Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_Q0yhIRzSHGCVmemnK7izjHUVDE.roa
File: _Q0yhIRzSHGCVmemnK7izjHUVDE.roa (raw, json)
Hash identifier: k+FcmTQ4aykf89T573B69khCMArLiflNHB1nup3kwio=
Subject key identifier: FD:0D:32:84:84:73:48:71:82:56:67:A6:9C:AE:E2:CE:31:D4:54:31
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A106357C140760EB27875C18E30573FF8E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_Q0yhIRzSHGCVmemnK7izjHUVDE.roa
Signing time: Sun 04 Oct 2026 09:18:50 +0000
ROA not before: Sun 04 Oct 2026 09:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 85.204.22.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:35:7c:14:07:60:eb:27:87:5c:18:e3:05:73:ff:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 4 09:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd0d328484734871825667a69caee2ce31d45431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:42:19:bf:10:f4:07:32:9a:49:27:bd:d2:
66:c1:e1:4e:ba:92:ac:1c:26:24:97:08:37:6f:ef:
b9:f9:cb:a1:40:a9:ad:d4:b7:ba:fb:8a:37:a9:fe:
50:fd:ae:e0:ef:de:8e:75:81:95:c9:ca:f8:60:8f:
71:fe:7b:7d:e9:34:29:5d:80:d2:d1:08:96:7f:aa:
14:11:d7:73:0b:98:49:36:2d:a5:e9:00:bf:3e:89:
87:20:b6:5a:95:cd:e8:06:8b:b8:39:61:8e:ec:a1:
65:6b:b5:cc:6d:92:d0:11:4e:64:bb:f1:4b:38:04:
8f:54:2d:e6:b7:8d:46:34:fe:a9:92:b0:6c:b4:5a:
d5:0b:f8:ec:5a:8f:61:61:e9:48:64:de:0c:19:cd:
98:6c:c0:6a:b4:95:e5:34:08:20:63:d3:54:ad:d1:
c2:44:83:34:12:ab:2e:b0:41:0d:f9:8d:fc:ef:27:
27:8a:d2:28:c5:4b:7f:f6:99:83:c3:89:bf:14:b7:
eb:bd:ff:08:e0:80:f5:eb:bc:49:cb:9f:35:f7:b1:
2f:52:90:90:78:fd:e5:c1:ce:4b:ee:11:84:7d:2b:
08:53:41:f6:c7:c2:9b:d4:9e:32:06:cb:f5:91:a3:
ff:5e:19:54:2f:8d:37:bf:a5:c9:4d:d0:be:1e:00:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0D:32:84:84:73:48:71:82:56:67:A6:9C:AE:E2:CE:31:D4:54:31
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_Q0yhIRzSHGCVmemnK7izjHUVDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.22.0/24
92.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:96:39:c7:16:0b:fc:14:42:12:d3:10:d5:b4:74:e5:cf:1b:
98:50:dd:a1:b4:b5:0b:ad:4c:fe:b4:b6:13:df:79:e6:22:c8:
0a:90:58:c4:41:5b:6a:1c:1f:cc:14:03:5e:8b:15:8b:ee:7b:
5c:c6:c2:84:70:ef:08:86:c5:9b:32:13:f3:31:25:b3:6e:c7:
82:e9:5e:07:db:e8:87:ce:57:19:8f:3d:f1:1d:0f:16:27:3a:
67:3d:35:f0:0f:17:50:29:5f:76:b4:7b:2a:53:aa:4c:2a:75:
69:08:c7:3a:85:68:84:f6:b6:78:50:21:e2:8c:06:99:63:be:
fc:31:f7:44:16:38:9e:93:3b:a7:7d:99:36:c8:99:95:d8:0d:
70:03:e6:ae:0d:2e:3e:58:66:ef:e4:56:55:60:05:1d:ba:a6:
7a:39:86:05:30:11:d4:d3:88:0b:7a:62:9f:ca:ff:8f:59:e6:
82:6c:22:f0:8a:71:b0:7a:a8:a4:cc:1d:ce:89:67:c7:1e:6c:
94:b9:d4:7b:b9:49:0a:c4:0e:3f:c2:fc:c9:0e:d4:c2:11:22:
78:9a:01:dc:66:52:f2:cb:8b:32:8f:21:56:14:7e:70:b8:48:
da:fe:9a:ac:da:a7:8a:0d:c7:a6:8c:6b:34:ff:16:1e:6c:bf:
39:04:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:05:15 2026 by rpki-client