Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/hlXzXwqfKevRV0ZOYD4xuZeyv68.roa
File: hlXzXwqfKevRV0ZOYD4xuZeyv68.roa (raw, json)
Hash identifier: ILiVM3fgCJT+94jYQT8N5fmuGvDZmGhhJIkkPyMYJ8o=
Subject key identifier: 86:55:F3:5F:0A:9F:29:EB:D1:57:46:4E:60:3E:31:B9:97:B2:BF:AF
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019E81AE093C5D5C8C62820D002054CA89E7
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/hlXzXwqfKevRV0ZOYD4xuZeyv68.roa
Signing time: Mon 01 Jun 2026 05:35:26 +0000
ROA not before: Mon 01 Jun 2026 05:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.237.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:81:ae:09:3c:5d:5c:8c:62:82:0d:00:20:54:ca:89:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jun 1 05:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8655f35f0a9f29ebd157464e603e31b997b2bfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:8a:95:f9:be:4c:50:ff:66:4d:b7:e7:34:
56:7c:b0:3b:62:26:18:cd:4b:d0:e2:9c:f8:18:c6:
d0:3d:87:92:93:3b:bd:be:c9:80:1d:71:c7:3a:d6:
77:64:45:38:6f:37:a9:33:03:55:07:08:41:0b:20:
83:43:44:b1:91:b3:1d:35:f9:f7:1a:67:91:27:e7:
53:71:7f:ff:cb:ef:a6:b5:89:4b:1a:f4:4e:31:d5:
fc:4d:f3:7f:05:67:55:51:5c:51:58:61:05:bf:e8:
da:0f:75:79:44:cc:1d:74:49:2d:15:6c:02:e7:66:
6e:dc:da:42:fb:c5:81:6d:0b:07:48:69:26:98:24:
b3:f0:7e:74:32:62:69:92:93:92:0d:5c:81:6e:97:
6d:9c:8c:91:ec:28:37:2a:77:31:dd:0b:8a:4c:51:
e5:33:b8:15:3b:69:00:de:ce:e9:2a:54:6a:c0:d0:
c1:dc:60:bc:20:1f:a4:9a:68:b6:47:dd:18:e7:40:
1b:7b:46:92:5c:71:bf:c9:ac:8d:7e:b1:72:ce:5d:
c5:f6:2f:bd:4b:6d:32:4e:a4:18:56:51:48:51:d1:
44:25:0a:75:66:5c:7a:d9:a2:b7:d5:06:4b:4d:3e:
39:f4:26:c3:b6:4a:2c:e8:d0:d0:2f:36:c2:bc:e3:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:F3:5F:0A:9F:29:EB:D1:57:46:4E:60:3E:31:B9:97:B2:BF:AF
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/hlXzXwqfKevRV0ZOYD4xuZeyv68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.80.0/22
Signature Algorithm: sha256WithRSAEncryption
37:31:51:17:09:64:0e:ec:fc:4f:65:05:0c:21:6f:a5:b8:c3:
51:73:e8:3b:91:5f:6d:f5:83:2c:c6:6d:3a:22:f8:e1:5f:e2:
55:d9:a8:32:d6:56:81:ea:00:78:84:17:50:f1:9e:67:ff:04:
df:aa:06:e7:62:9f:f6:a3:51:a4:47:5f:5f:dd:77:18:67:ab:
b7:b7:f3:a4:65:01:e3:10:01:0a:cd:e8:df:60:26:59:21:58:
92:c6:ed:f2:9e:b0:49:12:db:e4:97:42:ff:2a:34:8c:0d:1b:
68:94:cb:ee:a5:1f:5e:d5:7f:4f:e8:8c:18:19:fe:f8:10:58:
af:19:7e:d1:5a:9e:da:ed:94:41:3b:44:1e:a5:6e:18:8c:ae:
0f:14:bf:c6:c8:fc:bb:5d:fc:6a:ea:07:09:43:96:e6:78:7f:
0b:55:7a:d3:8d:d8:d4:92:7c:d6:08:71:7f:f0:43:47:8b:b7:
cf:71:c3:cd:63:19:14:7f:4b:d5:0f:23:be:9f:c3:f4:87:c0:
42:19:da:f0:66:ea:1b:d2:73:99:83:e3:2f:5c:6b:73:ae:3d:
94:94:f1:e9:15:2d:95:ce:86:d1:b2:77:e6:77:af:76:7a:e2:
6a:a8:a8:5c:1c:f9:46:97:59:19:d6:70:2a:5e:57:17:56:3c:
fc:e7:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:32 2026 by rpki-client