Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ID85426CzGSOYJoEccHaAHPyBRo.roa
File: ID85426CzGSOYJoEccHaAHPyBRo.roa (raw, json)
Hash identifier: Q2RZXyDZ8SLZHzKl0bsBMqCI6fJMus9L2px6vW9BkrM=
Subject key identifier: 20:3F:39:E3:6E:82:CC:64:8E:60:9A:04:71:C1:DA:00:73:F2:05:1A
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019D638AAE0D862C81F46A728611C8D948AB
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ID85426CzGSOYJoEccHaAHPyBRo.roa
Signing time: Mon 06 Apr 2026 16:05:26 +0000
ROA not before: Mon 06 Apr 2026 16:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402268
IP address blocks: 87.232.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:8a:ae:0d:86:2c:81:f4:6a:72:86:11:c8:d9:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 6 16:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=203f39e36e82cc648e609a0471c1da0073f2051a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b8:c1:15:38:5e:14:fd:31:83:c3:ee:1c:81:
c4:1c:9b:e5:a0:07:d0:85:61:15:0a:e0:bb:f8:9f:
4c:9a:1f:39:5c:85:a5:e2:c2:e1:0d:49:5e:44:fa:
dd:a2:31:8e:21:e4:cd:68:1c:03:d7:a2:1b:e1:b1:
78:08:07:44:66:51:71:08:e4:6d:6b:25:3a:1f:07:
b6:eb:54:ba:bf:bd:d1:cf:10:ab:d8:79:2a:cd:12:
6c:ed:1c:d4:1d:b8:5f:71:2c:26:11:70:1a:b4:76:
cc:22:39:25:cb:46:ac:0d:48:b3:74:3b:9c:91:1c:
af:6c:f0:2e:04:e3:ce:3d:12:40:81:dd:0f:21:9b:
2b:0a:43:8e:3b:6c:7b:30:39:9e:20:4b:3d:56:a4:
51:7f:c5:a7:37:41:9f:b2:2f:8f:37:1e:e6:e8:1b:
1d:ae:86:71:63:34:8e:92:d4:53:e2:10:69:2c:83:
a6:8a:71:3b:3a:91:7f:0f:8f:4f:d7:c6:a0:de:65:
20:65:c5:ff:03:9f:b3:9b:2e:34:d2:cf:da:87:df:
13:01:87:55:1f:c0:09:84:96:4b:dc:f6:a5:53:12:
c4:97:26:44:11:da:3c:76:66:64:ef:10:00:28:49:
03:ff:8d:40:f1:ca:b0:24:58:33:e6:32:d4:89:1a:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3F:39:E3:6E:82:CC:64:8E:60:9A:04:71:C1:DA:00:73:F2:05:1A
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ID85426CzGSOYJoEccHaAHPyBRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:8d:d4:76:73:a2:73:68:e8:5e:d2:91:b7:96:d5:1c:d2:44:
40:7f:f1:50:d9:0f:c8:f2:cb:44:d4:bb:f4:22:19:23:dc:eb:
53:77:e9:db:7b:0e:55:d0:9e:a1:63:65:88:31:54:92:23:50:
7a:e0:74:8f:7d:f7:9a:a6:06:30:ac:c3:2f:d0:21:84:b5:df:
e7:3f:67:d2:69:d1:20:45:bf:d4:a8:69:f7:da:4b:c1:5f:a5:
3a:e5:e0:b7:05:5d:99:85:05:b8:b8:fe:7c:1d:0d:37:df:27:
33:c9:b1:b8:bd:be:6e:01:0a:46:37:16:79:28:ce:61:45:73:
b3:a4:9c:02:96:2c:25:a6:8a:e5:41:95:92:11:d8:75:76:45:
d3:4a:40:9a:5d:94:16:76:6c:6d:9c:a2:8e:45:b7:a3:a1:6a:
63:5d:36:b2:9f:6a:d9:4d:b5:07:8f:0b:2e:70:f6:1b:7f:64:
bb:8d:98:ad:67:fa:f4:c4:02:6e:e7:f0:df:55:93:39:aa:bc:
92:dc:9f:27:ff:9e:07:ee:ef:98:3d:e4:c6:a3:80:11:3f:8c:
be:02:6b:34:00:f9:02:54:4e:1c:fc:b5:e1:53:65:98:f7:13:
ed:0f:e2:05:1d:b5:89:93:08:1a:da:95:be:a5:c9:b2:f0:1c:
e8:54:44:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1jiq4NhiyB9GpyhhHI2UirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjYwNDA2MTYwNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDNmMzllMzZlODJjYzY0OGU2MDlhMDQ3MWMxZGEwMDczZjIwNTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57jBFTheFP0xg8PuHIHEHJvloAfQ
hWEVCuC7+J9Mmh85XIWl4sLhDUleRPrdojGOIeTNaBwD16Ib4bF4CAdEZlFxCORt
ayU6Hwe261S6v73RzxCr2HkqzRJs7RzUHbhfcSwmEXAatHbMIjkly0asDUizdDuc
kRyvbPAuBOPOPRJAgd0PIZsrCkOOO2x7MDmeIEs9VqRRf8WnN0Gfsi+PNx7m6Bsd
roZxYzSOktRT4hBpLIOminE7OpF/D49P18ag3mUgZcX/A5+zmy400s/ah98TAYdV
H8AJhJZL3PalUxLElyZEEdo8dmZk7xAAKEkD/41A8cqwJFgz5jLUiRptowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCA/OeNugsxkjmCaBHHB2gBz8gUaMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvSUQ4NTQyNkN6R1NPWUpvRWNjSGFBSFB5QlJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+hwMA0G
CSqGSIb3DQEBCwUAA4IBAQC1jdR2c6JzaOhe0pG3ltUc0kRAf/FQ2Q/I8stE1Lv0
Ihkj3OtTd+nbew5V0J6hY2WIMVSSI1B64HSPffeapgYwrMMv0CGEtd/nP2fSadEg
Rb/UqGn32kvBX6U65eC3BV2ZhQW4uP58HQ033yczybG4vb5uAQpGNxZ5KM5hRXOz
pJwCliwlporlQZWSEdh1dkXTSkCaXZQWdmxtnKKORbejoWpjXTayn2rZTbUHjwsu
cPYbf2S7jZitZ/r0xAJu5/DfVZM5qryS3J8n/54H7u+YPeTGo4ARP4y+Ams0APkC
VE4c/LXhU2WY9xPtD+IFHbWJkwga2pW+pcmy8BzoVEQb
-----END CERTIFICATE-----
Generated at Mon Apr 13 03:38:01 2026 by rpki-client