Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h9Eyo37zNRhHFdam2Er00sn08uw.roa
File: h9Eyo37zNRhHFdam2Er00sn08uw.roa (raw, json)
Hash identifier: KzSPQw/kAyxnzsr4zgLGvrpr2/0WdjmsC3FHJ79V/ao=
Subject key identifier: 87:D1:32:A3:7E:F3:35:18:47:15:D6:A6:D8:4A:F4:D2:C9:F4:F2:EC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019EA72130277B30748CE69FBC93FDB3D03C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h9Eyo37zNRhHFdam2Er00sn08uw.roa
Signing time: Mon 08 Jun 2026 12:07:10 +0000
ROA not before: Mon 08 Jun 2026 12:07:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 176.125.248.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Jun 2026 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:21:30:27:7b:30:74:8c:e6:9f:bc:93:fd:b3:d0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 8 12:07:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87d132a37ef335184715d6a6d84af4d2c9f4f2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:98:b7:cd:ba:8e:1e:25:6c:68:55:0c:7e:
a3:a2:4b:ee:70:93:3e:60:09:0d:ca:d6:2e:17:66:
8e:e5:b5:da:65:29:8e:68:2b:1d:6e:e2:05:cb:03:
f1:d3:1f:2e:5e:92:c0:52:95:69:d8:05:86:86:f7:
2c:3d:98:38:f4:8c:d7:bd:63:04:bc:b1:9f:c3:f2:
a8:e9:d0:9d:39:d7:68:a6:55:fc:c9:b2:d3:e6:0d:
54:36:09:a8:0f:56:3e:89:cc:5a:36:28:1e:b5:40:
dd:92:45:89:7f:60:bf:63:d1:eb:7f:4e:a0:17:60:
89:52:0f:b5:ba:8c:98:86:4a:6b:4c:67:78:07:3b:
0c:0f:2a:cf:74:a3:44:9a:ae:89:99:72:f8:dc:03:
49:96:b6:97:4d:a6:fc:b9:58:62:df:2b:19:eb:f1:
1a:44:63:9e:42:9e:24:49:4f:2f:2d:eb:4a:b1:18:
15:af:5a:c2:09:ee:f5:a4:a0:9b:b9:2d:fc:c9:31:
51:82:59:52:51:15:96:c5:fe:17:37:5b:f3:bc:ef:
00:1d:f8:10:92:06:72:75:25:62:ad:db:8a:e8:e9:
81:6f:b0:fa:69:cd:9b:7d:db:dc:29:68:a9:cb:ea:
ef:57:e8:8e:29:1d:a5:d1:95:c3:c3:a0:d2:9f:0e:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:32:A3:7E:F3:35:18:47:15:D6:A6:D8:4A:F4:D2:C9:F4:F2:EC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h9Eyo37zNRhHFdam2Er00sn08uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
185.206.251.0/24
185.209.36.0/23
185.210.153.0/24
185.210.155.0/24
185.210.232.0/24
185.210.235.0/24
185.225.0.0/24
185.227.145.0/24
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
38:82:4a:72:78:c8:55:02:ba:d5:ae:08:b0:ed:1e:ca:01:34:
a1:1f:de:7c:9e:52:e4:1b:d1:56:bb:f4:6b:4f:c0:57:14:b1:
70:43:05:7c:c0:de:56:35:ff:8c:e5:01:94:a4:6c:69:b9:35:
d8:a1:a9:1f:2d:d2:26:aa:85:d4:6d:cd:e7:2a:cd:80:03:9b:
8c:b1:c4:a7:ba:2d:36:e0:e6:5c:a9:fb:26:5e:68:e1:62:3e:
f3:94:e7:e6:68:55:7d:ce:ea:87:0b:1a:75:bb:89:76:51:14:
57:70:fa:18:d7:6a:04:52:b9:0f:93:14:c5:9d:33:5c:a9:a8:
f9:25:b6:7f:f6:e3:1a:0b:f2:32:90:ad:58:28:14:64:cc:b9:
58:f2:8f:f2:c8:4e:71:2e:98:67:52:39:d3:95:b0:ab:92:c7:
72:50:38:10:66:e4:7e:4b:59:8f:41:e5:30:c1:60:54:1a:b1:
42:7f:08:36:7f:ec:f9:43:df:a1:d9:ba:a0:f6:8b:ca:1d:ab:
24:36:b1:54:0b:36:07:f7:bc:25:91:af:9c:1f:b5:3a:3d:c0:
06:af:1d:09:43:2e:6f:89:10:36:3e:7a:38:21:8b:48:2c:b5:
c5:3b:18:05:ef:39:85:a3:b4:5e:11:d8:1d:65:71:5d:c3:7c:
d7:61:46:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 05:47:19 2026 by rpki-client