Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/EyUToF8sjE97pTp9WiGCqzekrUE.roa
File: EyUToF8sjE97pTp9WiGCqzekrUE.roa (raw, json)
Hash identifier: tHIqv4CfBKp0ie/EQOB+vocnFYtIMYOnZZ/t0QlwneM=
Subject key identifier: 13:25:13:A0:5F:2C:8C:4F:7B:A5:3A:7D:5A:21:82:AB:37:A4:AD:41
Certificate issuer: /CN=dbb7531d4834cb3b5eec10819177a5a9af1541e3
Certificate serial: 01A11FE0FEA64D004BC1A800CF63D2E9BD2B
Authority key identifier: DB:B7:53:1D:48:34:CB:3B:5E:EC:10:81:91:77:A5:A9:AF:15:41:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27dTHUg0yzte7BCBkXelqa8VQeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/EyUToF8sjE97pTp9WiGCqzekrUE.roa
Signing time: Fri 09 Oct 2026 08:56:41 +0000
ROA not before: Fri 09 Oct 2026 08:56:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211459
IP address blocks: 85.8.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/27dTHUg0yzte7BCBkXelqa8VQeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/27dTHUg0yzte7BCBkXelqa8VQeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/27dTHUg0yzte7BCBkXelqa8VQeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:e0:fe:a6:4d:00:4b:c1:a8:00:cf:63:d2:e9:bd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb7531d4834cb3b5eec10819177a5a9af1541e3
Validity
Not Before: Oct 9 08:56:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=132513a05f2c8c4f7ba53a7d5a2182ab37a4ad41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:dc:71:cc:4d:47:57:01:98:37:78:9b:e8:ff:
7f:6d:d2:57:be:92:5c:30:6b:ee:48:3f:f7:24:a7:
e1:c1:fe:98:a3:82:09:60:4f:65:3e:9d:10:79:df:
3b:60:2e:aa:00:f4:38:48:7a:e2:91:fa:6c:97:93:
81:f9:ea:e2:9b:25:8a:9d:2b:2c:c6:92:28:35:cd:
34:ce:b0:65:2e:ca:96:34:61:4b:97:39:03:d2:ec:
51:a3:fe:99:5a:a2:c1:71:e9:d6:bc:ee:35:cf:af:
b7:ba:31:7b:68:2d:f0:0b:99:50:e6:44:41:74:f7:
cd:5e:bf:e6:f4:94:fb:a8:c2:1e:df:69:c6:73:da:
1d:e9:8e:a2:ac:76:40:49:f6:49:90:d4:7a:56:ae:
f0:7c:78:a8:51:c2:30:62:d4:f1:d6:db:46:02:69:
8a:ab:f1:01:36:8a:07:82:ea:d2:52:1f:d9:45:c0:
ea:0c:3c:85:33:00:44:c0:f0:09:96:42:a6:99:ca:
67:e0:65:74:cb:de:47:3e:ed:24:77:40:b0:e4:8d:
03:1d:7e:d3:3b:b9:8e:42:67:fe:2c:8e:0b:da:82:
d1:6f:23:b0:9f:33:7e:1f:18:0c:c0:f6:dc:08:c6:
19:ac:da:58:79:8a:91:3b:6d:55:0e:92:d1:de:64:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:25:13:A0:5F:2C:8C:4F:7B:A5:3A:7D:5A:21:82:AB:37:A4:AD:41
X509v3 Authority Key Identifier:
keyid:DB:B7:53:1D:48:34:CB:3B:5E:EC:10:81:91:77:A5:A9:AF:15:41:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27dTHUg0yzte7BCBkXelqa8VQeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/EyUToF8sjE97pTp9WiGCqzekrUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bdaf6a-1b2f-4573-b803-42b021cda85e/1/27dTHUg0yzte7BCBkXelqa8VQeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.235.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b9:0a:ed:87:72:71:4a:37:74:7f:e3:35:b0:69:af:29:a9:
d6:04:13:a3:85:60:be:4b:ed:dd:94:c0:9d:56:ca:66:29:6c:
f8:38:5c:de:58:5c:e7:42:23:1c:94:d0:82:e2:4c:01:26:13:
3b:af:82:4a:be:3c:13:fa:62:ee:46:e3:93:e9:2a:bf:a7:62:
50:4a:b8:d8:6d:8f:bc:cd:45:6a:e5:d8:76:37:c8:e1:91:a8:
e0:64:71:85:83:41:ed:00:44:d5:40:cf:ba:fb:6b:cc:44:30:
97:ff:a9:4b:e2:25:5c:a6:35:af:5b:5b:0d:b3:a9:9b:8a:bf:
07:13:b5:8b:7f:6d:e4:84:21:6c:25:cc:d9:7c:72:39:f4:bd:
9d:1b:96:20:46:e1:33:ca:7c:66:71:5a:30:a2:3b:b3:8d:a0:
0a:e6:74:3c:24:6d:b0:d4:1b:48:5e:65:84:14:6a:7a:00:34:
66:56:4b:b4:b0:61:fe:e1:a8:00:96:ef:00:b7:07:73:e7:59:
37:f6:92:07:e5:69:a9:49:9d:f4:c8:db:6b:75:9c:31:38:28:
8f:7b:ba:ef:a3:15:3e:11:b6:8a:9d:6a:41:37:b2:53:6b:1f:
eb:76:f1:ad:5f:0b:03:09:0d:db:24:5e:c1:12:b9:12:fb:b1:
ee:e1:c8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:53 2026 by rpki-client