Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/x85HhXDdK_S_B_1TyEgGIu-iBaU.roa
File: x85HhXDdK_S_B_1TyEgGIu-iBaU.roa (raw, json)
Hash identifier: NwFDd4jlTrwT9j2WB98f+hEAsx2o3sG2DrPxRU3nr38=
Subject key identifier: C7:CE:47:85:70:DD:2B:F4:BF:07:FD:53:C8:48:06:22:EF:A2:05:A5
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019FF55142F39B60ECFF411AEBD4F091DAFB
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/x85HhXDdK_S_B_1TyEgGIu-iBaU.roa
Signing time: Wed 12 Aug 2026 09:32:51 +0000
ROA not before: Wed 12 Aug 2026 09:32:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44092
IP address blocks: 31.25.32.0/21 maxlen: 24
45.145.200.0/22 maxlen: 22
45.145.200.0/24 maxlen: 24
45.145.201.0/24 maxlen: 24
45.145.202.0/24 maxlen: 24
45.145.203.0/24 maxlen: 24
77.242.128.0/20 maxlen: 24
77.242.128.0/24 maxlen: 24
77.242.129.0/24 maxlen: 24
77.242.130.0/24 maxlen: 24
77.242.131.0/24 maxlen: 24
77.242.132.0/24 maxlen: 24
77.242.133.0/24 maxlen: 24
77.242.134.0/24 maxlen: 24
77.242.135.0/24 maxlen: 24
77.242.136.0/24 maxlen: 24
77.242.137.0/24 maxlen: 24
77.242.138.0/24 maxlen: 24
77.242.139.0/24 maxlen: 24
77.242.140.0/24 maxlen: 24
77.242.141.0/24 maxlen: 24
77.242.142.0/24 maxlen: 24
77.242.143.0/24 maxlen: 24
79.108.152.0/21 maxlen: 24
79.108.208.0/21 maxlen: 24
85.208.200.0/22 maxlen: 22
85.208.200.0/24 maxlen: 24
85.208.201.0/24 maxlen: 24
85.208.202.0/24 maxlen: 24
85.208.203.0/24 maxlen: 24
89.37.70.0/23 maxlen: 24
89.37.70.0/24 maxlen: 24
89.37.71.0/24 maxlen: 24
176.56.136.0/21 maxlen: 24
178.23.8.0/21 maxlen: 24
178.210.232.0/21 maxlen: 24
185.56.156.0/22 maxlen: 24
185.71.244.0/22 maxlen: 24
185.71.244.0/24 maxlen: 24
185.71.246.0/24 maxlen: 24
185.171.232.0/22 maxlen: 22
185.171.232.0/24 maxlen: 24
185.171.233.0/24 maxlen: 24
185.171.234.0/24 maxlen: 24
185.171.235.0/24 maxlen: 24
185.178.252.0/22 maxlen: 24
185.191.104.0/22 maxlen: 22
185.191.104.0/24 maxlen: 24
185.191.105.0/24 maxlen: 24
185.191.106.0/24 maxlen: 24
185.191.107.0/24 maxlen: 24
185.215.144.0/22 maxlen: 22
185.215.144.0/24 maxlen: 24
185.215.145.0/24 maxlen: 24
185.215.146.0/24 maxlen: 24
185.215.147.0/24 maxlen: 24
185.219.116.0/22 maxlen: 22
185.219.116.0/24 maxlen: 24
185.219.117.0/24 maxlen: 24
185.219.118.0/24 maxlen: 24
185.219.119.0/24 maxlen: 24
185.236.48.0/23 maxlen: 23
185.248.227.0/24 maxlen: 24
185.255.29.0/24 maxlen: 24
188.191.56.0/22 maxlen: 24
188.191.56.0/24 maxlen: 24
188.191.57.0/24 maxlen: 24
188.191.58.0/24 maxlen: 24
188.191.59.0/24 maxlen: 24
212.28.168.0/21 maxlen: 21
217.28.64.0/22 maxlen: 22
217.28.64.0/24 maxlen: 24
217.28.65.0/24 maxlen: 24
217.28.66.0/24 maxlen: 24
217.28.67.0/24 maxlen: 24
2a02:53e0::/32 maxlen: 32
2a05:3680::/29 maxlen: 29
2a0b:7b80::/29 maxlen: 29
2a0f:de80::/29 maxlen: 29
2a13:56c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:51:42:f3:9b:60:ec:ff:41:1a:eb:d4:f0:91:da:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Aug 12 09:32:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7ce478570dd2bf4bf07fd53c8480622efa205a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:f4:b6:64:ea:b7:87:36:47:64:94:ff:8d:
a9:e5:23:21:e4:8f:0d:88:f4:98:94:b5:38:b9:8f:
e9:05:10:6f:42:7a:18:d8:a7:8f:14:0e:84:c4:66:
34:20:85:4e:1c:b3:af:5d:da:93:06:61:32:8b:10:
53:d0:f7:91:26:f3:79:10:5c:ab:c1:a3:4b:54:46:
3d:94:8d:c7:6c:b3:36:29:0d:2d:2b:78:15:fb:fe:
e4:73:01:08:6d:8c:9c:67:89:52:9b:56:29:ad:7b:
a3:08:fa:4d:74:00:ac:6c:07:73:ec:42:54:09:69:
4b:83:db:eb:b0:98:88:7b:03:55:a4:d1:36:2f:06:
29:1c:62:38:54:f1:71:20:cc:22:17:8d:47:a0:dc:
58:da:af:cc:1b:a7:6f:4f:1e:98:dd:1a:12:87:d3:
82:8e:ba:70:68:af:07:81:8d:77:92:a5:55:f0:60:
7c:6c:c1:04:9b:ab:46:22:81:94:2d:0d:c3:8c:ef:
14:4a:8c:a4:ee:14:8f:95:c0:0d:43:cd:a7:59:64:
cd:8b:b8:84:36:3f:3b:c2:bc:d8:1d:54:ac:9b:57:
8d:6b:16:fa:69:e1:27:2c:6d:ba:18:e9:46:fa:67:
50:0b:ce:7b:d6:3e:d8:2c:76:b7:25:7a:e2:12:d4:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CE:47:85:70:DD:2B:F4:BF:07:FD:53:C8:48:06:22:EF:A2:05:A5
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/x85HhXDdK_S_B_1TyEgGIu-iBaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.32.0/21
45.145.200.0/22
77.242.128.0/20
79.108.152.0/21
79.108.208.0/21
85.208.200.0/22
89.37.70.0/23
176.56.136.0/21
178.23.8.0/21
178.210.232.0/21
185.56.156.0/22
185.71.244.0/22
185.171.232.0/22
185.178.252.0/22
185.191.104.0/22
185.215.144.0/22
185.219.116.0/22
185.236.48.0/23
185.248.227.0/24
185.255.29.0/24
188.191.56.0/22
212.28.168.0/21
217.28.64.0/22
IPv6:
2a02:53e0::/32
2a05:3680::/29
2a0b:7b80::/29
2a0f:de80::/29
2a13:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:01:1d:67:cb:e5:b3:10:b5:ac:bc:28:5e:a9:ca:cb:7e:b1:
24:25:d0:9c:fe:ae:60:1e:7c:ad:f2:6a:fe:02:75:c9:8f:66:
fd:ad:11:c3:dc:56:b8:f4:0a:62:31:ee:94:3b:c7:00:68:6e:
b2:16:dd:8f:49:cd:14:e7:98:69:87:52:c8:31:19:bf:50:d3:
0c:67:2f:8b:a5:f7:95:70:26:9e:7a:17:26:40:3c:a9:95:68:
ea:ac:1c:52:15:97:4a:81:86:21:8d:d4:77:27:4b:64:ff:ec:
d8:c2:f8:f1:41:2f:23:21:83:cd:f3:72:ac:4f:6d:22:8b:ea:
aa:31:17:7d:80:a2:1c:de:3f:36:10:2f:59:8f:27:67:93:5c:
02:95:82:fe:a6:e8:b5:52:18:d4:d9:98:48:24:7e:0e:64:5f:
19:05:17:31:11:6b:85:01:f0:73:2c:af:56:e7:1c:e0:17:e0:
e5:ec:7e:76:d1:a5:b6:24:08:89:9b:15:50:cb:6a:8a:68:50:
1d:4f:5c:e4:e7:b8:5f:14:2b:d8:53:87:5c:a4:f5:a9:cd:fc:
e2:bc:60:4f:e8:53:8c:0d:36:0a:5b:b8:92:0b:00:89:54:d5:
a1:6f:86:b4:fd:41:18:20:31:1d:c2:3d:1e:12:56:b8:eb:3b:
a5:60:b0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:03:29 2026 by rpki-client