Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/y85mnQhYcTqIlHoOqLBACOAgO30.roa
File: y85mnQhYcTqIlHoOqLBACOAgO30.roa (raw, json)
Hash identifier: jzPimPMQ/CRKxhNSxbGWi85rto/NzANA5JxRUar8Ci0=
Subject key identifier: CB:CE:66:9D:08:58:71:3A:88:94:7A:0E:A8:B0:40:08:E0:20:3B:7D
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A03315E4607CD8D53325D3366BA215ED2F
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/y85mnQhYcTqIlHoOqLBACOAgO30.roa
Signing time: Mon 24 Aug 2026 09:24:27 +0000
ROA not before: Mon 24 Aug 2026 09:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 85.232.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:15:e4:60:7c:d8:d5:33:25:d3:36:6b:a2:15:ed:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 24 09:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbce669d0858713a88947a0ea8b04008e0203b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:b6:e0:29:17:aa:9d:60:63:80:ba:26:af:
0c:7f:30:6d:84:91:7f:99:d0:7f:cc:4a:0a:9a:91:
0e:39:72:eb:72:ae:fe:b1:64:8d:30:f8:9c:a6:f1:
49:71:3a:0d:3c:cc:11:98:e7:d4:b0:4f:58:67:6e:
42:69:34:f7:36:f2:62:ac:3e:42:90:3d:f6:aa:6e:
ee:ad:92:a3:a2:b3:29:fa:ae:ff:3e:a5:52:41:30:
4e:09:0e:fb:d3:52:fa:a6:bd:be:37:41:fd:da:68:
c8:d9:67:5f:97:1e:15:b6:86:f0:a4:0c:3b:47:9d:
71:cf:40:62:78:04:c5:54:b7:e1:00:14:e3:fc:ac:
4b:a7:50:97:e3:cb:c6:5b:c2:e3:24:16:f5:f3:98:
0f:02:eb:6c:3a:ae:37:1d:48:1a:9d:66:53:42:14:
22:95:38:ac:87:3a:c6:4b:d8:f7:df:53:fc:3a:c8:
84:8c:63:a6:77:54:e0:3f:8d:33:ff:5d:38:89:ef:
8d:94:84:c7:43:be:c4:74:9c:e8:6e:ae:09:84:49:
89:fa:07:68:9c:e1:79:04:aa:55:49:76:72:b4:39:
bc:4d:48:0f:a8:80:08:0f:83:31:cb:4c:0a:61:f6:
89:94:7d:37:b2:d7:bd:51:54:f8:16:a7:8c:09:e3:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CE:66:9D:08:58:71:3A:88:94:7A:0E:A8:B0:40:08:E0:20:3B:7D
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/y85mnQhYcTqIlHoOqLBACOAgO30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8f:e4:a0:dd:70:79:da:ea:23:38:2a:57:4e:ae:2c:46:74:
9b:0f:b2:da:9e:9d:e5:c7:61:01:72:42:d2:7a:99:32:d7:c4:
0b:7d:98:fa:0c:00:a1:b2:ee:86:f1:03:65:05:66:78:ef:9f:
0a:0e:f7:2c:61:91:c8:c2:28:97:c3:fa:9c:f2:2d:a6:b4:45:
99:65:80:fd:fe:bd:db:24:81:35:37:25:7a:c5:3b:dd:1c:e3:
51:8e:7c:62:96:d8:d3:0b:2a:eb:70:5b:f1:f3:da:48:c1:03:
a1:5b:f0:fa:8d:f2:9f:63:05:b6:a4:c4:7b:17:0d:fa:56:bb:
ad:56:a0:27:89:6a:cf:6b:8e:d4:a9:dd:d9:c2:a7:7d:00:ab:
a4:46:db:01:77:82:12:85:fa:e1:08:df:71:63:8a:26:d3:16:
65:c4:81:5f:06:23:ad:13:91:91:10:14:be:58:9c:45:f8:dc:
0e:50:b2:e7:20:64:17:d7:17:e8:8d:e3:63:f2:ca:0f:ce:57:
de:9f:26:21:cf:c1:ff:aa:e4:1c:70:7b:35:64:04:9a:92:c5:
e9:6a:74:6c:c3:4b:b0:cc:0c:de:75:d4:fa:17:15:48:eb:f4:
68:84:a5:9f:cd:72:5d:88:49:7d:bc:a5:73:60:a7:f9:72:47:
ff:70:23:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAzFeRgfNjVMyXTNmuiFe0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYwODI0MDkyNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmNlNjY5ZDA4NTg3MTNhODg5NDdhMGVhOGIwNDAwOGUwMjAzYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogW24CkXqp1gY4C6Jq8MfzBthJF/
mdB/zEoKmpEOOXLrcq7+sWSNMPicpvFJcToNPMwRmOfUsE9YZ25CaTT3NvJirD5C
kD32qm7urZKjorMp+q7/PqVSQTBOCQ7701L6pr2+N0H92mjI2Wdflx4VtobwpAw7
R51xz0BieATFVLfhABTj/KxLp1CX48vGW8LjJBb185gPAutsOq43HUganWZTQhQi
lTishzrGS9j331P8OsiEjGOmd1TgP40z/104ie+NlITHQ77EdJzobq4JhEmJ+gdo
nOF5BKpVSXZytDm8TUgPqIAID4Mxy0wKYfaJlH03ste9UVT4FqeMCeOFuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvOZp0IWHE6iJR6DqiwQAjgIDt9MB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEveTg1bW5RaFljVHFJbEhvT3FMQkFDT0FnTzMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVei/MA0G
CSqGSIb3DQEBCwUAA4IBAQAKj+Sg3XB52uojOCpXTq4sRnSbD7Lanp3lx2EBckLS
epky18QLfZj6DAChsu6G8QNlBWZ4758KDvcsYZHIwiiXw/qc8i2mtEWZZYD9/r3b
JIE1NyV6xTvdHONRjnxiltjTCyrrcFvx89pIwQOhW/D6jfKfYwW2pMR7Fw36Vrut
VqAniWrPa47Uqd3Zwqd9AKukRtsBd4IShfrhCN9xY4om0xZlxIFfBiOtE5GREBS+
WJxF+NwOULLnIGQX1xfojeNj8soPzlfenyYhz8H/quQccHs1ZASaksXpanRsw0uw
zAzeddT6FxVI6/RohKWfzXJdiEl9vKVzYKf5ckf/cCNI
-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:21 2026 by rpki-client