Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1iozx8AbjLS7zDkxzi3sMwzVMfo.roa
File: 1iozx8AbjLS7zDkxzi3sMwzVMfo.roa (raw, json)
Hash identifier: ocVCq+wCheFrvuenDOGZBRfMTu6Bd5PAdxAeJGRpIjs=
Subject key identifier: D6:2A:33:C7:C0:1B:8C:B4:BB:CC:39:31:CE:2D:EC:33:0C:D5:31:FA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F5ED6825D13A389FF28DE6CF1C5D0D20E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1iozx8AbjLS7zDkxzi3sMwzVMfo.roa
Signing time: Tue 14 Jul 2026 04:15:44 +0000
ROA not before: Tue 14 Jul 2026 04:15:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 85.189.5.0/24 maxlen: 24
85.189.11.0/24 maxlen: 24
212.135.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5e:d6:82:5d:13:a3:89:ff:28:de:6c:f1:c5:d0:d2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 14 04:15:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d62a33c7c01b8cb4bbcc3931ce2dec330cd531fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:18:e1:ec:62:b0:03:a6:fd:b4:4c:0f:e7:
81:ae:87:9a:08:aa:fb:22:db:0d:64:53:46:cb:02:
f5:69:e5:eb:e6:99:f8:11:ef:db:28:36:42:d4:26:
f9:47:93:33:21:05:96:c0:bf:83:0c:57:19:78:50:
cc:ec:18:17:45:ba:1c:23:b0:d2:f3:a0:14:e2:92:
37:28:cf:06:3d:3e:01:d5:35:de:ad:4b:5b:91:d8:
11:c9:9a:b9:18:9a:da:ca:b9:6d:06:82:39:29:b1:
1f:b6:11:39:71:0c:39:39:d8:fe:d4:08:dd:89:1a:
23:f8:68:ff:a1:8e:f7:99:8a:2c:d8:93:8b:3e:54:
11:c7:34:e0:ca:75:64:ac:61:bf:41:72:3a:4d:4a:
8e:dc:92:60:45:df:18:2f:39:98:9e:a7:72:93:7b:
ad:b5:5e:6c:82:80:17:9f:96:4b:44:a8:e6:17:a6:
75:ee:d3:8d:e9:7c:96:7f:67:31:3a:12:7f:f1:db:
fd:33:b1:91:8b:59:df:b3:4e:3e:f4:9e:e5:07:50:
e3:55:72:82:47:46:55:ac:71:c8:a3:92:e6:a7:b5:
5a:ce:6f:34:7d:57:cc:e6:92:11:6d:83:b5:83:fd:
c0:2b:56:76:c3:3d:7c:14:b4:fb:9b:9a:db:2d:9d:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2A:33:C7:C0:1B:8C:B4:BB:CC:39:31:CE:2D:EC:33:0C:D5:31:FA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1iozx8AbjLS7zDkxzi3sMwzVMfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.5.0/24
85.189.11.0/24
212.135.30.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9f:f4:58:6e:b5:b9:32:36:03:44:a3:0f:16:51:a8:08:aa:
48:aa:f1:e6:e0:6e:f2:b4:0d:da:60:2c:ba:88:89:8b:28:9c:
ae:ee:1b:c2:6c:5c:8e:b8:04:04:0a:75:e5:a3:d6:75:f0:7f:
be:3e:7f:09:c1:e9:67:41:aa:f2:6a:91:d3:6d:6c:39:ff:fe:
06:7a:e7:d3:35:1a:62:70:e6:c0:ac:77:01:c4:e2:2a:ad:fa:
50:d3:02:2d:45:88:15:d8:a5:7d:c4:8e:80:a6:ff:cc:45:a1:
73:7b:6f:f9:25:5b:1f:c4:ac:36:03:c9:c5:99:6c:6b:69:a0:
d7:0b:ed:8d:f1:1c:52:cb:f8:ba:8b:14:0f:ff:72:6c:e5:81:
e8:16:49:d9:b4:ca:db:ee:07:09:64:20:0c:3b:f1:5a:0d:55:
e5:89:a7:d6:c6:99:4e:fb:00:a6:17:ec:ff:b3:6e:d5:4b:53:
71:d0:a9:6a:aa:74:ab:9e:45:ea:c9:26:d8:71:6e:5a:c2:58:
fb:f9:74:78:1b:c5:18:28:17:2a:64:84:b2:8f:6f:25:bf:b4:
e8:36:ad:f7:f1:59:e8:9b:ba:61:e6:93:c3:0c:87:29:89:24:
07:dc:0a:80:b9:66:e6:9b:f1:83:07:cd:ac:25:f4:f5:93:77:
a3:24:30:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client