Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/fZc85iYki7_TA9d3ZLKIvDIo01U.roa
File: fZc85iYki7_TA9d3ZLKIvDIo01U.roa (raw, json)
Hash identifier: K+rKoIjKGnK/y+UT2HAY6NqeaibCmdTHERcABQrSICk=
Subject key identifier: 7D:97:3C:E6:26:24:8B:BF:D3:03:D7:77:64:B2:88:BC:32:28:D3:55
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A15CA6712AB6E03925D482E36FE6CA4602
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/fZc85iYki7_TA9d3ZLKIvDIo01U.roa
Signing time: Wed 21 Oct 2026 04:09:34 +0000
ROA not before: Wed 21 Oct 2026 04:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6475
IP address blocks: 85.222.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:a6:71:2a:b6:e0:39:25:d4:82:e3:6f:e6:ca:46:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 21 04:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d973ce626248bbfd303d77764b288bc3228d355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:ab:ec:4f:61:10:e8:89:61:ce:8c:5d:5a:
a1:5c:83:c1:0b:78:0f:97:82:29:d4:46:04:5d:48:
32:bc:f3:3c:17:3f:b9:c4:32:22:fd:9d:7a:5c:3a:
b0:c6:d4:ed:32:ac:d5:65:f9:68:bd:8b:91:2e:80:
e4:91:7a:79:fd:a1:51:be:78:ac:32:7c:70:63:ca:
d0:ce:bc:ff:b3:2e:bc:0b:43:f0:66:43:86:6a:8e:
d9:43:e7:95:5e:bc:34:48:9c:b0:69:c0:03:73:99:
fe:7e:39:4c:0a:11:67:bb:c0:44:5b:0c:32:b9:a5:
8b:89:03:b2:dd:eb:8c:74:49:c7:85:2f:c3:82:e8:
0c:d0:b2:a0:c3:a3:6f:28:20:f5:13:18:45:91:6b:
64:c2:6b:d1:03:70:ed:2f:82:cb:ce:eb:f9:9c:60:
0f:4d:22:4b:c2:75:aa:1b:6a:40:73:5e:c6:c2:ed:
42:34:7f:54:61:38:8a:8d:eb:f7:3b:c0:38:a0:a2:
be:34:bb:b9:72:9c:82:9c:47:90:cd:fe:a8:ff:0e:
33:83:3a:cd:3f:24:a7:81:c1:6a:cb:83:fa:4c:af:
b6:6c:e3:ac:46:a5:ce:28:84:a6:96:a5:74:6f:66:
27:40:58:0f:78:03:c4:23:e3:1d:34:c8:0e:c2:12:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:97:3C:E6:26:24:8B:BF:D3:03:D7:77:64:B2:88:BC:32:28:D3:55
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/fZc85iYki7_TA9d3ZLKIvDIo01U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.199.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:63:2a:0e:40:5b:76:00:2c:9c:c9:8e:d2:f5:f6:c3:56:1e:
32:dc:c5:99:c0:f1:16:7b:04:ca:c6:5c:d3:3b:35:25:97:2d:
0a:ee:9c:88:73:7e:ec:0d:eb:2e:1e:50:08:10:46:79:18:48:
c5:64:e6:cf:36:f1:e9:55:96:3c:ea:e3:b6:e7:60:89:c9:af:
15:c0:f1:d2:f2:d9:4d:3f:63:ac:c8:3b:d3:73:88:1a:3c:43:
58:b5:6c:62:2c:03:04:4b:69:7a:13:30:67:d2:74:c0:c6:13:
3b:6e:39:31:fc:6b:89:47:7a:95:f0:dc:da:80:1b:5b:b2:bc:
24:51:6e:a0:bc:b7:1d:49:a7:9b:6c:6c:a1:3c:ea:2c:84:1b:
8d:a0:9d:39:fd:0f:05:e5:92:6e:61:fc:e5:53:9d:e2:e7:70:
49:1d:2b:35:53:df:4c:1b:dc:a9:5d:af:66:9b:76:8c:67:2a:
c7:80:47:3c:e1:57:10:6e:91:14:ca:d5:1d:7b:a6:1e:b9:5e:
ca:88:6d:43:52:9d:cb:0f:4b:97:2d:02:83:cd:89:6f:00:6c:
96:b8:be:a5:26:5e:21:61:01:ab:68:5d:8c:07:8f:88:16:fc:
ac:b4:ec:90:9a:3f:31:6f:f6:20:32:64:0d:72:6e:b6:16:0b:
ea:82:f2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:23 2026 by rpki-client