Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/eXZdHpePUGkYaOH4ztUcIZuKWrs.roa
File: eXZdHpePUGkYaOH4ztUcIZuKWrs.roa (raw, json)
Hash identifier: HQWM35m3AuHcQ7qdoInnAm8EoKtgNopMBbkgqi3yHI4=
Subject key identifier: 79:76:5D:1E:97:8F:50:69:18:68:E1:F8:CE:D5:1C:21:9B:8A:5A:BB
Certificate issuer: /CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Certificate serial: 019C43EEDAA1FD89944C5F4B52AE6C970F77
Authority key identifier: 85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/eXZdHpePUGkYaOH4ztUcIZuKWrs.roa
Signing time: Mon 09 Feb 2026 19:44:12 +0000
ROA not before: Mon 09 Feb 2026 19:44:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7361
IP address blocks: 5.42.159.0/24 maxlen: 24
91.216.120.0/24 maxlen: 24
185.118.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:ee:da:a1:fd:89:94:4c:5f:4b:52:ae:6c:97:0f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Validity
Not Before: Feb 9 19:44:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79765d1e978f50691868e1f8ced51c219b8a5abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:6c:ed:42:ee:0b:c3:3e:d9:06:51:24:70:
a4:20:10:b6:5c:62:cc:1c:ea:a2:47:8b:e2:b5:6e:
4d:32:63:65:06:6d:72:8a:8d:85:92:40:9f:22:75:
57:65:44:f7:b0:90:96:9e:47:9e:42:a2:a1:60:5e:
e5:45:29:10:e3:91:7c:1e:fe:9b:02:7d:33:c6:3a:
0a:06:35:b2:5e:b9:82:5a:e3:6e:06:43:ee:c1:15:
09:0b:a2:1b:a3:b5:73:ab:09:1d:e6:06:85:7b:f7:
8b:b7:9d:80:25:fd:8d:b2:44:86:b1:a2:a9:18:ee:
e3:4d:48:97:2e:d6:89:85:0a:89:53:e2:8d:14:7b:
05:26:55:38:61:c6:fe:43:20:a6:10:be:1c:ed:40:
e3:b1:41:ca:68:85:ea:31:86:a5:b6:e9:8c:be:aa:
3c:91:d2:f6:4b:27:7c:25:b0:df:f2:3f:92:0c:9d:
81:16:5c:54:31:e5:96:d7:b5:a1:fa:6e:96:74:34:
69:ce:2c:f6:37:b7:1c:8d:f4:1b:60:9c:05:79:8c:
37:f6:3d:93:25:60:d4:9c:64:31:e2:e6:f8:75:8b:
ad:06:ba:f5:b4:41:1e:5a:e1:f6:04:04:eb:75:6d:
5c:01:d3:59:34:c1:e3:27:9d:8d:23:68:da:6c:a9:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:76:5D:1E:97:8F:50:69:18:68:E1:F8:CE:D5:1C:21:9B:8A:5A:BB
X509v3 Authority Key Identifier:
keyid:85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/eXZdHpePUGkYaOH4ztUcIZuKWrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.159.0/24
91.216.120.0/24
185.118.68.0/24
Signature Algorithm: sha256WithRSAEncryption
82:38:eb:df:fd:d4:cd:ce:ad:ce:82:10:84:52:38:d0:37:f4:
19:26:cc:75:4b:1d:34:6e:a2:ad:07:47:c5:7c:ac:0f:bc:da:
8e:d9:e8:93:cc:bc:16:63:29:69:df:12:2a:ed:3c:83:0c:30:
99:68:ec:36:1c:fd:f2:de:02:c3:ea:09:e1:3e:ce:66:de:8e:
1c:81:b8:ab:ea:86:92:e5:c1:4b:87:7f:aa:bf:a7:2f:78:e2:
17:dc:74:7f:ee:43:2b:d7:44:e6:fd:2a:fa:38:44:d2:1b:e9:
80:79:99:da:b7:f9:4f:a7:80:a9:e5:01:53:04:7d:d9:aa:bf:
51:11:d0:21:6c:79:35:c4:0f:9e:4f:ff:23:3b:50:2a:8b:62:
f3:aa:e1:ce:95:cf:66:08:1f:ff:c2:97:57:12:1b:0e:82:dc:
23:6e:81:de:23:b5:fc:d1:65:0e:be:30:4f:82:73:2f:4d:f6:
49:ac:bc:3e:fa:1b:28:32:41:9a:1d:53:52:06:09:8d:8e:94:
03:00:91:31:0a:12:02:b5:83:ab:3b:c7:29:33:ec:a9:0e:79:
19:53:0c:f4:61:89:eb:f9:66:3c:94:3d:9f:64:f4:72:19:00:
d1:31:7b:b6:e3:58:33:32:2f:5a:b9:77:56:48:ad:a6:0c:69:
da:89:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:56:25 2026 by rpki-client