Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/n02-ZYJ9m5SZhrBqWk_1khgF-c4.roa
File: n02-ZYJ9m5SZhrBqWk_1khgF-c4.roa (raw, json)
Hash identifier: 5LLo9UejeR5e6s24U5EcKRFzvnsIV1B+TelnGxofLbg=
Subject key identifier: 9F:4D:BE:65:82:7D:9B:94:99:86:B0:6A:5A:4F:F5:92:18:05:F9:CE
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01A102132207DD0918303A0792ADEFB915DC
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/n02-ZYJ9m5SZhrBqWk_1khgF-c4.roa
Signing time: Sat 03 Oct 2026 14:02:50 +0000
ROA not before: Sat 03 Oct 2026 14:02:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30042
IP address blocks: 85.237.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:13:22:07:dd:09:18:30:3a:07:92:ad:ef:b9:15:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Oct 3 14:02:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f4dbe65827d9b949986b06a5a4ff5921805f9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:fd:0b:f2:73:59:15:ba:39:74:48:5c:fe:
fe:0c:dd:a6:f2:15:a0:9c:bb:4e:f8:09:46:3b:ae:
f0:c9:3a:9d:7d:1b:97:d2:10:46:2c:9d:fb:c8:ee:
0f:fd:54:71:dd:13:a3:16:62:e2:ba:b0:ba:8c:f7:
36:a9:8f:65:a3:6a:46:b0:fc:66:8d:1b:89:e2:e8:
98:d9:ae:ae:6b:1e:74:66:3c:6f:65:5d:12:ca:fd:
4a:9e:89:71:12:35:ae:39:f2:cc:ea:2d:40:12:fa:
fd:27:c4:88:4d:11:c7:4f:b5:74:ae:5e:f2:32:d4:
0b:c1:3c:e8:f0:f3:3f:e9:3a:a7:6d:82:bd:bf:9d:
27:c4:f0:2e:0d:cf:45:02:f9:bf:3a:44:8b:c2:5a:
dc:27:f9:51:9f:9a:6a:eb:9d:f1:79:5c:49:9f:a0:
f5:bc:99:d4:b2:45:b6:07:70:4d:5f:29:49:64:fc:
1f:c9:21:b0:22:f2:c4:ae:6a:4a:2f:dd:e2:06:74:
f7:58:b3:4a:a9:3c:35:ca:36:c8:59:d3:fc:ca:25:
4c:98:93:62:be:ef:3d:fb:7b:6b:2c:c6:8e:95:cf:
37:41:1c:db:a5:4d:58:24:e3:e7:cf:c6:11:a7:48:
94:bb:da:87:38:32:68:aa:bf:e2:7e:f2:0f:c1:f6:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:BE:65:82:7D:9B:94:99:86:B0:6A:5A:4F:F5:92:18:05:F9:CE
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/n02-ZYJ9m5SZhrBqWk_1khgF-c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
58:30:eb:72:5f:ab:57:87:59:95:9c:a0:26:ef:78:05:19:db:
e2:38:ca:ed:4a:d7:5e:ec:51:78:05:fa:3f:23:52:b1:73:de:
4f:c7:78:12:d0:cf:2f:cd:d1:65:57:4c:57:ce:bb:9a:06:91:
0b:b5:32:b6:62:ff:ad:91:08:4c:a2:78:24:0c:9e:c1:36:15:
d0:1c:b0:26:e2:23:3c:32:3a:56:35:61:6f:e8:3e:08:80:6a:
69:95:ae:64:70:85:90:33:3e:bd:fb:4d:11:f4:32:4e:93:50:
68:63:bd:02:f4:ea:86:6a:e0:f9:2c:e9:da:da:73:69:ee:5a:
bd:69:6c:ba:e9:4e:a5:47:50:a3:08:69:9d:ba:f9:45:d2:28:
84:e9:4f:45:9d:85:41:8a:c4:d4:c3:d9:bd:e1:09:ea:ec:c3:
01:79:c3:97:5f:5a:bd:32:2c:c5:de:fd:bc:ab:9b:f1:10:c8:
09:6a:e0:de:48:2e:c2:66:e6:7f:54:cd:a6:1f:02:70:61:83:
e5:16:ff:79:00:43:8f:d7:e4:f2:d5:21:f4:94:76:2b:2e:ca:
fd:4e:64:30:1f:a7:08:cf:c9:41:d9:76:03:87:df:60:66:e9:
59:c1:bc:37:06:23:8d:2c:d4:12:f3:60:b4:11:2f:c4:1d:e2:
98:34:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:34 2026 by rpki-client