Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/lI3doMeX--uc42AiUTHF8Lzg2p8.roa
File: lI3doMeX--uc42AiUTHF8Lzg2p8.roa (raw, json)
Hash identifier: nMrRRyfUndPdIPHSUpqrR8N+Jdt1dZ4snL9gDl/brhs=
Subject key identifier: 94:8D:DD:A0:C7:97:FB:EB:9C:E3:60:22:51:31:C5:F0:BC:E0:DA:9F
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236955702E2145852EC25B95D608576F
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/lI3doMeX--uc42AiUTHF8Lzg2p8.roa
Signing time: Thu 02 Jul 2026 15:18:53 +0000
ROA not before: Thu 02 Jul 2026 15:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397451
IP address blocks: 85.204.196.0/23 maxlen: 23
85.204.196.0/24 maxlen: 24
85.204.197.0/24 maxlen: 24
89.46.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:55:70:2e:21:45:85:2e:c2:5b:95:d6:08:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=948ddda0c797fbeb9ce360225131c5f0bce0da9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:17:de:4d:5a:1f:eb:e2:d2:05:f6:dd:a9:
c6:0c:38:bd:32:e5:94:0d:2b:e4:7b:16:5f:c0:57:
e0:74:64:d9:07:f1:01:e4:c3:d9:52:79:3a:b0:b9:
73:91:62:06:03:81:6b:55:2a:c4:05:9a:fd:07:bc:
8c:06:89:47:99:10:11:15:18:e5:e5:ad:0c:6f:75:
a1:b1:60:f3:33:86:ed:c8:d2:1a:69:db:ca:fb:13:
45:b8:cf:dd:7c:6e:16:67:05:9a:a2:a5:ef:66:01:
ca:8f:b5:1c:5f:e1:08:6c:6b:47:58:f3:24:4b:62:
7e:97:55:f7:cc:43:83:4e:6c:02:ae:f3:f3:89:6c:
bd:97:8d:22:22:75:67:0e:71:51:04:93:aa:9b:14:
17:58:73:30:29:97:df:4a:b5:50:d7:fc:45:9d:5d:
56:a5:c4:d3:88:73:78:e1:4e:2f:dd:a6:e6:dc:f8:
00:8b:db:03:45:fd:a1:19:eb:3b:2f:69:07:37:83:
a2:6f:79:07:95:33:79:29:84:23:72:03:a9:03:e1:
21:ca:e1:a4:1a:62:d3:28:76:cb:f7:55:15:20:97:
4a:c8:fa:e0:70:6e:74:52:27:83:26:37:0a:64:57:
5c:f1:6c:71:4c:b4:58:66:3e:76:bc:8b:c4:6b:55:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:DD:A0:C7:97:FB:EB:9C:E3:60:22:51:31:C5:F0:BC:E0:DA:9F
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/lI3doMeX--uc42AiUTHF8Lzg2p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.196.0/23
89.46.112.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:6b:06:36:68:e5:f1:92:81:d0:87:89:c0:83:14:d6:7d:39:
93:74:1d:6e:df:10:18:8d:b5:eb:cf:03:25:88:4f:70:c9:f5:
b6:15:dc:98:b7:04:be:45:70:a7:88:64:ce:79:12:80:37:d5:
d4:00:c2:22:63:0c:a7:ba:d8:29:8c:82:3a:4b:cf:d9:a7:17:
e5:e0:2b:86:99:54:54:a1:66:57:30:66:01:83:da:eb:7d:81:
d7:73:27:f1:c2:f5:6a:3d:69:42:e9:0b:6a:c8:f1:18:bb:7b:
4b:0b:22:11:53:cf:2f:e2:f7:9a:c9:64:b8:81:b9:eb:97:87:
90:f7:90:02:67:d8:45:eb:da:7c:70:71:99:8c:e7:a5:f9:ad:
61:46:3a:91:a6:a7:8a:52:68:85:9a:b5:85:e4:6f:c5:d9:e7:
d9:d2:fe:10:66:32:c3:9c:91:b2:41:4c:c9:ad:2e:2b:9f:4e:
c7:b3:0b:fe:8c:a0:e2:8f:a6:8e:ac:0b:44:a5:31:01:ba:ec:
7a:14:e9:6f:4a:2e:8d:f3:82:69:64:c6:a2:34:09:15:4a:e1:
e6:8a:e7:a1:9a:4c:20:65:d1:3a:f9:3f:15:09:43:b5:79:5a:
68:54:7d:1d:00:dd:aa:be:23:5f:fd:5f:44:fb:f1:a7:bc:28:
0b:4c:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 13:48:37 2026 by rpki-client