Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/1zdYV17WT7I3TXSQzHhVO7RGIDE.roa
File: 1zdYV17WT7I3TXSQzHhVO7RGIDE.roa (raw, json)
Hash identifier: ic+QDZW/iaOfXxz3MlR5QNaF9pen8QrjZ3oMD7NWMNg=
Subject key identifier: D7:37:58:57:5E:D6:4F:B2:37:4D:74:90:CC:78:55:3B:B4:46:20:31
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019FA82A081C0503FD262B4FFBE412450AFE
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/1zdYV17WT7I3TXSQzHhVO7RGIDE.roa
Signing time: Tue 28 Jul 2026 09:59:14 +0000
ROA not before: Tue 28 Jul 2026 09:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 85.237.72.0/21 maxlen: 21
85.237.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2a:08:1c:05:03:fd:26:2b:4f:fb:e4:12:45:0a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jul 28 09:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d73758575ed64fb2374d7490cc78553bb4462031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8d:5d:ad:1e:06:76:6e:65:aa:fe:90:51:33:
52:24:76:09:21:28:69:a2:85:cd:d0:b6:66:ef:0e:
28:25:2e:5e:8b:b9:ed:06:6a:79:d5:3f:80:2c:5e:
ce:94:0c:b0:37:c4:e1:ab:3c:a8:01:ef:d1:ff:94:
7f:18:6f:e7:7f:a1:84:0a:96:c6:cd:b2:1f:a7:04:
74:1d:28:bb:5d:f3:6e:03:f8:31:5b:0e:dd:63:96:
23:53:1f:e9:2a:4c:13:09:64:4b:fb:c6:11:89:83:
96:cb:70:97:1e:df:10:4a:41:f6:e3:ff:6d:46:88:
51:93:8a:e2:54:6a:3a:a3:ca:67:3e:56:c8:bf:d1:
b3:77:66:59:ac:46:9b:af:6b:61:88:67:42:28:8a:
ef:e2:b3:db:71:06:e8:d4:f8:67:d8:0f:51:f9:5f:
5c:d9:c6:87:22:5f:19:7d:7c:42:d3:ae:2a:70:9e:
6a:8d:61:e2:4e:5c:2f:6c:dc:91:7a:bb:7f:7a:7b:
2f:13:1e:d9:e1:3d:01:38:e3:5c:55:ba:1d:08:27:
b7:4a:91:41:ca:21:84:14:92:6d:79:ca:44:90:8a:
15:1d:d5:33:6d:ba:1a:9f:83:b0:90:c5:92:2b:f4:
e2:27:3d:4f:f8:06:e6:4b:1d:74:1d:58:be:ed:aa:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:37:58:57:5E:D6:4F:B2:37:4D:74:90:CC:78:55:3B:B4:46:20:31
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/1zdYV17WT7I3TXSQzHhVO7RGIDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.72.0-85.237.83.255
Signature Algorithm: sha256WithRSAEncryption
4c:8e:67:95:7d:ba:0d:09:3d:6f:e7:0f:ed:c3:64:47:6a:12:
2c:d5:d5:34:4c:ab:71:d7:35:48:81:53:8e:8d:2e:3a:3b:82:
f1:61:49:1e:4c:71:d9:74:df:a2:3d:0a:b0:3c:d1:d3:b2:7d:
9d:f0:94:3a:59:54:e4:06:f7:33:0e:23:32:3c:57:71:81:f1:
0f:a2:23:7e:2f:15:38:90:51:1d:fb:95:b2:29:35:95:11:92:
24:2b:69:87:aa:a5:00:bf:9a:25:65:55:05:76:24:7a:6d:35:
0b:ab:e0:39:6c:bf:0d:8a:3b:a8:44:ce:3b:63:88:1c:2a:9b:
78:38:ce:12:89:0b:9f:db:87:52:50:28:5f:72:a0:51:30:76:
79:88:c7:1a:6a:73:34:bd:c6:e1:f3:56:a5:18:81:92:4b:06:
ae:37:b4:6d:41:ac:67:2a:f9:a2:ce:73:bc:15:bc:e5:d7:83:
e0:8c:ba:11:49:87:30:b2:c8:ad:5e:5e:d3:b9:19:2d:62:fa:
8c:d0:84:bd:dc:a0:05:d2:00:64:16:33:c9:eb:10:ab:61:4e:
88:5c:83:61:23:57:71:52:ef:a4:08:3f:57:85:ec:e3:17:88:
6d:4e:57:bf:0d:8c:4b:51:16:25:df:b7:e4:7e:ca:a9:ba:da:
4f:c3:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:03:19 2026 by rpki-client