Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D0KZHVltf2dV66_mlD_KjD9wLmE.roa
File: D0KZHVltf2dV66_mlD_KjD9wLmE.roa (raw, json)
Hash identifier: L2pQGyNaWPYuYQWxBulEtkSmWalEhoV2PzyX9eb2RuA=
Subject key identifier: 0F:42:99:1D:59:6D:7F:67:55:EB:AF:E6:94:3F:CA:8C:3F:70:2E:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0F6E3319A0D16643F17AEFEAD8ED87F07
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D0KZHVltf2dV66_mlD_KjD9wLmE.roa
Signing time: Thu 01 Oct 2026 09:54:39 +0000
ROA not before: Thu 01 Oct 2026 09:54:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61071
IP address blocks: 85.217.164.0/23 maxlen: 32
85.217.176.0/22 maxlen: 24
85.217.180.0/24 maxlen: 24
87.120.246.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e3:31:9a:0d:16:64:3f:17:ae:fe:ad:8e:d8:7f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 1 09:54:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f42991d596d7f6755ebafe6943fca8c3f702e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:fa:2e:4a:db:8e:ed:99:c0:6e:09:46:05:
6f:ee:a9:8c:44:a5:cf:97:23:64:cb:09:4a:3e:db:
89:44:af:08:97:38:50:83:16:c8:4b:e8:05:ea:ea:
48:35:a6:ae:22:b0:bd:37:63:cb:ba:ea:ff:03:d6:
8c:02:51:0e:8c:b0:55:78:f6:0a:b4:ec:41:16:63:
c7:bf:33:7a:80:16:63:72:2d:4b:4d:bc:61:c4:e6:
86:0b:bd:d9:34:e5:5f:b7:9c:ff:a9:ce:f6:0e:9b:
76:a9:0d:a3:0b:28:14:88:47:37:e5:d3:ee:60:f3:
8f:3f:64:c4:71:35:7f:6a:51:d5:79:05:99:01:1a:
72:ba:9c:60:7e:83:b2:05:0d:24:31:0c:99:a2:15:
b5:b4:5d:f1:8e:fe:81:1f:b1:65:02:81:69:77:d3:
d1:28:a9:ef:b5:9c:0f:05:e9:98:3a:e6:5b:8a:11:
98:e2:af:7c:ab:0c:da:cc:95:94:e9:d6:f0:b4:b2:
bd:d5:73:8d:d9:46:85:c8:79:d2:a8:d4:77:b6:e8:
a4:56:40:c5:fc:4b:0b:61:8e:1f:50:7f:b2:cc:b2:
87:0d:fc:a0:30:26:14:e3:2c:25:7f:ca:34:54:d4:
c5:ae:4b:21:32:a6:c7:c1:9b:52:8c:5c:24:af:cd:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:42:99:1D:59:6D:7F:67:55:EB:AF:E6:94:3F:CA:8C:3F:70:2E:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D0KZHVltf2dV66_mlD_KjD9wLmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.164.0/23
85.217.176.0-85.217.180.255
87.120.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:17:43:11:36:52:b0:b0:ef:bf:d9:cc:09:14:40:b8:e5:cb:
0b:7e:e4:5f:62:77:f3:c2:25:8d:44:47:a4:3a:52:ed:11:3c:
47:8c:32:ab:a2:4b:18:fc:8f:71:6a:ef:79:f5:da:b9:6f:e9:
ae:0d:bd:ce:d2:b6:01:00:26:ca:44:2a:f7:35:f5:e8:71:e8:
2e:10:82:f9:26:34:2d:0e:98:fc:00:13:65:e3:a4:24:cf:af:
c4:a0:43:8d:2b:20:3c:f7:ee:b2:12:4a:7f:98:ef:21:e7:17:
a9:35:c5:80:34:de:70:d8:4f:e0:bc:cc:f4:ce:ee:b3:56:67:
51:0d:62:eb:73:31:97:c3:a2:42:c8:38:45:41:56:fa:d7:b2:
d0:09:ec:78:53:cc:2d:cf:15:4b:03:73:d6:f1:01:24:96:e0:
a7:2b:88:c7:02:ab:dc:ae:b7:74:d5:eb:39:ca:25:56:4c:e5:
c3:7d:4b:81:19:9c:c4:66:b5:bd:2e:ea:20:d7:91:2f:55:f7:
f9:47:b7:8f:f7:39:2f:8c:70:05:dc:d7:af:d5:82:71:70:fe:
22:10:93:b1:43:a0:e7:63:3f:b5:7b:f3:4c:d9:93:8d:5b:d9:
71:72:9a:1f:29:d5:31:46:af:7b:ce:fb:9d:28:53:c8:2d:1e:
1b:e1:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:36:38 2026 by rpki-client