Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PSK4KjxBfhZHZ0no1itq1HDO3AQ.roa
File: PSK4KjxBfhZHZ0no1itq1HDO3AQ.roa (raw, json)
Hash identifier: 1vo6Uu7pNZD1vGwkbhXpg0hrZrh/uGWotgfPx5+5PeU=
Subject key identifier: 3D:22:B8:2A:3C:41:7E:16:47:67:49:E8:D6:2B:6A:D4:70:CE:DC:04
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A057F95759EFAF8BF7CEBB6C81ECB7B596
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PSK4KjxBfhZHZ0no1itq1HDO3AQ.roa
Signing time: Mon 31 Aug 2026 13:19:13 +0000
ROA not before: Mon 31 Aug 2026 13:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216039
IP address blocks: 85.217.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 13:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:f9:57:59:ef:af:8b:f7:ce:bb:6c:81:ec:b7:b5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 31 13:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d22b82a3c417e16476749e8d62b6ad470cedc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:33:a9:69:39:61:a9:aa:4e:a4:ff:a1:d2:
25:65:22:f1:3e:6b:0d:21:38:d7:14:2e:72:f3:8c:
dd:36:d8:b3:33:0d:13:79:23:4c:8a:ce:a9:d5:38:
98:56:78:1d:9f:2b:06:24:de:22:1c:e0:8d:52:de:
0b:76:38:85:e2:f1:cb:44:4a:31:cd:86:54:ee:c1:
bb:7a:6f:d1:1a:59:c9:9a:f3:88:77:d3:ca:d8:65:
9e:26:80:3a:f2:f2:d1:46:0b:a5:48:cc:51:41:fe:
32:1e:2c:1f:d1:59:50:ca:2e:0d:fc:ce:74:c4:81:
67:11:12:82:1a:87:8e:66:61:8a:3e:06:55:61:c3:
e1:92:8d:ac:55:94:7d:a5:79:20:05:56:b0:38:c9:
c7:93:da:0c:0c:68:be:5e:f2:c1:1e:8c:f5:aa:49:
fc:a1:0c:23:8a:aa:2f:13:9a:74:64:0e:1e:cb:20:
c6:6c:41:6d:2d:f6:52:d1:ea:0a:d4:ac:e1:b6:d0:
d3:6b:f1:da:54:38:d5:77:d9:c9:0f:0c:88:22:b9:
93:81:f0:70:8f:ff:56:45:26:0a:30:b9:df:ca:86:
f4:7b:02:dc:5a:28:06:08:42:2c:b1:54:7b:b5:98:
66:e7:65:73:d7:77:f5:0f:2f:bb:0b:dc:80:26:6c:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:B8:2A:3C:41:7E:16:47:67:49:E8:D6:2B:6A:D4:70:CE:DC:04
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PSK4KjxBfhZHZ0no1itq1HDO3AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.166.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a0:4b:2a:da:35:16:af:df:64:72:4d:39:41:36:6c:89:13:
f3:3c:2d:f6:73:c9:5c:83:1e:c0:29:e8:1e:91:35:b7:ec:bd:
14:46:2c:f5:7b:cf:83:b7:86:4e:87:4f:3e:9e:fa:a8:3c:9d:
43:21:a4:81:48:f4:52:2f:b0:1d:f7:9e:d5:60:07:1f:67:8d:
d6:05:42:fb:58:a3:75:89:23:1f:26:13:af:cb:b0:78:67:62:
6c:ba:3b:96:5f:c5:cf:61:38:fb:2c:e3:42:29:7a:46:9b:a2:
8a:1b:44:dc:ad:98:e7:5e:bf:92:57:31:df:a4:5f:9d:bf:93:
e0:13:3a:fd:9a:18:15:ef:2c:31:c8:65:b6:cb:3a:76:e2:e0:
f1:a8:5d:93:8b:ba:03:ba:68:54:86:84:0e:92:67:f3:6d:03:
5d:54:84:b6:99:5d:89:aa:8a:83:2d:27:f2:e2:b3:16:3e:86:
6d:4d:5e:f3:a7:ff:e3:2c:32:dc:c7:31:a2:e7:0e:cc:dc:9d:
97:2b:9c:36:f5:87:8e:71:ba:6f:fd:f6:a4:67:6e:e8:0d:1f:
e4:26:61:dd:4b:b2:62:19:94:89:af:35:8e:94:2a:29:86:e5:
c3:f7:46:12:c7:fc:00:c4:80:ca:5f:b9:ee:0d:d8:38:94:1b:
05:35:e6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 18:22:02 2026 by rpki-client