Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/E2xtWZV4AV3kjahi3ya1WwpYjn8.roa
File: E2xtWZV4AV3kjahi3ya1WwpYjn8.roa (raw, json)
Hash identifier: eiCt2qdwFMu87Um/GEdb7fiVQB0BZPI+XYBSTsuRYnE=
Subject key identifier: 13:6C:6D:59:95:78:01:5D:E4:8D:A8:62:DF:26:B5:5B:0A:58:8E:7F
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019FA82AF5679210B97B7FD198D4AA3C168F
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/E2xtWZV4AV3kjahi3ya1WwpYjn8.roa
Signing time: Tue 28 Jul 2026 10:00:15 +0000
ROA not before: Tue 28 Jul 2026 10:00:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 85.237.72.0/21 maxlen: 21
85.237.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2a:f5:67:92:10:b9:7b:7f:d1:98:d4:aa:3c:16:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jul 28 10:00:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=136c6d599578015de48da862df26b55b0a588e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:f8:bc:df:98:a2:31:8c:57:f1:9c:32:54:
2f:23:35:bb:58:f2:f5:34:6a:7b:68:10:ac:3d:6f:
6c:7f:ad:fa:70:55:fe:18:87:da:65:5f:c7:1c:8a:
5e:49:33:e0:81:32:f1:95:4d:37:83:cd:27:d2:95:
25:37:49:88:06:66:fb:15:5f:5a:04:f8:15:57:77:
d5:39:07:32:a1:55:f4:b5:86:0e:12:cf:24:c6:98:
23:4a:e9:84:f5:b3:f8:55:75:24:89:a6:5d:e6:63:
77:70:5e:90:17:e4:ec:8a:02:8d:d1:e9:b0:d1:9f:
b1:9d:8f:84:5e:76:2f:66:c8:fd:49:57:5f:ed:5b:
5b:b1:b5:af:7d:ab:16:17:e0:e6:42:71:bf:5a:ce:
21:a4:44:93:a3:7f:b6:60:84:4e:30:ef:ce:94:b9:
29:35:93:7f:0d:69:91:5c:df:ff:01:eb:f4:11:47:
88:7f:4c:db:64:d6:fe:92:b4:aa:0e:c1:69:be:33:
d2:6e:bc:d8:41:65:22:57:50:9b:8e:09:be:05:4e:
3e:b8:27:d2:53:08:81:d2:b5:be:fc:37:ca:fa:c6:
a6:2c:83:a9:01:b4:c8:87:d9:18:85:7c:66:29:51:
7c:d1:a7:b3:8c:60:84:4f:80:18:b6:5f:31:e0:33:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6C:6D:59:95:78:01:5D:E4:8D:A8:62:DF:26:B5:5B:0A:58:8E:7F
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/E2xtWZV4AV3kjahi3ya1WwpYjn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.72.0-85.237.83.255
Signature Algorithm: sha256WithRSAEncryption
3c:cf:cb:7d:b6:7a:3f:27:bc:16:ff:c8:cb:10:0c:e3:69:ec:
ba:ca:10:56:eb:f4:51:40:00:a1:b6:aa:eb:1a:71:46:09:4d:
08:58:4c:5b:53:2f:17:5b:2f:38:54:51:ba:82:e4:cd:1b:f9:
d9:1c:9d:14:f2:2f:fc:19:e8:26:c8:57:e3:3d:7f:49:b3:74:
9d:37:d8:92:55:cb:14:8d:a9:ca:ef:cd:a8:d5:e4:25:df:5d:
e0:20:45:e8:36:30:c9:23:51:26:3c:4e:f2:2f:b3:7a:73:38:
59:91:6c:4d:14:15:06:4a:4b:6c:0f:33:11:08:8b:7a:06:58:
3f:24:12:cd:42:3a:18:9e:1a:2b:e2:0e:9f:44:0e:65:d3:2e:
dd:a6:0b:38:88:37:32:fb:e5:28:d0:c9:d0:bc:3b:dc:07:75:
7a:40:c9:dc:4a:8a:73:fb:60:4d:93:fe:13:70:86:f3:bb:fb:
4b:a2:ab:1e:ee:ac:25:eb:db:27:0a:9e:5e:1b:66:70:30:0d:
0d:d8:3b:b6:19:ea:ec:56:f1:76:a0:76:7e:ff:67:af:f0:b4:
ef:9d:e8:7d:37:49:ce:13:c4:69:7f:6d:23:e3:25:a2:b1:5a:
f4:23:8e:ec:b2:69:bc:62:73:89:f6:a7:a0:7e:24:e0:23:61:
f7:a3:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:05 2026 by rpki-client