Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/WrVfx5xIOyU0VfM4lWHO9zuUBec.roa
File: WrVfx5xIOyU0VfM4lWHO9zuUBec.roa (raw, json)
Hash identifier: XiwYRUE8TPoWMz3FqnBDZHH2r5WpV+Blp9EaBYJYRms=
Subject key identifier: 5A:B5:5F:C7:9C:48:3B:25:34:55:F3:38:95:61:CE:F7:3B:94:05:E7
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01A03359A3C3508DB7ABA668A7CEAD3FFD52
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/WrVfx5xIOyU0VfM4lWHO9zuUBec.roa
Signing time: Mon 24 Aug 2026 10:38:27 +0000
ROA not before: Mon 24 Aug 2026 10:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 85.237.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:59:a3:c3:50:8d:b7:ab:a6:68:a7:ce:ad:3f:fd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Aug 24 10:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ab55fc79c483b253455f3389561cef73b9405e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:38:af:03:e0:36:ef:1e:71:4e:7b:58:ae:
4a:ea:db:00:04:79:41:e9:6a:5b:08:0a:a1:fd:7a:
1e:0e:36:9d:43:1e:34:f9:1f:fb:bb:4f:c3:2f:52:
5e:f6:77:df:b5:d9:07:60:a0:59:90:e8:07:b2:06:
5e:6a:94:37:9d:ea:22:12:fe:a5:02:d0:a4:0d:62:
81:1b:8f:96:37:f3:82:b8:42:4c:8c:dd:69:fa:d7:
78:42:18:32:c7:c2:8e:ac:b0:1e:ed:17:c3:94:27:
1e:0c:02:49:e1:ce:f3:56:62:67:ce:da:47:75:8e:
0e:11:e4:51:7b:bd:1a:e4:7f:04:a5:1e:ee:64:ce:
e3:15:5d:3a:1f:0d:19:3b:d0:cc:5f:f6:6a:96:da:
68:fc:44:d2:08:4b:3c:25:51:31:1c:c7:63:7e:0d:
fc:50:ff:3e:43:0d:75:1e:86:d4:d6:b9:fe:66:12:
d5:01:99:27:fb:29:fd:3f:2a:27:30:20:db:9d:04:
61:f0:d6:19:30:f3:f3:90:5c:ea:4a:5e:15:5a:a6:
49:fc:67:5b:86:f9:2b:5c:25:7d:0c:83:d8:32:1a:
ac:e2:0c:de:05:ca:a0:45:60:3e:30:35:c3:30:76:
c9:7d:06:89:0f:b4:62:61:15:97:92:5e:f0:a3:4e:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:5F:C7:9C:48:3B:25:34:55:F3:38:95:61:CE:F7:3B:94:05:E7
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/WrVfx5xIOyU0VfM4lWHO9zuUBec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
90:50:f4:79:1c:24:2f:80:d8:21:37:35:83:c2:d2:95:42:fb:
76:38:90:b2:31:4b:04:5e:55:9f:36:bf:c5:e2:15:2f:01:11:
44:d8:61:11:00:68:20:5c:5e:2d:dc:f5:34:e2:f7:b8:0b:2d:
be:2a:a3:fa:a9:3a:f6:46:c2:62:b4:0b:94:45:33:c0:c1:64:
c0:5c:a0:2d:88:0f:ab:de:fa:0c:df:8d:63:b0:f9:72:65:67:
85:12:65:5b:70:da:ee:75:a2:ad:b1:07:9b:fa:ac:1c:35:3c:
5e:ae:8a:3c:de:5e:d2:62:64:4c:a6:48:c0:6c:9a:d7:e9:53:
18:6f:a7:76:d9:d9:ad:5b:c6:07:e4:14:db:16:85:c1:4f:87:
d5:0a:c6:dc:06:84:76:8f:a2:71:92:0c:4e:0d:51:0c:9c:56:
ad:f5:64:a5:4d:88:26:9f:b6:5c:a0:3b:21:1e:78:57:47:66:
e8:79:68:d5:f6:c1:bd:e9:cc:7c:7f:62:e5:6f:46:cb:b8:9a:
0a:33:7b:35:98:20:3b:cb:5c:1f:42:f3:85:0b:f9:df:b4:9d:
3e:70:19:60:22:1f:89:ca:ea:d9:90:ca:54:26:6d:df:2f:d5:
27:d2:d5:d6:bc:1e:a1:82:b9:3f:73:2f:92:fa:e6:a8:b0:05:
86:24:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:45 2026 by rpki-client