Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/eXB07PVnY6Up_99lPUFWjhQLh-0.roa
File: eXB07PVnY6Up_99lPUFWjhQLh-0.roa (raw, json)
Hash identifier: +mrAOWzB21eb5SMCX4Zqqp/WLs5+1iRRt5G6w5MsOts=
Subject key identifier: 79:70:74:EC:F5:67:63:A5:29:FF:DF:65:3D:41:56:8E:14:0B:87:ED
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019E94EEF9C1DB73CABE50747F97E4F33A02
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/eXB07PVnY6Up_99lPUFWjhQLh-0.roa
Signing time: Thu 04 Jun 2026 23:19:09 +0000
ROA not before: Thu 04 Jun 2026 23:19:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202649
IP address blocks: 85.137.250.0/24 maxlen: 24
89.35.112.0/24 maxlen: 24
2a12:5740::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:94:ee:f9:c1:db:73:ca:be:50:74:7f:97:e4:f3:3a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Jun 4 23:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=797074ecf56763a529ffdf653d41568e140b87ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:db:1b:c0:f7:ce:7d:dc:20:25:22:c0:57:
88:41:e1:ab:c4:f8:4a:b7:7d:f1:fa:9e:80:87:45:
1b:e4:7e:b6:ed:3c:d1:ac:d5:81:25:fe:ce:b4:ab:
2d:e4:9e:27:e6:f0:4e:3b:f6:8e:5f:d0:4c:7b:7d:
9a:5d:16:13:ed:5f:14:2a:cf:fb:00:eb:e8:c0:7b:
b6:97:e9:72:55:70:88:5e:9a:89:2a:11:88:bc:3b:
ed:e6:48:52:34:a3:ac:df:1f:36:d6:69:c9:ec:3a:
bd:5d:2c:37:4f:47:7a:11:4e:82:ba:c6:7c:82:c8:
a8:86:ed:1b:c8:a7:38:27:4a:0f:95:98:bf:f5:d2:
0d:85:53:e2:05:f6:5b:28:1d:e9:23:9a:a0:35:c3:
62:85:48:b0:da:33:e3:01:81:bc:1b:be:9b:be:d6:
e3:e3:41:74:ac:27:22:b2:04:cf:56:df:62:91:91:
be:43:c4:16:7b:4a:ac:0d:e6:c6:ff:8b:fc:85:5b:
c2:7f:e2:c1:f8:c3:48:64:50:02:ca:4f:d3:a3:ae:
67:d2:76:6e:a2:71:d8:c8:91:18:52:27:8d:e0:d8:
1a:84:e9:6a:16:d0:9f:7c:f1:0a:78:a5:5c:7c:9c:
79:d6:4b:08:1a:a2:52:2a:a7:0b:57:3c:c6:1f:2b:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:74:EC:F5:67:63:A5:29:FF:DF:65:3D:41:56:8E:14:0B:87:ED
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/eXB07PVnY6Up_99lPUFWjhQLh-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.250.0/24
89.35.112.0/24
IPv6:
2a12:5740::/29
Signature Algorithm: sha256WithRSAEncryption
8e:2f:92:e9:a5:88:ff:46:f5:9d:13:c7:5f:4c:20:5f:a2:88:
b0:36:37:64:4b:b1:c3:31:c1:7c:20:97:fc:b3:8b:e0:42:27:
36:22:cc:bd:8f:b3:99:98:2e:ac:51:16:b4:b4:e6:54:96:6b:
e2:ff:14:23:46:1e:fd:61:9e:d0:4e:1b:5b:3c:35:41:65:a0:
a0:8b:19:2c:5f:a7:2b:27:30:28:29:f3:47:67:ad:53:6e:30:
68:a8:01:14:cd:0f:e6:6c:87:d4:fd:29:74:da:35:17:1c:57:
35:2d:fa:81:f8:6b:68:f4:cb:dd:6c:06:e3:b6:7b:54:a5:ba:
8c:58:49:63:f3:a2:bb:46:9c:30:9e:50:8f:90:5b:5f:1d:ee:
8d:cd:13:db:26:7f:be:55:0d:df:57:ed:c3:13:50:7e:f1:37:
c4:75:df:36:52:dc:b0:d1:1a:f9:e8:70:e7:cd:8c:fd:c7:09:
6f:30:ff:20:50:ed:a3:6d:55:a5:00:1e:cd:66:a4:cf:0e:7e:
7d:8c:0b:79:13:4f:33:c9:84:7d:f8:80:4f:87:46:88:7a:a8:
68:ce:3e:11:90:80:0b:39:01:dd:60:e2:7a:24:fc:06:92:56:
3d:f4:0a:9a:e9:f2:c5:e4:57:99:5a:6b:26:03:59:a4:44:fc:
03:4b:39:16
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ6U7vnB23PKvlB0f5fk8zoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZmI5ZjQzYTQ2ZjA1OTgyN2E5ZGVjMzY2ZDE0OTZkNjYw
ODkxMzQwHhcNMjYwNjA0MjMxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTcwNzRlY2Y1Njc2M2E1MjlmZmRmNjUzZDQxNTY4ZTE0MGI4N2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufjbG8D3zn3cICUiwFeIQeGrxPhK
t33x+p6Ah0Ub5H627TzRrNWBJf7OtKst5J4n5vBOO/aOX9BMe32aXRYT7V8UKs/7
AOvowHu2l+lyVXCIXpqJKhGIvDvt5khSNKOs3x821mnJ7Dq9XSw3T0d6EU6CusZ8
gsiohu0byKc4J0oPlZi/9dINhVPiBfZbKB3pI5qgNcNihUiw2jPjAYG8G76bvtbj
40F0rCcisgTPVt9ikZG+Q8QWe0qsDebG/4v8hVvCf+LB+MNIZFACyk/To65n0nZu
onHYyJEYUieN4NgahOlqFtCffPEKeKVcfJx51ksIGqJSKqcLVzzGHyurBwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHlwdOz1Z2OlKf/fZT1BVo4UC4ftMB8GA1UdIwQY
MBaAFDr7n0OkbwWYJ6new2bRSW1mCJE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUt
NzE5M2UxYjA2NmMzLzEvZVhCMDdQVm5ZNlVwXzk5bFBVRldqaFFMaC0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUtNzE5M2UxYjA2NmMz
LzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAVYn6AwQA
WSNwMA0EAgACMAcDBQMqEldAMA0GCSqGSIb3DQEBCwUAA4IBAQCOL5LppYj/RvWd
E8dfTCBfooiwNjdkS7HDMcF8IJf8s4vgQic2Isy9j7OZmC6sURa0tOZUlmvi/xQj
Rh79YZ7QThtbPDVBZaCgixksX6crJzAoKfNHZ61TbjBoqAEUzQ/mbIfU/Sl02jUX
HFc1LfqB+Gto9MvdbAbjtntUpbqMWElj86K7RpwwnlCPkFtfHe6NzRPbJn++VQ3f
V+3DE1B+8TfEdd82Utyw0Rr56HDnzYz9xwlvMP8gUO2jbVWlAB7NZqTPDn59jAt5
E08zyYR9+IBPh0aIeqhozj4RkIALOQHdYOJ6JPwGklY99Aqa6fLF5FeZWmsmA1mk
RPwDSzkW
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:05:29 2026 by rpki-client