Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ff7DR9LJ-nzRjeH99aEbQnMB4y8.roa
File: ff7DR9LJ-nzRjeH99aEbQnMB4y8.roa (raw, json)
Hash identifier: vVkSxMrjf9YyikPrGVvIc+XobWil8OWlmPxHVT2vcfk=
Subject key identifier: 7D:FE:C3:47:D2:C9:FA:7C:D1:8D:E1:FD:F5:A1:1B:42:73:01:E3:2F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F12850C72C9C94FB40DA01811B96057F7
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ff7DR9LJ-nzRjeH99aEbQnMB4y8.roa
Signing time: Mon 29 Jun 2026 08:35:37 +0000
ROA not before: Mon 29 Jun 2026 08:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138915
IP address blocks: 85.189.90.0/24 maxlen: 24
85.189.93.0/24 maxlen: 24
85.189.94.0/24 maxlen: 24
85.189.98.0/23 maxlen: 24
85.189.100.0/23 maxlen: 24
85.189.109.0/24 maxlen: 24
85.189.110.0/23 maxlen: 24
85.189.116.0/24 maxlen: 24
85.189.124.0/23 maxlen: 24
85.189.128.0/24 maxlen: 24
85.189.131.0/24 maxlen: 24
85.189.135.0/24 maxlen: 24
85.189.136.0/24 maxlen: 24
85.189.141.0/24 maxlen: 24
85.189.143.0/24 maxlen: 24
85.189.145.0/24 maxlen: 24
85.189.147.0/24 maxlen: 24
85.189.148.0/24 maxlen: 24
85.189.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:85:0c:72:c9:c9:4f:b4:0d:a0:18:11:b9:60:57:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 29 08:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dfec347d2c9fa7cd18de1fdf5a11b427301e32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bc:08:83:e5:63:5b:01:99:61:5a:08:f6:d6:
e1:a3:0b:15:46:fe:45:31:22:98:bd:16:77:ab:cf:
20:54:ed:08:d6:39:a7:2a:92:69:91:01:8f:ab:90:
7c:ed:d5:68:74:3d:ea:1a:3c:e5:38:02:23:94:e2:
59:0e:47:01:a9:ad:36:3e:ff:49:0a:75:c4:95:f4:
07:e6:d0:66:0a:17:d6:a1:75:e3:05:f3:bb:df:70:
9e:6b:1f:c4:88:40:e9:01:8b:60:1f:14:50:8d:7a:
5b:ae:84:51:4e:a1:c6:7f:43:37:50:15:26:2e:62:
4a:d7:88:12:91:38:ca:60:84:3e:44:7f:2b:1e:ca:
87:13:e4:4a:f6:bb:8d:4b:e9:35:23:96:49:3d:bb:
e6:8b:04:e7:f3:66:c7:12:ec:71:f6:f8:02:39:3e:
2d:a4:ae:b8:b4:fc:16:8e:d0:85:fd:62:4a:c7:d1:
7d:10:31:e0:f2:4d:ad:dc:90:45:f9:8b:1e:70:c2:
34:cd:44:a4:56:02:63:e4:4b:f8:3a:77:b7:8c:69:
da:16:a7:f8:ac:3c:68:11:35:76:cf:14:56:53:83:
4e:a4:b6:3e:60:29:1a:a3:9c:e4:a9:14:17:90:49:
4f:b8:7a:5d:0e:26:fe:a5:27:6f:0d:c7:6c:26:f2:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FE:C3:47:D2:C9:FA:7C:D1:8D:E1:FD:F5:A1:1B:42:73:01:E3:2F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ff7DR9LJ-nzRjeH99aEbQnMB4y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.90.0/24
85.189.93.0-85.189.94.255
85.189.98.0-85.189.101.255
85.189.109.0-85.189.111.255
85.189.116.0/24
85.189.124.0/23
85.189.128.0/24
85.189.131.0/24
85.189.135.0-85.189.136.255
85.189.141.0/24
85.189.143.0/24
85.189.145.0/24
85.189.147.0-85.189.148.255
85.189.150.0/23
Signature Algorithm: sha256WithRSAEncryption
55:f7:2f:26:f8:cd:a4:95:e7:66:c0:1c:45:b5:da:80:21:ac:
5d:f8:87:6e:6a:88:8e:89:76:d0:95:3f:ea:32:75:25:06:d8:
9c:3c:69:6e:9d:73:8c:75:40:84:96:39:1f:cd:31:6b:da:30:
49:c7:c7:17:84:97:eb:00:66:2f:43:82:f3:1c:df:16:4e:b3:
82:61:fc:ce:ef:e3:ef:16:2e:73:ac:46:76:76:cf:01:69:00:
8f:ab:7d:d0:e3:44:26:23:87:b4:ed:fc:e6:36:97:09:1b:a3:
2d:46:bf:67:36:ca:58:ba:b2:45:d8:70:73:51:be:ef:c5:1d:
ac:27:3b:38:b9:4a:a2:41:8c:df:cc:d9:a1:14:03:3e:b8:ea:
cd:54:02:87:69:c4:8b:78:32:07:e5:cd:82:b0:8b:71:84:0b:
3b:56:55:e4:96:f1:32:bb:89:7c:ed:fc:59:f6:8a:b5:43:58:
0e:0c:c5:dd:37:73:32:c8:19:48:c4:7d:6f:f1:d8:b7:b5:b9:
2b:07:f8:b3:83:0a:5c:15:2f:13:e3:ea:73:10:b1:2c:f6:7d:
5e:94:31:c6:1d:7c:2e:a2:bc:22:1e:f7:ae:e4:a3:06:bf:8c:
c1:2d:57:49:84:3f:cc:eb:77:cc:e2:05:8b:af:2a:c7:11:29:
b6:6d:e1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:01 2026 by rpki-client