Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/aBDyjGwrCdw0ZsAF6gxxWeltN2s.roa
File: aBDyjGwrCdw0ZsAF6gxxWeltN2s.roa (raw, json)
Hash identifier: hGBycryJxp+iPydgXu2M5eiw9T7WQoHfG6US6MutSqk=
Subject key identifier: 68:10:F2:8C:6C:2B:09:DC:34:66:C0:05:EA:0C:71:59:E9:6D:37:6B
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 019FACB693B712A3E484A66149A7350AC214
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/aBDyjGwrCdw0ZsAF6gxxWeltN2s.roa
Signing time: Wed 29 Jul 2026 07:11:14 +0000
ROA not before: Wed 29 Jul 2026 07:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57789
IP address blocks: 31.135.192.0/20 maxlen: 24
185.23.7.0/24 maxlen: 24
185.127.120.0/24 maxlen: 24
185.127.121.0/24 maxlen: 24
2a0e:64c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:b6:93:b7:12:a3:e4:84:a6:61:49:a7:35:0a:c2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Jul 29 07:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6810f28c6c2b09dc3466c005ea0c7159e96d376b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:c5:97:b2:67:cb:1e:d9:fc:10:02:ef:98:
a7:db:75:f6:85:00:7d:88:ba:0c:a9:50:d1:c3:99:
11:6c:b0:a8:b4:a9:2c:7a:f5:a0:f7:ef:b0:fe:07:
fe:5f:35:16:2a:bd:16:e2:6b:12:0a:07:76:5a:68:
70:02:7b:1e:c3:54:c4:41:d9:26:19:64:8a:68:f1:
ae:64:e2:8a:ec:01:2a:da:0e:26:c7:31:df:0a:a5:
df:c4:a9:4e:55:c1:a4:5b:12:43:14:57:de:c0:8f:
2d:ab:a5:7f:08:e3:dc:f2:b7:5e:ec:47:24:91:ec:
5e:9a:99:b8:9f:65:fc:14:dc:09:55:19:7c:8e:e7:
6a:58:d1:20:cf:d5:2f:c7:47:cf:5d:2c:6a:7d:14:
55:b0:ac:c2:50:f6:23:14:6b:b5:ab:74:d4:ed:37:
b8:00:df:ab:2f:9e:6e:44:f8:40:56:77:3a:6c:87:
c1:97:9c:c7:75:c4:f2:d9:57:5b:8d:15:ff:3e:b4:
b0:60:70:d0:f5:be:d2:e0:6d:17:ce:d1:e7:2a:c9:
7b:e7:b7:6d:42:54:52:95:99:c5:3b:80:23:ef:1c:
48:29:b2:ca:58:d9:26:da:ec:f1:8d:2c:ac:e3:56:
74:62:df:aa:60:27:64:35:06:e9:45:aa:f7:4e:af:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:F2:8C:6C:2B:09:DC:34:66:C0:05:EA:0C:71:59:E9:6D:37:6B
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/aBDyjGwrCdw0ZsAF6gxxWeltN2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.192.0/20
185.23.7.0/24
185.127.120.0/23
IPv6:
2a0e:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:32:88:41:b2:05:e0:f8:bd:19:b9:82:cb:81:5e:c9:15:5c:
41:10:b7:25:21:64:28:60:0b:a8:39:cf:a3:d5:99:70:94:67:
8a:e1:b4:8f:86:81:cb:fc:8a:58:71:83:fa:f0:f1:69:c5:64:
4e:8a:42:44:2c:1a:29:9a:12:67:7f:d2:2a:b8:5f:6b:b6:7f:
2a:88:03:73:36:bb:5c:57:10:79:0b:b2:6e:c6:1e:c8:28:df:
e2:f2:83:77:2f:3b:d7:4f:65:77:1b:ce:15:d3:57:b3:e3:c3:
8d:74:55:02:ac:1f:80:2d:46:3c:5a:15:07:b6:b8:8d:f5:9a:
4c:e5:2d:00:f8:a5:cb:2f:8d:aa:81:07:13:e1:95:26:93:7d:
a8:4e:e4:3b:cf:6f:b2:b6:bf:24:90:9c:18:dd:e0:71:1c:8f:
6f:4e:e0:84:95:98:6e:a3:2c:fd:e0:a7:c8:10:91:a3:6a:9f:
26:88:6f:e3:32:90:d4:72:08:4f:64:ba:0b:7e:f8:9c:fa:65:
f2:21:f6:74:31:ea:23:84:dc:34:7b:f2:d3:89:99:0d:55:46:
f0:57:63:35:fa:e8:1d:b5:0c:dc:a2:07:69:56:66:ee:64:55:
03:c6:b6:e6:2a:2c:ea:a0:3f:93:a8:5b:89:fe:d8:bb:44:b1:
45:9a:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:39:07 2026 by rpki-client