Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/75yqge0Mas1_d8DNK85PjPxD8u0.roa
File: 75yqge0Mas1_d8DNK85PjPxD8u0.roa (raw, json)
Hash identifier: 5ohJJRrInpgTC+nJEF4e2/DApexQWvpHtnFConEwEDo=
Subject key identifier: EF:9C:AA:81:ED:0C:6A:CD:7F:77:C0:CD:2B:CE:4F:8C:FC:43:F2:ED
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 01A14960AB5F9D39F97CEABF849D207CD7A2
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/75yqge0Mas1_d8DNK85PjPxD8u0.roa
Signing time: Sat 17 Oct 2026 10:20:34 +0000
ROA not before: Sat 17 Oct 2026 10:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21472
IP address blocks: 185.98.214.0/23 maxlen: 23
185.98.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:60:ab:5f:9d:39:f9:7c:ea:bf:84:9d:20:7c:d7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Oct 17 10:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef9caa81ed0c6acd7f77c0cd2bce4f8cfc43f2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:1a:88:a4:bc:41:49:e6:10:62:b4:e2:35:
7a:c8:9e:11:2e:62:0e:7f:6e:43:ad:60:5b:61:58:
75:75:54:b3:0e:22:ca:43:5d:c7:8b:ac:09:a0:87:
07:8b:bc:39:f3:53:3d:4e:dd:8c:9a:80:88:6b:7b:
82:e5:f1:b8:da:6f:91:c4:21:74:dd:3e:98:7e:db:
9f:f9:e3:17:6f:4c:d5:39:cd:90:10:1f:28:05:dd:
85:c4:e9:54:99:7a:d3:e7:c0:14:0c:8e:7c:c4:c3:
b4:a2:92:5a:41:fc:69:a7:a9:f0:43:66:7a:0c:ec:
d0:46:5c:8f:a8:1e:04:f7:b3:42:93:6d:d5:b3:ee:
ae:41:a5:40:62:da:df:78:6d:4d:9e:24:8c:a8:ff:
06:21:f2:77:e7:74:d7:0e:20:2f:f9:9f:d3:94:66:
49:4f:20:6c:eb:4c:ea:9a:17:60:c3:d8:1b:9c:b4:
cd:00:3d:49:d6:e7:88:7b:0b:7a:88:82:57:6d:0c:
be:e8:e2:47:4a:b2:f3:e1:3a:85:b2:4f:0d:c6:74:
de:30:13:ff:6d:30:f3:66:f4:25:4c:f5:d0:07:f3:
b6:cc:2d:f1:5d:9c:b6:33:00:88:47:ed:f9:5e:e5:
0c:42:54:fe:d1:81:49:42:c6:c7:a5:9f:21:fe:39:
99:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9C:AA:81:ED:0C:6A:CD:7F:77:C0:CD:2B:CE:4F:8C:FC:43:F2:ED
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/75yqge0Mas1_d8DNK85PjPxD8u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.214.0/23
Signature Algorithm: sha256WithRSAEncryption
81:b4:09:b3:82:48:9f:94:4d:8e:3b:c3:7a:89:d3:8f:df:2d:
d5:43:84:40:e1:6b:a0:fd:3d:c2:e1:d9:41:45:b5:c5:59:8e:
c2:47:60:76:6c:b7:72:67:87:1c:19:18:aa:ad:0e:0c:26:50:
4e:42:72:dc:69:86:13:31:7d:ba:ef:9d:95:67:01:be:62:83:
4f:e2:ee:5b:a2:fb:a0:63:73:9e:b7:91:06:db:15:49:c2:a9:
a0:d4:9e:75:34:76:70:af:7a:bb:b1:30:4e:22:3a:6c:8c:6f:
27:96:13:36:23:85:3e:e5:1f:3e:69:91:2f:85:15:c7:b8:37:
4c:0e:7e:71:15:2c:9c:df:15:8c:3c:29:a1:4c:62:80:71:91:
9e:e2:a3:82:34:fe:68:0c:e6:33:a4:f8:1d:1f:a2:e4:42:f9:
e4:05:97:eb:9a:8e:eb:42:95:a0:50:97:ea:a0:91:d7:86:8f:
df:36:7d:5b:d2:b7:d4:17:88:ac:e8:76:09:d2:fb:95:b5:1a:
50:1f:25:f0:f8:40:cb:b9:0e:70:27:55:f1:d0:e1:f7:a3:ce:
29:76:ef:f3:ac:3d:47:98:ca:d0:25:ca:c4:03:0e:97:2e:27:
2f:8d:a8:30:57:2f:85:ba:a7:a0:70:ea:05:03:1f:85:95:28:
0c:14:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:38:55 2026 by rpki-client