:5a:7a:
56:89:16:27:fa:a1:b4:54:c4:fa:e3:0a:19:f8:03:2a:71:df:
53:79:b8:6a:99:29:5c:94:3c:71:fa:75:e0:49:5e:a6:c5:47:
bc:15:30:91:57:37:74:53:9e:63:1b:41:99:53:2a:ed:25:ff:
39:b5:81:f1:b8:6f:cd:21:81:8a:bc:b9:dc:ee:f4:67:8c:61:
aa:d0:5c:45:9b:30:08:ee:43:9e:ee:91:5e:60:81:da:01:04:
ad:b1:b0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:40 2026 by rpki-client