Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/b3hSMqZucbTEWGNrQwAs2IFGkRw.roa
File: b3hSMqZucbTEWGNrQwAs2IFGkRw.roa (raw, json)
Hash identifier: z/yFesinyEyBrIjdwqEECuXJOsbqlJbwdnSENUJBacc=
Subject key identifier: 6F:78:52:32:A6:6E:71:B4:C4:58:63:6B:43:00:2C:D8:81:46:91:1C
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01A03CAC6CB1B6EFAEE9C59A5C7C9CBAF0DD
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/b3hSMqZucbTEWGNrQwAs2IFGkRw.roa
Signing time: Wed 26 Aug 2026 06:05:27 +0000
ROA not before: Wed 26 Aug 2026 06:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 85.237.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:ac:6c:b1:b6:ef:ae:e9:c5:9a:5c:7c:9c:ba:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Aug 26 06:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f785232a66e71b4c458636b43002cd88146911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:e2:8e:06:14:82:87:50:d8:d4:4e:46:e1:
ea:d6:86:1b:68:38:19:14:72:f0:fb:d2:bc:d2:4e:
06:68:7e:0e:60:fe:94:40:13:da:e0:be:88:e2:63:
5a:69:b5:81:94:57:a5:07:52:b0:46:20:94:08:80:
85:89:13:49:3f:da:ac:2a:42:27:18:36:66:42:d5:
8a:c9:81:9f:d3:96:eb:7b:8b:2b:eb:26:1a:e0:a2:
85:4c:8f:e3:5d:1b:3a:43:5c:10:93:b2:2b:26:88:
c3:54:3e:df:89:59:6e:69:59:00:0c:88:d8:b8:e4:
07:26:85:f0:a0:9a:83:3b:f6:61:50:b0:f7:c1:7b:
44:2a:a3:dc:9d:f0:0a:af:94:60:0d:b0:7e:40:76:
11:cf:60:5f:e7:89:5b:3a:bc:29:86:db:66:89:45:
3b:89:3f:09:e8:68:b2:8b:5b:95:0b:ae:a5:d7:f8:
a4:15:9a:71:60:9b:d3:99:d7:de:9d:69:58:dd:09:
b0:d7:28:f5:d3:ce:85:9b:59:48:ca:e8:37:70:42:
ac:b9:5b:56:81:40:58:42:d0:67:ff:d9:94:e3:73:
a2:8f:45:68:0b:7a:5e:47:17:42:f0:79:31:76:71:
f0:32:df:96:29:59:b4:9f:1d:bb:a1:5c:a5:ca:63:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:78:52:32:A6:6E:71:B4:C4:58:63:6B:43:00:2C:D8:81:46:91:1C
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/b3hSMqZucbTEWGNrQwAs2IFGkRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
39:a9:f6:3e:49:dd:58:4f:8f:38:80:13:77:6a:9d:78:cf:2b:
70:92:f0:ba:d1:58:d1:1b:57:95:26:1a:7c:82:1c:9a:f2:66:
25:a6:b3:4c:33:90:f5:14:6c:07:66:03:2c:06:16:d2:9f:f4:
49:b5:95:9d:8c:50:87:8a:8f:c8:79:c6:92:f7:7b:94:c9:37:
60:0b:00:a1:b0:42:b7:a4:ca:9b:c3:8a:7d:3c:ed:f3:05:05:
4e:f3:0b:51:d8:fa:f2:44:e8:dc:8b:08:74:b2:36:95:ef:f7:
2a:69:14:56:9d:c8:76:13:2e:cb:11:b8:11:d2:1a:dd:1f:f8:
2c:14:b4:f0:c4:85:e1:1f:06:01:dc:32:9b:0e:44:cb:09:bb:
f4:15:4a:fd:9b:63:69:31:7a:55:e0:02:9b:eb:fb:f1:1a:00:
9b:42:b5:a4:a7:03:b6:89:76:21:a1:00:47:04:01:52:26:f2:
78:12:cb:32:c4:21:d2:cc:79:03:b4:31:e4:93:38:1f:67:b1:
e2:b7:a8:3b:60:b6:4d:ce:a4:44:56:e3:3e:a1:f1:87:aa:0f:
5d:85:44:4d:73:de:70:d6:27:12:d8:66:c6:04:b2:cc:9d:18:
81:3a:3d:7b:05:b9:6b:1d:5c:0a:f4:b0:ae:62:3a:55:f8:85:
2f:26:26:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA8rGyxtu+u6cWaXHycuvDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjYwODI2MDYwNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Zjc4NTIzMmE2NmU3MWI0YzQ1ODYzNmI0MzAwMmNkODgxNDY5MTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IjijgYUgodQ2NRORuHq1oYbaDgZ
FHLw+9K80k4GaH4OYP6UQBPa4L6I4mNaabWBlFelB1KwRiCUCICFiRNJP9qsKkIn
GDZmQtWKyYGf05bre4sr6yYa4KKFTI/jXRs6Q1wQk7IrJojDVD7fiVluaVkADIjY
uOQHJoXwoJqDO/ZhULD3wXtEKqPcnfAKr5RgDbB+QHYRz2Bf54lbOrwphttmiUU7
iT8J6Giyi1uVC66l1/ikFZpxYJvTmdfenWlY3Qmw1yj1086Fm1lIyug3cEKsuVtW
gUBYQtBn/9mU43Oij0VoC3peRxdC8HkxdnHwMt+WKVm0nx27oVylymOeBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG94UjKmbnG0xFhja0MALNiBRpEcMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvYjNoU01xWnVjYlRFV0dOclF3QXMySUZHa1J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVe1cMA0G
CSqGSIb3DQEBCwUAA4IBAQA5qfY+Sd1YT484gBN3ap14zytwkvC60VjRG1eVJhp8
ghya8mYlprNMM5D1FGwHZgMsBhbSn/RJtZWdjFCHio/IecaS93uUyTdgCwChsEK3
pMqbw4p9PO3zBQVO8wtR2PryROjciwh0sjaV7/cqaRRWnch2Ey7LEbgR0hrdH/gs
FLTwxIXhHwYB3DKbDkTLCbv0FUr9m2NpMXpV4AKb6/vxGgCbQrWkpwO2iXYhoQBH
BAFSJvJ4EssyxCHSzHkDtDHkkzgfZ7Hit6g7YLZNzqREVuM+ofGHqg9dhURNc95w
1icS2GbGBLLMnRiBOj17BblrHVwK9LCuYjpV+IUvJiZ+
-----END CERTIFICATE-----
Generated at Wed Sep 9 20:27:20 2026 by rpki-client