Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/L7VWwLoJgeZkkj-hqhbFv4uJCJA.roa
File: L7VWwLoJgeZkkj-hqhbFv4uJCJA.roa (raw, json)
Hash identifier: j7rFQER5IJLYN6eQr2ZVubfwjYglPZSeNtxESTBcfWk=
Subject key identifier: 2F:B5:56:C0:BA:09:81:E6:64:92:3F:A1:AA:16:C5:BF:8B:89:08:90
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A144EFCE5C643F16E3B33A92D05975BE02
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/L7VWwLoJgeZkkj-hqhbFv4uJCJA.roa
Signing time: Fri 16 Oct 2026 13:38:48 +0000
ROA not before: Fri 16 Oct 2026 13:38:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.85.237.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:ef:ce:5c:64:3f:16:e3:b3:3a:92:d0:59:75:be:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 16 13:38:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fb556c0ba0981e664923fa1aa16c5bf8b890890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:ee:54:9c:9b:2d:bf:da:85:db:4b:6f:78:
43:56:c9:1b:60:f3:f5:d5:fa:09:0f:f0:d4:a0:5d:
aa:28:64:4d:74:55:af:e8:73:6d:e8:d3:d7:7f:01:
71:c2:df:95:9a:87:61:d1:9e:57:df:d7:c3:59:13:
b0:3d:ab:13:40:bc:49:82:a1:da:0a:c1:eb:09:6d:
63:0f:42:bf:ac:6a:e4:34:dd:25:ed:09:f8:cf:3d:
a9:86:58:57:d0:30:ba:4f:25:13:92:62:02:12:07:
65:33:f0:80:66:da:f6:3d:35:81:ec:46:a9:f6:4d:
1d:5b:ec:69:c2:e1:62:63:1c:cc:cb:0f:9f:df:a8:
36:5f:ae:f2:37:87:e9:72:4d:8c:fb:71:f5:22:ee:
b4:93:d0:55:0b:46:af:6c:47:a7:78:a2:55:d3:28:
34:60:d2:f3:b4:75:03:32:c9:6a:62:60:2c:dc:e4:
1e:6a:75:60:a2:81:fb:2f:56:e4:6e:72:b5:e9:08:
51:be:c9:1f:36:c6:ae:0a:97:58:f5:27:af:ac:47:
0b:cd:d5:f1:a2:3b:d6:cb:a7:1f:38:29:80:e6:3c:
04:18:03:83:9e:63:eb:b9:e7:49:b1:f1:d8:66:3e:
c3:75:25:8a:29:79:20:8f:87:18:82:8a:c0:81:d8:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:56:C0:BA:09:81:E6:64:92:3F:A1:AA:16:C5:BF:8B:89:08:90
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/L7VWwLoJgeZkkj-hqhbFv4uJCJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.237.0/24
185.119.80.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a1:73:63:70:57:74:6f:9e:e0:d1:d8:e8:5c:97:43:02:f2:
e9:bf:cf:45:2d:37:a4:7a:15:2c:2c:cb:1c:54:75:ef:42:9d:
7a:21:37:8b:69:59:cb:a7:fa:3c:fb:c2:12:14:33:56:0d:e5:
e8:7e:b3:9b:09:fd:26:01:42:47:bf:fd:a0:17:b6:7a:48:6d:
7b:dc:b1:44:2e:fd:a8:4c:b1:1c:60:f3:7d:88:f2:84:fc:67:
3c:b2:84:0c:fa:4c:a9:e1:c7:a7:86:a3:18:ab:2f:df:91:fe:
85:8f:4f:4f:c2:00:33:60:f9:0f:ba:74:af:d1:b8:0d:30:77:
35:2f:e7:47:9d:37:1d:a2:a7:e6:be:a9:b3:e3:0c:a4:36:99:
d2:9c:3f:01:5a:5b:34:8d:4c:ed:75:c2:da:c7:bf:90:0d:4c:
82:f0:bc:ac:08:b6:c6:73:bc:7f:d2:fa:2a:22:87:13:26:47:
24:3d:b0:07:47:60:fa:d2:5c:bc:ca:85:ea:c6:c7:bf:5c:90:
ac:ce:3e:25:25:e6:1c:25:c8:f5:24:d0:12:90:c4:ec:40:1c:
b7:e8:01:83:4c:2f:f1:07:91:e5:c1:f3:8b:21:ed:9d:07:d9:
b2:f2:7c:4f:43:16:ed:7c:10:68:47:d7:20:b6:45:75:90:d8:
e7:6f:5d:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFE785cZD8W47M6ktBZdb4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYxMDE2MTMzODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmI1NTZjMGJhMDk4MWU2NjQ5MjNmYTFhYTE2YzViZjhiODkwODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW/uVJybLb/ahdtLb3hDVskbYPP1
1foJD/DUoF2qKGRNdFWv6HNt6NPXfwFxwt+Vmodh0Z5X39fDWROwPasTQLxJgqHa
CsHrCW1jD0K/rGrkNN0l7Qn4zz2phlhX0DC6TyUTkmICEgdlM/CAZtr2PTWB7Eap
9k0dW+xpwuFiYxzMyw+f36g2X67yN4fpck2M+3H1Iu60k9BVC0avbEeneKJV0yg0
YNLztHUDMslqYmAs3OQeanVgooH7L1bkbnK16QhRvskfNsauCpdY9SevrEcLzdXx
ojvWy6cfOCmA5jwEGAODnmPruedJsfHYZj7DdSWKKXkgj4cYgorAgdipSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC+1VsC6CYHmZJI/oaoWxb+LiQiQMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvTDdWV3dMb0pnZVpra2otaHFoYkZ2NHVKQ0pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVXtAwQA
uXdQMA0GCSqGSIb3DQEBCwUAA4IBAQCaoXNjcFd0b57g0djoXJdDAvLpv89FLTek
ehUsLMscVHXvQp16ITeLaVnLp/o8+8ISFDNWDeXofrObCf0mAUJHv/2gF7Z6SG17
3LFELv2oTLEcYPN9iPKE/Gc8soQM+kyp4cenhqMYqy/fkf6Fj09PwgAzYPkPunSv
0bgNMHc1L+dHnTcdoqfmvqmz4wykNpnSnD8BWls0jUztdcLax7+QDUyC8LysCLbG
c7x/0voqIocTJkckPbAHR2D60ly8yoXqxse/XJCszj4lJeYcJcj1JNASkMTsQBy3
6AGDTC/xB5HlwfOLIe2dB9my8nxPQxbtfBBoR9cgtkV1kNjnb11B
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:28:19 2026 by rpki-client