Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LCgdQGniWNOXa3H9M8HwwPBTQ-o.roa
File: LCgdQGniWNOXa3H9M8HwwPBTQ-o.roa (raw, json)
Hash identifier: eBPIpkQG+cRugn8iHtKUpUMBLlyM713tIX9dHzqsY9o=
Subject key identifier: 2C:28:1D:40:69:E2:58:D3:97:6B:71:FD:33:C1:F0:C0:F0:53:43:EA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EF86D57F6FA4B9A969E70265A1E6ACD0A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LCgdQGniWNOXa3H9M8HwwPBTQ-o.roa
Signing time: Wed 24 Jun 2026 06:59:35 +0000
ROA not before: Wed 24 Jun 2026 06:59:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139659
IP address blocks: 85.189.40.0/23 maxlen: 24
85.189.44.0/23 maxlen: 24
85.189.54.0/23 maxlen: 24
85.189.58.0/23 maxlen: 24
85.189.66.0/23 maxlen: 24
85.189.70.0/23 maxlen: 24
85.189.80.0/23 maxlen: 24
85.189.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:6d:57:f6:fa:4b:9a:96:9e:70:26:5a:1e:6a:cd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 24 06:59:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c281d4069e258d3976b71fd33c1f0c0f05343ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:52:2e:5e:6e:a6:19:bc:80:39:03:e6:eb:
c0:13:aa:89:09:d4:27:1d:68:79:77:19:19:8e:18:
29:42:25:a4:86:01:37:36:19:39:4a:73:fa:fb:13:
25:83:b6:df:81:f4:21:60:3f:09:7b:d7:69:1f:f0:
eb:6f:f7:67:1a:50:97:18:9e:c4:86:2d:49:25:2d:
98:cc:23:97:6e:5e:83:8f:98:c5:bc:30:ce:a0:bf:
79:1b:de:6a:19:7b:bb:9a:71:94:1f:2f:82:a4:46:
61:d8:1e:de:ea:0f:2b:ff:ea:f8:87:e6:8f:9a:ce:
7c:a4:a0:e5:84:bf:72:6b:04:2a:c0:5e:91:b2:8d:
12:ae:ad:7b:45:89:c5:76:bc:66:8e:26:64:e9:0c:
d2:fd:17:29:41:75:97:bf:33:e2:85:cf:17:5a:db:
98:76:2f:ad:4f:34:ee:a1:4d:f4:eb:a1:10:7d:0d:
96:87:b0:e3:90:32:68:b0:85:0c:d2:e0:5c:aa:df:
b0:01:b8:8e:83:20:53:19:a0:82:ad:e3:da:8d:02:
92:e1:a5:a0:75:2a:23:1b:c9:d3:cd:3f:07:d5:b2:
66:cf:97:67:66:97:ec:ac:d2:79:2c:b2:ad:90:57:
10:0f:a8:24:a5:24:4a:16:1b:5f:75:5f:7c:a7:4c:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:28:1D:40:69:E2:58:D3:97:6B:71:FD:33:C1:F0:C0:F0:53:43:EA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LCgdQGniWNOXa3H9M8HwwPBTQ-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.40.0/23
85.189.44.0/23
85.189.54.0/23
85.189.58.0/23
85.189.66.0/23
85.189.70.0/23
85.189.80.0/23
85.189.88.0/23
Signature Algorithm: sha256WithRSAEncryption
90:08:cc:fb:83:5a:d7:5d:d8:f9:a7:d3:f2:98:8a:3b:88:b0:
21:fa:c8:38:ba:17:88:8c:2b:10:41:79:b1:68:91:15:c4:2f:
66:ba:47:a9:17:99:34:c1:07:df:29:2d:1d:8a:a4:dc:02:e5:
88:31:49:24:ba:72:4d:07:7c:79:5a:a5:77:47:f0:ef:96:a2:
22:11:c6:bc:99:3b:ce:7f:2c:34:ec:43:79:d1:36:4d:1b:28:
ae:e6:71:97:3c:46:76:2e:55:d3:3b:7a:ea:d1:4e:2c:20:1b:
0e:98:46:d2:32:ae:f4:f8:18:90:b9:12:bc:71:9e:51:a8:06:
b5:ac:91:fc:13:49:52:de:aa:4a:b0:03:ce:07:1a:ea:35:13:
cf:10:3f:b7:61:f6:69:c5:98:ff:4b:4b:6d:c5:62:5e:30:fb:
47:7b:cc:93:85:f7:c1:af:68:0a:52:ea:96:87:9a:00:31:7d:
0c:d3:b0:ed:59:79:d3:85:84:a5:76:36:41:b1:f1:89:b4:22:
68:f7:36:81:08:d6:53:5e:8d:71:37:22:37:b1:d2:ad:7e:4c:
ba:f2:a9:9c:07:6f:fc:6e:fa:5f:c5:d8:e2:cc:46:b5:fe:07:
3b:95:4b:8b:ff:34:b2:49:88:b7:b0:06:f2:9f:46:b1:e4:8a:
ce:7f:18:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:20 2026 by rpki-client