Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Zj4CimCazX5aQkiTy0v6Bth5jY0.roa
File: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (raw, json)
Hash identifier: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=
Subject key identifier: 66:3E:02:8A:60:9A:CD:7E:5A:42:48:93:CB:4B:FA:06:D8:79:8D:8D
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019E81AE09B07D24EAAFF2B589352AC0120D
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Zj4CimCazX5aQkiTy0v6Bth5jY0.roa
Signing time: Mon 01 Jun 2026 05:35:27 +0000
ROA not before: Mon 01 Jun 2026 05:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151338
IP address blocks: 85.237.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:81:ae:09:b0:7d:24:ea:af:f2:b5:89:35:2a:c0:12:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jun 1 05:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=663e028a609acd7e5a424893cb4bfa06d8798d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:49:cf:1e:ba:bb:18:c2:d5:21:34:a2:98:
ad:3e:94:9b:94:cf:75:c4:47:b5:c6:94:f1:2e:01:
74:80:fe:82:1d:10:16:f2:a7:aa:bb:3c:b6:5d:2d:
f2:fb:b2:46:23:77:ca:b6:cb:b6:24:2b:16:28:91:
62:35:76:66:6f:d1:30:48:36:2b:b3:da:29:9a:65:
68:f0:90:ec:76:ad:67:b4:c4:18:ff:db:9d:99:d9:
12:de:79:db:a5:f0:59:77:11:85:c3:fb:dc:eb:bc:
f9:84:12:d4:23:77:a5:c9:19:34:71:00:89:0d:ef:
d1:57:fe:40:60:50:4f:c2:97:55:7a:a4:c9:e9:6b:
98:db:9f:0c:01:8a:1c:66:08:88:47:fa:6e:a6:5b:
32:c9:c2:a6:c5:c4:59:5a:f0:d1:3c:2b:f5:f7:99:
f9:c2:1b:8e:7b:03:5d:a8:59:35:10:44:1f:91:fa:
0b:ec:5e:5c:46:26:af:1a:fd:c3:60:e6:28:2c:50:
65:7b:3e:20:fd:8a:68:d9:9f:88:c2:fd:c5:ac:87:
7f:63:cc:59:f5:fa:1f:23:4b:94:2a:82:e0:e3:98:
88:c8:60:d7:8e:e6:6f:e0:52:99:59:e8:02:8d:1e:
9f:df:8d:bf:81:31:5a:18:5a:87:90:ad:aa:7a:68:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3E:02:8A:60:9A:CD:7E:5A:42:48:93:CB:4B:FA:06:D8:79:8D:8D
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Zj4CimCazX5aQkiTy0v6Bth5jY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.70.0/24
Signature Algorithm: sha256WithRSAEncryption
83:de:03:6b:ca:bd:43:72:79:87:3c:32:84:b6:c7:e9:d0:1a:
21:43:0b:ad:40:5c:c2:90:39:13:92:57:79:49:67:0c:90:30:
68:2b:63:94:68:a5:ea:41:fc:a8:41:b0:2f:1c:81:ad:9e:26:
09:e7:52:53:3f:d5:f5:22:29:51:0f:78:b3:45:dc:bc:a7:cc:
2a:52:25:14:9e:22:8b:93:80:8d:e3:2b:bd:fd:43:e9:bf:d9:
29:cb:01:58:c4:75:78:98:e3:4d:ab:ea:6b:1b:31:ec:f2:68:
61:2a:b1:36:04:2b:4f:2c:b8:68:c8:a7:4d:17:a1:f8:b2:bf:
2e:79:01:cb:0b:5c:65:12:4f:1b:bd:12:85:e6:0a:aa:b8:73:
4c:4c:1e:ab:01:51:93:39:88:8c:0c:2f:90:1f:6c:79:b5:ca:
52:29:54:8e:d4:e6:c7:81:b7:5e:bd:66:13:38:8b:a2:5d:01:
2a:52:a8:4a:65:6a:11:57:f6:b9:cf:f0:fe:a9:76:8a:56:15:
89:fa:17:6d:71:50:43:a9:9a:5c:e4:1e:4c:f9:72:b7:26:9d:
56:af:27:d1:6d:0b:b4:ce:da:a1:a8:30:71:11:20:87:3e:74:
56:ed:dc:62:4d:dc:ce:88:22:21:ba:09:34:0f:9a:91:cb:59:
5b:87:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:04 2026 by rpki-client