Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Sd02kpeYqxkl4xYfCRHt17jc_go.roa
File: Sd02kpeYqxkl4xYfCRHt17jc_go.roa (raw, json)
Hash identifier: eFufbINMLynvWEz+0QvyuNGHFeXwPdh0JN2Yf/9ef/U=
Subject key identifier: 49:DD:36:92:97:98:AB:19:25:E3:16:1F:09:11:ED:D7:B8:DC:FE:0A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A04084F9C9E7D97FDBCC37B79C67ED3B0D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Sd02kpeYqxkl4xYfCRHt17jc_go.roa
Signing time: Thu 27 Aug 2026 00:00:51 +0000
ROA not before: Thu 27 Aug 2026 00:00:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61112
IP address blocks: 87.85.99.0/24 maxlen: 24
194.242.135.0/24 maxlen: 24
212.135.32.0/20 maxlen: 24
212.135.32.0/24 maxlen: 24
212.135.33.0/24 maxlen: 24
212.135.34.0/24 maxlen: 24
212.135.35.0/24 maxlen: 24
212.135.36.0/24 maxlen: 24
212.135.37.0/24 maxlen: 24
212.135.38.0/24 maxlen: 24
212.135.39.0/24 maxlen: 24
212.135.40.0/24 maxlen: 24
212.135.41.0/24 maxlen: 24
212.135.42.0/24 maxlen: 24
212.135.43.0/24 maxlen: 24
212.135.44.0/24 maxlen: 24
212.135.45.0/24 maxlen: 24
212.135.46.0/24 maxlen: 24
212.135.47.0/24 maxlen: 24
212.135.112.0/20 maxlen: 24
212.135.112.0/24 maxlen: 24
212.135.113.0/24 maxlen: 24
212.135.114.0/24 maxlen: 24
212.135.115.0/24 maxlen: 24
212.135.116.0/24 maxlen: 24
212.135.117.0/24 maxlen: 24
212.135.118.0/24 maxlen: 24
212.135.119.0/24 maxlen: 24
212.135.120.0/24 maxlen: 24
212.135.121.0/24 maxlen: 24
212.135.122.0/24 maxlen: 24
212.135.123.0/24 maxlen: 24
212.135.124.0/24 maxlen: 24
212.135.125.0/24 maxlen: 24
212.135.126.0/24 maxlen: 24
212.135.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:84:f9:c9:e7:d9:7f:db:cc:37:b7:9c:67:ed:3b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 27 00:00:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49dd36929798ab1925e3161f0911edd7b8dcfe0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:f1:f3:6f:8a:cb:bd:55:9e:a2:6c:47:2c:
95:5a:6c:c4:af:d6:c0:8e:8c:c3:47:2f:49:35:85:
8d:39:6c:f0:ce:74:10:74:4c:45:fe:d5:5a:28:f3:
84:05:64:21:06:45:9c:56:b3:7b:7e:55:a5:90:09:
7d:7b:b8:89:d8:9c:53:8f:e2:39:02:5e:bc:6b:28:
f4:3d:b9:5d:0a:2c:2c:e3:92:d7:d5:5e:6d:01:8a:
39:e0:e4:b4:d0:66:9b:5b:63:72:b9:e6:c2:c4:24:
8e:1d:aa:e2:4d:a1:d5:a9:38:dc:bc:22:5f:1d:4c:
0a:21:9e:7a:c8:73:f9:07:79:01:5c:eb:03:7d:80:
6b:35:db:fc:e3:21:8d:dd:98:5a:13:b9:ff:cf:16:
bf:c3:9a:78:e0:8e:28:5b:29:46:81:fd:fa:7e:3a:
38:4e:f5:c2:26:d4:41:37:11:4b:59:98:2d:30:c2:
69:29:c1:39:2c:fb:de:59:bc:ff:15:e9:f4:7f:70:
df:70:8f:cb:ad:0c:14:a3:aa:85:fd:38:fc:0c:4b:
28:d3:60:b2:49:3b:b2:af:ac:a2:be:ee:ed:79:89:
9e:16:07:11:4e:e1:d5:14:72:97:d9:22:72:63:b3:
03:2f:c0:f9:e3:9e:3f:46:3c:85:03:9c:82:fb:4a:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:36:92:97:98:AB:19:25:E3:16:1F:09:11:ED:D7:B8:DC:FE:0A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Sd02kpeYqxkl4xYfCRHt17jc_go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.99.0/24
194.242.135.0/24
212.135.32.0/20
212.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:45:7f:c0:c6:b6:88:09:f1:e5:4d:f8:7f:1a:c6:c3:d6:ab:
17:09:5f:9b:c9:d9:34:aa:4b:e3:2e:b7:05:18:02:f4:d2:13:
8b:2b:eb:05:da:8d:0f:2f:e5:0a:95:b5:19:04:af:ef:ac:5b:
24:fd:75:c1:b0:bf:9a:b4:a4:17:13:87:d6:77:77:b0:01:b0:
e2:f7:9d:19:ee:82:5c:c5:d9:fd:e9:0b:51:e5:65:1d:50:18:
9b:09:75:21:46:33:b0:81:ab:a8:d4:a9:d8:5d:07:49:3c:82:
68:7d:42:1b:8e:51:d0:b3:18:a0:26:3a:7d:91:2d:81:2d:0f:
b3:c4:ce:1a:4e:76:f4:eb:74:2f:05:0e:b1:3a:71:22:b6:77:
aa:8a:83:79:13:02:aa:7e:fb:05:dd:96:8f:19:77:5d:3e:bf:
d5:e7:f6:97:3a:1f:53:6c:8c:d5:6f:21:43:0b:04:2c:3d:09:
e1:83:84:77:bb:82:42:6d:9f:2b:ae:eb:a5:67:72:7b:2f:2a:
18:b8:17:d1:c5:e0:db:3b:dd:b4:b7:a4:78:af:0a:8e:16:0e:
4a:39:2f:22:e1:21:f5:99:6e:5c:03:96:f6:4f:53:2f:64:d0:
a0:78:90:36:df:0b:4e:a1:89:68:fc:a6:1a:e8:8c:b4:6c:57:
b0:8e:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:56 2026 by rpki-client