Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/exbERZ2VE3H_IUCLP_voeLboHP0.roa
File: exbERZ2VE3H_IUCLP_voeLboHP0.roa (raw, json)
Hash identifier: JPKk8iUpWJU1p64IlQPmjoNyJZy0+8MtOgNIjDKxPyA=
Subject key identifier: 7B:16:C4:45:9D:95:13:71:FF:21:40:8B:3F:FB:E8:78:B6:E8:1C:FD
Certificate issuer: /CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Certificate serial: 019F23688AC3255F16AB1BD13131EC25B721
Authority key identifier: 45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/exbERZ2VE3H_IUCLP_voeLboHP0.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198682
IP address blocks: 185.87.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8a:c3:25:5f:16:ab:1b:d1:31:31:ec:25:b7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b16c4459d951371ff21408b3ffbe878b6e81cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:39:94:b7:03:ac:36:75:5c:99:43:5d:7a:
c8:7e:25:24:7d:a2:c2:1b:0d:39:8a:0f:be:3d:0c:
32:27:95:c7:d3:10:a5:ad:50:75:8e:9d:4c:87:0a:
20:b8:dc:36:ef:34:c9:7b:c3:2e:9d:81:f6:d1:2e:
84:fc:7a:19:7d:4d:0b:63:fd:ed:61:d0:d0:fb:e4:
21:64:24:2c:0e:00:f8:8b:96:e7:64:31:71:0c:9e:
96:a4:38:6a:ab:d9:d6:e2:ce:d1:ce:e5:63:1d:cc:
30:b6:58:a3:eb:5c:ee:02:ff:b6:0b:77:49:b4:0b:
d3:e4:0b:89:e5:17:e6:9c:64:0c:c6:38:0a:52:e5:
2e:17:37:cb:7b:ef:31:9d:57:43:7a:7c:be:00:b3:
8a:60:66:29:18:fb:71:5d:90:b4:ac:3b:c4:93:89:
f4:f1:71:f2:13:f4:2f:29:f8:40:f2:dc:50:f2:cf:
c3:1b:fc:0d:6e:41:1d:45:20:55:a4:68:5d:b3:43:
27:d6:9b:b4:6c:78:26:be:09:fc:57:f9:1f:03:c4:
b6:a9:8e:00:1d:8e:32:b3:d5:37:0b:5a:f5:72:d8:
49:47:73:0e:eb:4d:fe:26:d0:98:b2:69:03:99:ad:
64:b7:de:47:29:25:b2:59:ff:94:70:64:fa:ea:cc:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:16:C4:45:9D:95:13:71:FF:21:40:8B:3F:FB:E8:78:B6:E8:1C:FD
X509v3 Authority Key Identifier:
keyid:45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/exbERZ2VE3H_IUCLP_voeLboHP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.64.0/22
Signature Algorithm: sha256WithRSAEncryption
87:c5:b8:7f:ab:fe:0a:16:e8:84:cb:98:fb:64:4a:b8:50:a9:
c3:3d:a1:b7:55:97:0a:03:95:b8:54:68:60:b8:57:3c:de:a8:
54:c6:13:49:cf:46:aa:47:d2:3d:ae:1c:be:90:90:08:96:e8:
86:dd:d7:38:e6:2e:1f:ea:fa:c7:fe:a0:99:50:94:d7:62:99:
d1:c2:a0:fc:1f:2c:fb:4b:e8:91:b3:4e:28:25:a6:06:e7:50:
0f:19:e8:91:09:54:92:83:38:26:ba:42:e3:e0:79:12:9f:36:
6f:7b:1f:37:34:ce:c3:6e:0c:3f:f2:be:13:05:50:88:ec:e1:
1c:92:5a:d3:8f:ae:79:70:35:34:93:de:ef:e1:98:76:fd:1a:
7a:4a:35:4d:f7:59:6d:d5:50:fc:e3:ff:ba:f4:66:b5:c5:fd:
e2:06:de:50:2b:76:e5:43:d1:7f:c4:60:28:6e:80:26:0b:36:
e9:39:cc:a7:0b:22:31:bf:10:a8:2f:05:93:a9:df:2f:cf:3d:
ef:65:a1:33:f4:59:2b:db:fe:6c:92:02:65:c8:eb:2c:f6:cb:
9a:b3:4b:f5:42:1a:48:06:4b:de:f6:d3:03:d0:11:e3:2c:e7:
a7:2c:eb:a4:56:30:e0:f5:5e:83:0e:30:87:09:05:cd:1d:8d:
b2:bf:18:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaIrDJV8WqxvRMTHsJbchMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MmIwZTRkMzI5MGJiZTkwNDcwNzNhZTZiZjdmNzFhMjkz
YWQyZmEwHhcNMjYwNzAyMTUxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjE2YzQ0NTlkOTUxMzcxZmYyMTQwOGIzZmZiZTg3OGI2ZTgxY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kg5lLcDrDZ1XJlDXXrIfiUkfaLC
Gw05ig++PQwyJ5XH0xClrVB1jp1MhwoguNw27zTJe8MunYH20S6E/HoZfU0LY/3t
YdDQ++QhZCQsDgD4i5bnZDFxDJ6WpDhqq9nW4s7RzuVjHcwwtlij61zuAv+2C3dJ
tAvT5AuJ5RfmnGQMxjgKUuUuFzfLe+8xnVdDeny+ALOKYGYpGPtxXZC0rDvEk4n0
8XHyE/QvKfhA8txQ8s/DG/wNbkEdRSBVpGhds0Mn1pu0bHgmvgn8V/kfA8S2qY4A
HY4ys9U3C1r1cthJR3MO603+JtCYsmkDma1kt95HKSWyWf+UcGT66szWPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHsWxEWdlRNx/yFAiz/76Hi26Bz9MB8GA1UdIwQY
MBaAFEUrDk0ykLvpBHBzrmv39xopOtL6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNzT1RUS1F1LWtFY0hPdWFfZjNHaWs2MHZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt
ODA0YzQ2NzkwOTNmLzEvZXhiRVJaMlZFM0hfSVVDTFBfdm9lTGJvSFAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm
LzEvUlNzT1RUS1F1LWtFY0hPdWFfZjNHaWs2MHZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVdAMA0G
CSqGSIb3DQEBCwUAA4IBAQCHxbh/q/4KFuiEy5j7ZEq4UKnDPaG3VZcKA5W4VGhg
uFc83qhUxhNJz0aqR9I9rhy+kJAIluiG3dc45i4f6vrH/qCZUJTXYpnRwqD8Hyz7
S+iRs04oJaYG51APGeiRCVSSgzgmukLj4HkSnzZvex83NM7Dbgw/8r4TBVCI7OEc
klrTj655cDU0k97v4Zh2/Rp6SjVN91lt1VD84/+69Ga1xf3iBt5QK3blQ9F/xGAo
boAmCzbpOcynCyIxvxCoLwWTqd8vzz3vZaEz9Fkr2/5skgJlyOss9suas0v1QhpI
Bkve9tMD0BHjLOenLOukVjDg9V6DDjCHCQXNHY2yvxij
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:00 2026 by rpki-client