Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Zl7668QzqgpWXy6sh2FJjPCuQUA.roa
File: Zl7668QzqgpWXy6sh2FJjPCuQUA.roa (raw, json)
Hash identifier: 2zmfb9kNRpLa+/F5r/g7AhSNh6Z8kYBICxLEIcI8yZM=
Subject key identifier: 66:5E:FA:EB:C4:33:AA:0A:56:5F:2E:AC:87:61:49:8C:F0:AE:41:40
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019F6EA4429BA93381AE68181DA24C8A8F22
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Zl7668QzqgpWXy6sh2FJjPCuQUA.roa
Signing time: Fri 17 Jul 2026 05:54:46 +0000
ROA not before: Fri 17 Jul 2026 05:54:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 85.237.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:a4:42:9b:a9:33:81:ae:68:18:1d:a2:4c:8a:8f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jul 17 05:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=665efaebc433aa0a565f2eac8761498cf0ae4140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:eb:3c:de:e1:df:66:44:3f:99:f6:76:b7:
ed:e2:be:c0:e5:35:f1:e1:e3:9e:09:90:83:40:1b:
18:03:c0:cf:d9:17:84:c3:b7:82:5b:39:48:00:36:
f3:df:28:bb:6d:1f:17:59:94:81:7a:d3:75:95:8e:
92:44:f0:a4:52:31:5c:ad:c1:b5:ec:dc:af:c2:a2:
0b:dc:d3:f9:5d:04:af:ac:7e:25:29:16:44:cb:fc:
df:80:9e:bd:fa:05:ea:97:60:cd:20:f8:56:1d:da:
77:72:13:d9:f0:73:aa:4a:62:87:82:de:a5:c2:a2:
dd:74:c5:08:53:6b:fb:f5:5d:17:cb:4e:5d:b8:30:
85:73:8b:66:87:36:35:b2:ab:17:48:7b:c9:f0:a7:
3b:dc:cf:37:ac:42:f4:38:16:a0:85:2e:8a:77:2f:
12:e8:89:b7:0e:91:26:e6:e5:c5:63:a7:a0:8e:22:
f8:3e:b0:23:b2:d1:54:60:4f:0b:93:6b:89:82:37:
43:27:59:73:5b:51:18:1d:0a:0e:3a:02:80:03:dd:
25:71:97:2a:94:e0:4d:dd:53:aa:c2:35:25:29:c3:
34:45:17:e4:e7:06:81:da:6d:f7:af:0a:71:45:a5:
cc:16:e2:4b:c1:c3:d8:48:7f:75:64:da:e9:35:67:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5E:FA:EB:C4:33:AA:0A:56:5F:2E:AC:87:61:49:8C:F0:AE:41:40
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Zl7668QzqgpWXy6sh2FJjPCuQUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e9:ee:41:dc:c8:97:68:ae:82:44:b5:58:ae:05:81:1f:c6:
bf:db:27:d5:44:5b:e8:e2:70:63:9e:bd:eb:54:dc:a4:5f:0b:
3d:69:ba:0d:3e:ed:1d:45:b7:cf:6e:bd:b1:f3:8f:5e:0c:69:
32:b2:09:34:19:30:72:47:39:a3:fb:9e:d6:98:65:d5:c9:af:
30:5d:77:b6:67:95:89:98:f5:54:c0:02:f8:44:0a:33:61:c1:
bb:33:29:d0:aa:e7:67:f4:d9:8e:ed:a5:47:99:f3:c2:b7:48:
fc:e9:c5:b9:81:ea:23:90:eb:92:89:19:02:d6:45:05:e5:7d:
5c:6a:d7:99:73:8d:8d:5f:4b:54:1f:8f:36:ab:82:77:2b:5f:
e9:56:63:47:5c:39:e6:8a:bf:fd:5f:86:18:47:95:ea:a0:c1:
69:09:47:7b:54:cd:6c:ef:c4:a7:0d:43:f1:8e:db:46:d1:50:
6a:eb:06:bd:20:21:45:6a:0e:e4:ec:d8:61:69:69:92:7f:5b:
5f:3d:d6:08:cc:f2:bf:6b:42:cf:1c:e7:16:f6:48:4f:ac:c8:
78:b4:83:66:db:45:be:47:14:e7:3e:be:24:48:ae:9d:2a:59:
2d:31:c6:a1:49:53:42:f3:a5:3d:c6:a6:8e:70:d5:4e:66:92:
53:55:27:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9upEKbqTOBrmgYHaJMio8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjYwNzE3MDU1NDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjVlZmFlYmM0MzNhYTBhNTY1ZjJlYWM4NzYxNDk4Y2YwYWU0MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLDrPN7h32ZEP5n2drft4r7A5TXx
4eOeCZCDQBsYA8DP2ReEw7eCWzlIADbz3yi7bR8XWZSBetN1lY6SRPCkUjFcrcG1
7NyvwqIL3NP5XQSvrH4lKRZEy/zfgJ69+gXql2DNIPhWHdp3chPZ8HOqSmKHgt6l
wqLddMUIU2v79V0Xy05duDCFc4tmhzY1sqsXSHvJ8Kc73M83rEL0OBaghS6Kdy8S
6Im3DpEm5uXFY6egjiL4PrAjstFUYE8Lk2uJgjdDJ1lzW1EYHQoOOgKAA90lcZcq
lOBN3VOqwjUlKcM0RRfk5waB2m33rwpxRaXMFuJLwcPYSH91ZNrpNWdWCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGZe+uvEM6oKVl8urIdhSYzwrkFAMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvWmw3NjY4UXpxZ3BXWHk2c2gyRkpqUEN1UVVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe1GMA0G
CSqGSIb3DQEBCwUAA4IBAQBe6e5B3MiXaK6CRLVYrgWBH8a/2yfVRFvo4nBjnr3r
VNykXws9aboNPu0dRbfPbr2x849eDGkysgk0GTByRzmj+57WmGXVya8wXXe2Z5WJ
mPVUwAL4RAozYcG7MynQqudn9NmO7aVHmfPCt0j86cW5geojkOuSiRkC1kUF5X1c
ateZc42NX0tUH482q4J3K1/pVmNHXDnmir/9X4YYR5XqoMFpCUd7VM1s78SnDUPx
jttG0VBq6wa9ICFFag7k7NhhaWmSf1tfPdYIzPK/a0LPHOcW9khPrMh4tINm20W+
RxTnPr4kSK6dKlktMcahSVNC86U9xqaOcNVOZpJTVSda
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:23:42 2026 by rpki-client