Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/uaZQDhIwfSYmxyJRtqIy_L_zHso.roa
File: uaZQDhIwfSYmxyJRtqIy_L_zHso.roa (raw, json)
Hash identifier: N+ZzHwJkmYGK/5t3l5o1KIYLDvFM99cPQu6Ca7RAknE=
Subject key identifier: B9:A6:50:0E:12:30:7D:26:26:C7:22:51:B6:A2:32:FC:BF:F3:1E:CA
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019C1A8F627E8104DCD73620FD0DEC76D912
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/uaZQDhIwfSYmxyJRtqIy_L_zHso.roa
Signing time: Sun 01 Feb 2026 18:55:30 +0000
ROA not before: Sun 01 Feb 2026 18:55:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133153
IP address blocks: 85.237.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1a:8f:62:7e:81:04:dc:d7:36:20:fd:0d:ec:76:d9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Feb 1 18:55:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9a6500e12307d2626c72251b6a232fcbff31eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:67:e1:43:a5:0d:6b:81:87:0d:2b:03:75:
15:97:01:3a:9a:90:2a:55:7b:33:ca:36:5f:fb:b3:
d2:cf:fa:c5:10:4f:8e:33:61:3c:fd:4a:fc:57:8c:
af:ce:e3:98:b6:09:54:8b:3c:bc:54:7a:96:64:64:
c8:be:30:a6:ba:cb:03:33:02:c4:6e:bb:ca:f9:09:
6b:09:6f:d7:2e:1f:be:37:8b:aa:58:11:7c:46:27:
ce:b5:67:eb:5b:46:1d:22:bb:9f:01:ac:60:69:a2:
e7:4b:0a:3c:8e:ce:47:b2:57:94:e5:e3:40:6e:e3:
16:75:66:36:8b:3c:24:b8:b6:af:8b:19:c5:89:07:
5f:31:85:11:b8:3c:39:8c:48:7c:b6:da:48:30:23:
0d:e9:05:da:99:f7:c0:8a:25:d1:0a:e8:f8:30:67:
a8:b1:eb:f4:88:e9:92:5a:29:ab:ef:c7:76:a8:01:
2d:02:4e:bf:0c:1c:2f:c7:96:6e:4b:67:6b:0e:dc:
ea:9f:b4:49:5f:cf:80:b0:2a:9c:4c:c5:d7:be:95:
da:f5:e2:a0:c3:b7:66:14:5c:bf:1d:33:1f:eb:4f:
e8:aa:34:49:ad:79:49:1e:88:d0:db:82:4d:d9:a6:
42:bc:57:81:dc:ea:00:68:20:76:29:85:69:76:3c:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A6:50:0E:12:30:7D:26:26:C7:22:51:B6:A2:32:FC:BF:F3:1E:CA
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/uaZQDhIwfSYmxyJRtqIy_L_zHso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.70.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:44:db:71:80:6d:ba:fd:df:46:4c:cb:9a:79:e9:4f:c4:25:
7a:e2:56:5b:fe:8c:c0:c9:43:5b:34:79:98:8f:81:fb:1d:7d:
3b:c5:b0:8a:3d:b8:99:6f:72:38:99:39:5c:10:60:e2:3e:2b:
94:ed:a0:a7:a0:4b:90:45:94:17:26:b3:21:49:52:4b:18:03:
ca:5a:8a:c8:c9:6f:af:b9:5f:ff:a7:ad:f3:6c:d7:c7:fb:ce:
97:68:02:e3:29:79:9f:cc:fa:6f:70:54:5d:3c:c7:e2:8e:4c:
aa:2b:a1:a5:8d:9b:87:ac:0b:32:f8:41:9b:df:f9:0b:df:68:
40:88:d6:fb:d4:d8:13:db:a2:12:bc:94:f1:71:f9:06:59:84:
a1:e6:35:a3:d8:77:87:4f:66:b9:d4:11:fc:ee:16:c3:db:ce:
9c:92:34:65:c5:4e:db:5e:75:ec:2c:95:98:c3:18:93:0b:af:
db:e5:6d:4c:f8:ea:cf:31:94:ed:33:8a:66:ae:ff:a4:54:57:
f5:d2:8e:2f:2e:df:28:98:a8:a3:a1:a4:29:50:82:02:d0:4e:
41:0e:31:34:8e:4a:58:f7:a2:c4:7a:01:38:56:95:3a:20:05:
43:56:87:6d:ec:25:20:dc:d2:ff:2a:ab:a9:e7:e4:5a:22:dd:
d5:c9:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:36:52 2026 by rpki-client