Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1EJ_XfQMx6Y9yqlKxeYGCdoslO0.roa
File: 1EJ_XfQMx6Y9yqlKxeYGCdoslO0.roa (raw, json)
Hash identifier: YK8CRl6X799i7UjLTxVvL97sv8/qoADyGmSlEddAXF4=
Subject key identifier: D4:42:7F:5D:F4:0C:C7:A6:3D:CA:A9:4A:C5:E6:06:09:DA:2C:94:ED
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FCD11117273CA1A8E3FF4921340CBBB6D
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1EJ_XfQMx6Y9yqlKxeYGCdoslO0.roa
Signing time: Tue 04 Aug 2026 13:57:55 +0000
ROA not before: Tue 04 Aug 2026 13:57:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47132
IP address blocks: 185.81.214.0/24 maxlen: 24
213.208.145.0/24 maxlen: 24
213.208.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:11:11:72:73:ca:1a:8e:3f:f4:92:13:40:cb:bb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 4 13:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4427f5df40cc7a63dcaa94ac5e60609da2c94ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:3a:1e:43:85:f0:58:a2:97:25:8d:85:f1:
a7:66:e9:66:d4:85:ab:3d:fe:70:71:73:61:02:e8:
8c:4f:67:c8:96:61:8a:53:a1:56:8b:f1:31:c1:3f:
3c:15:98:ea:8b:45:52:66:60:35:96:65:c3:cd:ec:
fa:f3:ba:e3:05:fd:8f:a7:2e:c4:bd:86:eb:bf:a0:
19:17:be:27:44:47:9d:19:5d:92:dc:e7:5a:d1:8b:
98:5e:22:65:a4:27:8c:98:75:e6:6f:44:e6:1e:8a:
ca:8d:9a:51:a8:40:54:a0:b8:4d:1d:95:de:fc:4b:
11:9b:61:5d:cd:72:9c:7b:8f:e9:d1:60:a1:6a:76:
e3:77:4b:0c:c7:be:ba:b6:0c:0b:a4:81:db:6d:15:
e1:15:dc:26:c6:a7:ca:b4:9b:62:dd:11:53:80:c6:
c1:98:7f:5f:42:6e:9f:8e:02:01:82:06:6d:40:af:
e3:9a:7f:90:f4:f4:60:d6:5a:c1:49:9f:0a:af:54:
10:85:4f:78:4f:51:a5:be:ec:d4:ab:9b:8d:bb:57:
47:c9:cd:b5:be:40:9e:e9:13:a4:be:3a:a7:73:0c:
9f:0f:ed:0e:f2:ae:40:26:3c:db:45:07:06:c0:53:
0e:f2:67:b3:63:5b:90:f9:1b:bc:db:db:16:4b:49:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:7F:5D:F4:0C:C7:A6:3D:CA:A9:4A:C5:E6:06:09:DA:2C:94:ED
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1EJ_XfQMx6Y9yqlKxeYGCdoslO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.214.0/24
213.208.145.0-213.208.146.255
Signature Algorithm: sha256WithRSAEncryption
10:7e:14:32:2e:5c:0e:8b:dd:da:c3:a6:4a:a7:7d:fe:d9:d0:
0c:0a:99:ae:1a:1b:a3:6b:ea:4f:5e:17:3d:aa:c0:ed:03:91:
b0:2d:32:84:f6:b4:75:98:b1:e2:ad:76:3d:3d:3a:1c:bc:ba:
9b:c1:67:f7:86:df:6f:bd:87:ce:4e:34:54:ae:4f:d2:39:0d:
05:93:0e:4d:da:99:54:15:f3:86:93:46:a1:eb:b7:77:40:0c:
9e:b4:55:72:1d:d2:11:46:e1:01:ee:91:d0:e8:56:e0:f7:95:
f1:b3:51:3f:2a:13:46:1e:bd:af:1a:41:4f:78:93:07:3f:0d:
54:e5:58:b0:ee:d2:15:49:bd:ee:23:6d:71:c8:67:fa:57:9d:
42:e1:57:5b:98:88:bd:0d:41:d8:4e:b9:48:f4:22:c3:82:c3:
5f:c0:03:d5:ec:17:9d:24:75:8e:df:a1:04:31:89:77:06:69:
82:b8:b2:af:77:c8:40:97:30:c2:8a:0a:7e:98:b4:35:c7:d4:
15:28:b9:c3:f0:84:c8:9a:09:ab:e5:c1:aa:dd:5e:99:d3:28:
6a:65:86:cd:1f:68:62:04:6a:5d:0d:61:fd:e7:b5:d4:e7:3e:
1e:1f:d9:6a:78:ef:35:1e:69:c2:f3:36:bd:49:f6:b8:40:0d:
fb:65:cd:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:46 2026 by rpki-client