Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/k6KPIXf1uYY1QuzUIH-eQtuHJNo.roa
File: k6KPIXf1uYY1QuzUIH-eQtuHJNo.roa (raw, json)
Hash identifier: 8jqMzAY0+5jv1lPwZtcaPgmkBF2JpNlgfXRABS0//MM=
Subject key identifier: 93:A2:8F:21:77:F5:B9:86:35:42:EC:D4:20:7F:9E:42:DB:87:24:DA
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 01A162B79FB1CAB544FB05A06934EBF75A80
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/k6KPIXf1uYY1QuzUIH-eQtuHJNo.roa
Signing time: Thu 22 Oct 2026 08:26:03 +0000
ROA not before: Thu 22 Oct 2026 08:26:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59437
IP address blocks: 85.234.64.0/24 maxlen: 32
85.234.66.0/24 maxlen: 32
85.234.67.0/24 maxlen: 32
85.234.78.0/24 maxlen: 32
85.234.79.0/24 maxlen: 24
85.234.82.0/24 maxlen: 24
85.234.84.0/24 maxlen: 24
85.234.86.0/24 maxlen: 24
85.234.90.0/24 maxlen: 24
85.234.91.0/24 maxlen: 24
85.234.93.0/24 maxlen: 24
85.234.94.0/24 maxlen: 24
92.38.143.0/24 maxlen: 24
93.113.170.0/24 maxlen: 24
93.119.168.0/24 maxlen: 24
93.119.169.0/24 maxlen: 24
109.61.121.0/24 maxlen: 24
2a03:90c0:2b0::/44 maxlen: 48
2a03:90c0:650::/44 maxlen: 64
2a03:90c0:680::/44 maxlen: 44
2a03:90c0:7a0::/44 maxlen: 44
2a03:90c0:7b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:b7:9f:b1:ca:b5:44:fb:05:a0:69:34:eb:f7:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Oct 22 08:26:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93a28f2177f5b9863542ecd4207f9e42db8724da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:dd:b9:17:5c:c5:8e:fa:5a:d5:79:48:15:
c3:5e:57:39:64:40:fd:d5:fe:8a:c1:2a:84:68:df:
42:aa:29:45:fb:54:cb:eb:50:b9:12:15:80:fe:da:
0d:7d:4a:a0:74:68:d6:14:89:04:9a:a4:2d:82:74:
62:01:66:70:c7:46:bd:35:7d:e1:c1:98:52:1d:10:
68:d4:96:67:83:b5:06:57:2d:b4:8f:d4:00:c4:56:
f9:5a:c4:c6:d0:2d:dc:54:05:66:76:f8:b6:f6:0c:
11:f2:fb:62:19:38:0e:61:a2:33:f7:68:68:3b:00:
2c:0e:23:9a:49:57:4b:0c:b8:8a:9e:82:b1:99:04:
8d:32:b9:88:6e:58:56:ed:6b:83:bc:45:ee:69:e5:
e5:54:46:d3:e5:63:08:50:a5:44:58:a4:4f:d7:0b:
c7:97:13:0d:73:83:a9:0c:59:74:3e:7c:22:48:2b:
1a:1a:5a:6b:67:dd:93:fc:a9:02:15:b7:59:38:a3:
2b:c3:7d:b5:84:26:40:11:09:b5:fc:64:a0:e6:2c:
39:1a:f5:65:42:08:85:bc:2d:d6:62:bb:bc:f6:08:
14:c3:0e:f8:2c:4a:e0:2d:2a:8b:a7:65:85:c7:fb:
bd:4e:5e:a4:0b:3b:dd:c3:2c:21:89:60:ed:79:2f:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A2:8F:21:77:F5:B9:86:35:42:EC:D4:20:7F:9E:42:DB:87:24:DA
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/k6KPIXf1uYY1QuzUIH-eQtuHJNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.64.0/24
85.234.66.0/23
85.234.78.0/23
85.234.82.0/24
85.234.84.0/24
85.234.86.0/24
85.234.90.0/23
85.234.93.0-85.234.94.255
92.38.143.0/24
93.113.170.0/24
93.119.168.0/23
109.61.121.0/24
IPv6:
2a03:90c0:2b0::/44
2a03:90c0:650::/44
2a03:90c0:680::/44
2a03:90c0:7a0::/43
Signature Algorithm: sha256WithRSAEncryption
c6:cd:0b:c2:8e:a4:8a:d6:be:7a:59:04:a3:7d:5a:36:f5:01:
19:f5:a9:91:ad:52:9a:61:64:fb:80:d9:23:a6:37:ef:7b:62:
a3:2e:2f:4e:53:fb:02:c1:65:75:e9:a8:6f:b0:b2:85:fa:b9:
e4:2d:6f:b9:72:6e:a6:be:de:b6:9a:4d:c0:3b:92:10:20:1e:
a6:69:10:ee:ce:56:97:07:45:29:3c:01:b5:5e:d3:d8:bf:05:
15:4b:da:93:6a:cd:59:e8:2d:89:8e:94:de:c6:55:13:21:42:
b2:ad:99:71:b7:f6:16:28:ac:40:f2:4a:b9:48:7e:b8:97:0c:
2c:ba:49:de:4a:14:19:a6:65:08:de:ca:67:60:2a:c7:e1:79:
7f:6c:e0:29:d1:2c:b5:f0:29:10:3f:c5:26:de:8e:8c:14:46:
f3:3c:6c:86:18:27:76:60:cc:cd:4e:d8:96:5b:b4:1c:02:d4:
66:de:c0:5f:36:2b:77:fa:1b:70:08:54:4e:39:e8:ab:f5:fb:
f5:df:98:43:68:f1:17:ff:11:7e:f4:14:f8:b3:68:46:6c:e7:
5d:fe:87:de:16:ee:bf:40:a7:02:91:4b:20:9a:14:b2:5a:e9:
8e:43:1d:4f:fb:5e:ef:70:ec:90:ba:60:53:8d:27:82:54:ab:
7f:ba:46:1b
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgISAaFit5+xyrVE+wWgaTTr91qAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw
MDhhZWMwHhcNMjYxMDIyMDgyNjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2EyOGYyMTc3ZjViOTg2MzU0MmVjZDQyMDdmOWU0MmRiODcyNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7fduRdcxY76WtV5SBXDXlc5ZED9
1f6KwSqEaN9CqilF+1TL61C5EhWA/toNfUqgdGjWFIkEmqQtgnRiAWZwx0a9NX3h
wZhSHRBo1JZng7UGVy20j9QAxFb5WsTG0C3cVAVmdvi29gwR8vtiGTgOYaIz92ho
OwAsDiOaSVdLDLiKnoKxmQSNMrmIblhW7WuDvEXuaeXlVEbT5WMIUKVEWKRP1wvH
lxMNc4OpDFl0PnwiSCsaGlprZ92T/KkCFbdZOKMrw321hCZAEQm1/GSg5iw5GvVl
QgiFvC3WYru89ggUww74LErgLSqLp2WFx/u9Tl6kCzvdwywhiWDteS+OkwIDAQAB
o4ICgjCCAn4wHQYDVR0OBBYEFJOijyF39bmGNULs1CB/nkLbhyTaMB8GA1UdIwQY
MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt
YjA3ZDg0MTZhZTRhLzEvazZLUElYZjF1WVkxUXV6VUlILWVRdHVISk5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh
LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGXBggrBgEFBQcBBwEB/wSBhzCBhDBWBAIAATBQAwQAVepA
AwQBVepCAwQBVepOAwQAVepSAwQAVepUAwQAVepWAwQBVepaMAwDBABV6l0DBABV
6l4DBABcJo8DBABdcaoDBAFdd6gDBABtPXkwKgQCAAIwJAMHBCoDkMACsAMHBCoD
kMAGUAMHBCoDkMAGgAMHBSoDkMAHoDANBgkqhkiG9w0BAQsFAAOCAQEAxs0Lwo6k
ita+elkEo31aNvUBGfWpka1SmmFk+4DZI6Y373tioy4vTlP7AsFldemob7Cyhfq5
5C1vuXJupr7etppNwDuSECAepmkQ7s5WlwdFKTwBtV7T2L8FFUvak2rNWegtiY6U
3sZVEyFCsq2Zcbf2FiisQPJKuUh+uJcMLLpJ3koUGaZlCN7KZ2Aqx+F5f2zgKdEs
tfApED/FJt6OjBRG8zxshhgndmDMzU7Yllu0HALUZt7AXzYrd/obcAhUTjnoq/X7
9d+YQ2jxF/8RfvQU+LNoRmznXf6H3hbuv0CnApFLIJoUslrpjkMdT/te73DskLpg
U40nglSrf7pGGw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 08:55:48 2026 by rpki-client