Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Bky8bwdPPHftYZBN-ihst0Pow_M.roa
File: Bky8bwdPPHftYZBN-ihst0Pow_M.roa (raw, json)
Hash identifier: dU49KimIgfxMRZLBIY0/XK926Z/Ez4QuK4njGhOd3IU=
Subject key identifier: 06:4C:BC:6F:07:4F:3C:77:ED:61:90:4D:FA:28:6C:B7:43:E8:C3:F3
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019DEDAC5BCFFC81AA7B717EA87283C8BC87
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Bky8bwdPPHftYZBN-ihst0Pow_M.roa
Signing time: Sun 03 May 2026 11:49:49 +0000
ROA not before: Sun 03 May 2026 11:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.237.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:ac:5b:cf:fc:81:aa:7b:71:7e:a8:72:83:c8:bc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: May 3 11:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=064cbc6f074f3c77ed61904dfa286cb743e8c3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:5b:fa:29:ac:8b:c8:41:d8:3f:cd:7e:77:
b7:a3:65:5c:a9:5c:d8:27:37:f1:2d:52:e1:7b:b6:
31:ee:fd:fe:0f:b7:de:d0:99:5a:67:6c:fc:08:a5:
43:77:14:e9:dc:52:18:ee:ff:58:c5:00:14:50:91:
1a:2a:87:fb:54:8b:f6:02:36:0d:e2:b0:37:d0:67:
81:72:41:57:dc:76:96:10:d9:8f:30:ea:d7:2a:a6:
5c:2e:11:dc:0b:f4:07:7d:e7:bd:a7:c8:8d:e9:15:
2c:88:fe:a5:eb:a4:61:c9:ad:e2:04:92:d6:f8:59:
d2:38:f1:f9:89:e5:52:fe:a6:48:a1:4c:bc:21:89:
57:b4:74:f5:e2:0f:20:f0:5a:e3:30:e2:c2:a3:fa:
79:ee:08:6e:04:6b:f1:d0:a3:f8:12:65:8a:48:a9:
2b:f8:42:64:5f:b0:67:d7:08:27:36:09:fd:89:70:
0f:9b:76:95:97:13:3f:c7:f5:64:fd:90:08:15:f7:
bd:8a:97:fe:86:b4:0c:64:c9:a1:2a:33:18:44:8f:
24:4e:6a:0d:98:61:6e:5c:a0:8e:48:88:e4:9f:ee:
64:e6:13:cd:62:ce:8c:94:0c:64:1f:5b:c5:fa:99:
f0:7e:e0:ff:17:47:ef:15:91:68:63:a2:b8:2d:3c:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:BC:6F:07:4F:3C:77:ED:61:90:4D:FA:28:6C:B7:43:E8:C3:F3
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Bky8bwdPPHftYZBN-ihst0Pow_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b4:b8:d9:62:cc:07:cd:80:b5:77:a9:8f:ae:c1:5b:ad:d2:
13:56:95:32:ba:d2:93:ec:e0:2d:81:ae:47:72:f1:60:cc:3e:
9f:51:8e:ca:8c:18:14:22:e6:34:7f:d7:8d:60:20:2b:1b:46:
c0:a8:42:fe:52:6d:0b:51:da:81:47:4a:2a:f2:94:cc:01:45:
62:85:71:7c:4e:b8:f2:bb:f8:69:67:52:83:0b:84:dd:28:c0:
30:cc:22:50:dd:4c:d8:53:40:8f:74:30:f0:b9:69:b4:5b:31:
30:39:d5:e2:c9:df:17:8e:1d:ab:9e:00:c5:01:22:24:9f:2a:
eb:4d:aa:a2:54:1d:44:93:2c:d3:f1:37:d8:54:10:b7:53:fa:
51:68:0a:2a:18:8a:81:c5:e0:63:a6:68:32:27:50:b6:3c:a1:
87:f9:47:f4:79:b7:fd:49:13:81:33:7d:60:81:0f:12:2b:1c:
76:93:27:f2:b0:12:3c:d2:f1:8a:f0:e5:f3:4b:7d:c7:a3:d6:
09:4d:2d:b6:04:87:76:48:b1:bd:91:1e:e9:85:b1:82:80:a3:
f3:08:be:bd:85:96:62:63:9a:c5:9c:e6:4a:4e:e4:72:50:60:
ae:36:5d:99:e5:cd:5f:01:1c:7c:67:16:fb:c9:62:b1:74:4c:
48:af:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:55 2026 by rpki-client