Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/7raDErCmpgF8ZUjdqL93eV2JgUw.roa
File: 7raDErCmpgF8ZUjdqL93eV2JgUw.roa (raw, json)
Hash identifier: 9kcBhIDhfXPSPUyBCiuks22iDUUcz+rHmCUw4RlBWdE=
Subject key identifier: EE:B6:83:12:B0:A6:A6:01:7C:65:48:DD:A8:BF:77:79:5D:89:81:4C
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019C706C0541185AD89BE50A98C18BA60823
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/7raDErCmpgF8ZUjdqL93eV2JgUw.roa
Signing time: Wed 18 Feb 2026 11:04:13 +0000
ROA not before: Wed 18 Feb 2026 11:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42825
IP address blocks: 85.174.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:6c:05:41:18:5a:d8:9b:e5:0a:98:c1:8b:a6:08:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Feb 18 11:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeb68312b0a6a6017c6548dda8bf77795d89814c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:cf:ef:53:4f:02:ce:53:a1:97:b1:af:ac:
a8:9d:06:29:8f:e4:85:13:aa:f8:4f:79:9e:83:da:
c3:25:d1:bf:f6:60:24:cd:03:b9:0e:5d:65:a9:39:
06:3a:53:46:b3:54:f4:83:b0:8c:9a:7c:a4:fe:53:
fa:5d:ed:95:54:5b:83:f5:58:ff:07:fb:c9:85:37:
0a:ea:bb:c2:06:3a:1a:81:b8:2e:63:07:c8:b2:1a:
07:f6:32:d9:fe:d7:32:e9:e0:13:1b:45:74:26:e2:
66:89:b0:28:3e:b7:ce:a0:d7:9f:aa:33:0a:39:78:
e1:24:93:ca:e1:2a:e5:d3:0d:4b:b5:3c:19:09:0e:
93:1a:a4:cd:54:d4:03:dd:0d:18:b9:c5:a5:9c:b8:
d4:36:27:b3:56:65:a0:20:53:43:67:c0:8f:8f:93:
72:14:0d:e9:f9:b5:9d:0a:8c:9c:8b:c8:30:98:90:
40:60:39:84:db:91:c5:d1:44:50:ef:c8:99:79:0f:
e2:cd:84:10:b0:83:ed:73:1a:79:a9:c5:8e:c9:78:
54:ad:cb:31:73:4e:cc:a5:9b:bf:46:63:d4:5e:05:
73:bd:6a:3a:1f:e4:ee:e8:33:cb:a7:d6:97:fa:8a:
c7:e5:19:63:cb:da:c8:60:bb:f4:e9:f5:04:4c:f4:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B6:83:12:B0:A6:A6:01:7C:65:48:DD:A8:BF:77:79:5D:89:81:4C
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/7raDErCmpgF8ZUjdqL93eV2JgUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.174.245.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9f:87:89:f4:bb:e7:e9:4d:04:ef:97:bc:52:04:6c:9a:00:
a8:56:92:d1:bd:42:d4:69:e7:2b:cc:eb:bc:d9:b8:73:ee:92:
85:e9:d4:fe:b5:ad:63:ca:4f:21:90:8e:88:91:95:5a:35:54:
ff:af:46:6c:4c:87:de:9d:64:a6:cb:96:53:92:8d:4d:22:c5:
08:b3:d0:13:43:98:0a:cb:17:b5:bb:4e:32:81:41:02:f2:97:
cc:1c:72:00:1f:56:6f:bb:fb:37:f5:57:87:d3:7a:e1:3e:2a:
b7:b1:f3:71:48:56:3e:ed:04:b4:85:fd:bd:e2:8d:c8:da:42:
3d:ac:5f:04:37:b5:15:29:f0:82:90:1a:19:a6:e3:c8:24:0a:
4f:5e:57:d5:c2:1e:b1:80:e4:56:92:f8:7e:7e:11:dc:44:86:
ac:7d:f5:85:dc:de:8d:21:0b:27:3e:ff:53:99:08:65:9c:d2:
12:34:71:8a:95:ac:c3:1f:f8:f4:c4:fb:51:51:0a:0e:49:0e:
70:ea:8e:4e:82:29:31:8b:2f:71:34:56:c4:39:5a:a6:36:1a:
1d:be:1c:0f:9d:24:8b:3f:e4:79:32:ba:d0:c3:32:d6:08:d3:
36:29:9e:24:a3:60:30:d7:de:3a:8c:ea:88:bd:31:e0:38:bc:
aa:13:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:25 2026 by rpki-client