Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/isp0yuBuugxw6xzihtK3rEYsHds.roa
File: isp0yuBuugxw6xzihtK3rEYsHds.roa (raw, json)
Hash identifier: DrMcfUqF0r3FlwMR/79HgeLI8SC+zaEcl8IgaURSXSY=
Subject key identifier: 8A:CA:74:CA:E0:6E:BA:0C:70:EB:1C:E2:86:D2:B7:AC:46:2C:1D:DB
Certificate issuer: /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Certificate serial: 01A01356C0DE73FFE494764A6C395D262680
Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/isp0yuBuugxw6xzihtK3rEYsHds.roa
Signing time: Tue 18 Aug 2026 05:27:27 +0000
ROA not before: Tue 18 Aug 2026 05:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44444
IP address blocks: 85.115.32.0/24 maxlen: 24
85.115.33.0/24 maxlen: 24
85.115.34.0/24 maxlen: 24
85.115.35.0/24 maxlen: 24
85.115.36.0/24 maxlen: 24
85.115.37.0/24 maxlen: 24
85.115.39.0/24 maxlen: 24
85.115.40.0/24 maxlen: 24
85.115.41.0/24 maxlen: 24
85.115.42.0/24 maxlen: 24
85.115.43.0/24 maxlen: 24
85.115.44.0/24 maxlen: 24
85.115.45.0/24 maxlen: 24
85.115.46.0/24 maxlen: 24
85.115.47.0/24 maxlen: 24
85.115.49.0/24 maxlen: 24
85.115.50.0/24 maxlen: 24
85.115.51.0/24 maxlen: 24
85.115.52.0/24 maxlen: 24
85.115.53.0/24 maxlen: 24
85.115.54.0/24 maxlen: 24
85.115.55.0/24 maxlen: 24
85.115.56.0/24 maxlen: 24
85.115.58.0/24 maxlen: 24
85.115.59.0/24 maxlen: 24
85.115.60.0/24 maxlen: 24
85.115.61.0/24 maxlen: 24
85.115.62.0/24 maxlen: 24
85.115.63.0/24 maxlen: 24
86.111.222.0/24 maxlen: 24
157.167.0.0/24 maxlen: 24
157.167.4.0/24 maxlen: 24
157.167.5.0/24 maxlen: 24
157.167.6.0/24 maxlen: 24
157.167.10.0/24 maxlen: 24
157.167.11.0/24 maxlen: 24
157.167.12.0/24 maxlen: 24
157.167.13.0/24 maxlen: 24
157.167.14.0/24 maxlen: 24
157.167.15.0/24 maxlen: 24
157.167.16.0/24 maxlen: 24
157.167.17.0/24 maxlen: 24
157.167.18.0/24 maxlen: 24
157.167.19.0/24 maxlen: 24
157.167.20.0/24 maxlen: 24
157.167.21.0/24 maxlen: 24
157.167.22.0/24 maxlen: 24
157.167.23.0/24 maxlen: 24
157.167.24.0/24 maxlen: 24
157.167.25.0/24 maxlen: 24
157.167.26.0/24 maxlen: 24
157.167.27.0/24 maxlen: 24
157.167.28.0/24 maxlen: 24
157.167.29.0/24 maxlen: 24
157.167.30.0/24 maxlen: 24
157.167.31.0/24 maxlen: 24
157.167.32.0/24 maxlen: 24
157.167.33.0/24 maxlen: 24
157.167.34.0/24 maxlen: 24
157.167.35.0/24 maxlen: 24
157.167.36.0/24 maxlen: 24
157.167.37.0/24 maxlen: 24
157.167.38.0/24 maxlen: 24
157.167.39.0/24 maxlen: 24
157.167.40.0/24 maxlen: 24
157.167.41.0/24 maxlen: 24
157.167.42.0/24 maxlen: 24
157.167.43.0/24 maxlen: 24
157.167.44.0/24 maxlen: 24
157.167.45.0/24 maxlen: 24
157.167.46.0/24 maxlen: 24
157.167.47.0/24 maxlen: 24
157.167.48.0/24 maxlen: 24
157.167.49.0/24 maxlen: 24
157.167.50.0/24 maxlen: 24
157.167.51.0/24 maxlen: 24
157.167.52.0/24 maxlen: 24
157.167.53.0/24 maxlen: 24
157.167.54.0/24 maxlen: 24
157.167.55.0/24 maxlen: 24
157.167.56.0/24 maxlen: 24
157.167.57.0/24 maxlen: 24
157.167.58.0/24 maxlen: 24
157.167.59.0/24 maxlen: 24
157.167.60.0/24 maxlen: 24
157.167.61.0/24 maxlen: 24
157.167.62.0/24 maxlen: 24
157.167.63.0/24 maxlen: 24
157.167.64.0/24 maxlen: 24
157.167.65.0/24 maxlen: 24
157.167.66.0/24 maxlen: 24
157.167.67.0/24 maxlen: 24
157.167.68.0/24 maxlen: 24
157.167.69.0/24 maxlen: 24
157.167.70.0/24 maxlen: 24
157.167.71.0/24 maxlen: 24
157.167.72.0/24 maxlen: 24
157.167.73.0/24 maxlen: 24
157.167.74.0/24 maxlen: 24
157.167.75.0/24 maxlen: 24
157.167.76.0/24 maxlen: 24
157.167.77.0/24 maxlen: 24
157.167.78.0/24 maxlen: 24
157.167.79.0/24 maxlen: 24
157.167.80.0/24 maxlen: 24
157.167.81.0/24 maxlen: 24
157.167.82.0/24 maxlen: 24
157.167.83.0/24 maxlen: 24
157.167.84.0/24 maxlen: 24
157.167.85.0/24 maxlen: 24
157.167.86.0/24 maxlen: 24
157.167.87.0/24 maxlen: 24
157.167.88.0/24 maxlen: 24
157.167.89.0/24 maxlen: 24
157.167.90.0/24 maxlen: 24
157.167.91.0/24 maxlen: 24
157.167.92.0/24 maxlen: 24
157.167.93.0/24 maxlen: 24
157.167.94.0/24 maxlen: 24
157.167.95.0/24 maxlen: 24
157.167.96.0/24 maxlen: 24
157.167.97.0/24 maxlen: 24
157.167.98.0/24 maxlen: 24
157.167.99.0/24 maxlen: 24
157.167.100.0/24 maxlen: 24
157.167.101.0/24 maxlen: 24
157.167.102.0/24 maxlen: 24
157.167.103.0/24 maxlen: 24
157.167.104.0/24 maxlen: 24
157.167.105.0/24 maxlen: 24
157.167.106.0/24 maxlen: 24
157.167.107.0/24 maxlen: 24
157.167.108.0/24 maxlen: 24
157.167.109.0/24 maxlen: 24
157.167.110.0/24 maxlen: 24
157.167.111.0/24 maxlen: 24
157.167.112.0/24 maxlen: 24
157.167.113.0/24 maxlen: 24
157.167.114.0/24 maxlen: 24
157.167.115.0/24 maxlen: 24
157.167.116.0/24 maxlen: 24
157.167.117.0/24 maxlen: 24
157.167.118.0/24 maxlen: 24
157.167.119.0/24 maxlen: 24
157.167.120.0/24 maxlen: 24
157.167.121.0/24 maxlen: 24
157.167.122.0/24 maxlen: 24
157.167.123.0/24 maxlen: 24
157.167.124.0/24 maxlen: 24
157.167.125.0/24 maxlen: 24
157.167.126.0/24 maxlen: 24
157.167.127.0/24 maxlen: 24
157.167.128.0/24 maxlen: 24
157.167.130.0/24 maxlen: 24
157.167.131.0/24 maxlen: 24
157.167.132.0/24 maxlen: 24
157.167.157.0/24 maxlen: 24
157.167.158.0/24 maxlen: 24
157.167.159.0/24 maxlen: 24
157.167.163.0/24 maxlen: 24
157.167.164.0/24 maxlen: 24
157.167.165.0/24 maxlen: 24
157.167.166.0/24 maxlen: 24
157.167.167.0/24 maxlen: 24
157.167.168.0/24 maxlen: 24
157.167.169.0/24 maxlen: 24
185.4.96.0/24 maxlen: 24
185.4.97.0/24 maxlen: 24
185.4.98.0/24 maxlen: 24
2001:4010::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:56:c0:de:73:ff:e4:94:76:4a:6c:39:5d:26:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Validity
Not Before: Aug 18 05:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aca74cae06eba0c70eb1ce286d2b7ac462c1ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:96:7f:7c:f7:6f:1d:45:7e:2f:02:58:84:
7a:38:2d:f2:d1:00:67:3d:14:ce:52:16:97:df:d9:
37:bb:75:a0:8f:69:ea:50:33:5e:8f:63:49:a3:5f:
84:bb:82:a2:1a:60:84:03:ce:78:86:2d:de:f9:9a:
75:cf:47:e2:b0:7e:8d:77:5e:9b:56:19:5d:ef:58:
38:e7:44:a3:e1:7e:60:46:6c:63:03:5d:99:cd:1d:
48:38:70:4e:91:64:9a:5b:fb:9e:21:9a:0b:90:8f:
87:fa:7d:91:bd:62:75:45:d2:be:28:ef:f5:31:4b:
3d:aa:b8:ac:7d:32:81:1b:fa:2f:ad:12:01:58:bf:
48:41:2f:4f:49:c9:85:4b:1d:3a:d5:95:4b:95:46:
4b:0e:9b:4c:bf:1c:12:b6:30:dc:de:df:55:e8:30:
ff:ca:d3:b0:89:a1:98:9b:7c:3b:68:37:cd:6f:ed:
5f:1a:36:22:d1:45:60:c8:0e:00:d0:3f:aa:98:2b:
e3:4e:e0:13:16:8e:27:97:35:14:cb:fc:56:68:19:
d3:ff:7e:0d:4f:3d:70:a5:88:17:87:5f:1c:1b:4f:
e5:81:6a:9b:ba:da:5e:39:c5:0a:dd:48:27:6e:77:
8a:3c:4b:3c:37:00:ee:dc:6a:7f:02:ef:8c:5b:76:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CA:74:CA:E0:6E:BA:0C:70:EB:1C:E2:86:D2:B7:AC:46:2C:1D:DB
X509v3 Authority Key Identifier:
keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/isp0yuBuugxw6xzihtK3rEYsHds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.32.0-85.115.37.255
85.115.39.0-85.115.47.255
85.115.49.0-85.115.56.255
85.115.58.0-85.115.63.255
86.111.222.0/24
157.167.0.0/24
157.167.4.0-157.167.6.255
157.167.10.0-157.167.128.255
157.167.130.0-157.167.132.255
157.167.157.0-157.167.159.255
157.167.163.0-157.167.169.255
185.4.96.0-185.4.98.255
IPv6:
2001:4010::/32
Signature Algorithm: sha256WithRSAEncryption
5a:f7:4e:e8:ac:94:b1:de:03:6f:bd:b5:0f:69:b3:22:70:27:
c6:ab:ee:e6:33:45:f7:c8:37:aa:22:ad:68:7a:66:4a:ad:e4:
1e:9b:6a:9a:14:56:e5:86:d4:81:f1:db:47:36:f2:08:7c:f3:
84:46:18:17:45:f2:8b:1d:ac:db:46:08:14:fe:42:e3:37:74:
1e:7a:80:94:2f:6b:3d:60:bb:83:08:2b:bb:e0:4b:a9:a2:e7:
de:6c:38:79:2a:f8:04:6b:ae:95:d2:68:08:d7:dc:3f:9e:9d:
90:f0:21:fb:74:9b:61:24:d1:d6:d4:c7:ee:5c:ad:b8:10:12:
05:2c:5c:a7:46:76:a9:56:a6:2c:e7:04:a8:c8:88:5a:61:da:
db:c2:ce:be:a1:81:64:3d:30:8e:f9:e1:a1:29:16:6b:35:06:
ba:d5:8d:a5:26:0f:e3:1e:4a:8e:75:dc:ea:c0:e9:3f:46:26:
72:79:93:ba:c9:7d:e6:3b:ec:30:d0:67:d1:be:64:1e:f3:79:
bf:01:88:1b:d3:01:98:c4:2c:de:4d:94:db:14:d4:65:9b:dd:
aa:1c:f1:db:7b:e2:79:ed:e5:c8:22:12:9c:ec:85:05:01:b6:
a6:6e:99:0d:19:da:3a:d9:5e:e6:11:d8:b1:b5:cd:d2:ba:a9:
17:de:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:41 2026 by rpki-client