Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jGWWK7K_pxzm1XwX49fVJGYjs2w.roa
File: jGWWK7K_pxzm1XwX49fVJGYjs2w.roa (raw, json)
Hash identifier: kI5bmVF92ir+jYKMLS4j4eXSWITGZhAMxBH8LWOrTrI=
Subject key identifier: 8C:65:96:2B:B2:BF:A7:1C:E6:D5:7C:17:E3:D7:D5:24:66:23:B3:6C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F126D5DC9BD2A1A9245F18DF00413BBB8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jGWWK7K_pxzm1XwX49fVJGYjs2w.roa
Signing time: Mon 29 Jun 2026 08:09:45 +0000
ROA not before: Mon 29 Jun 2026 08:09:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154711
IP address blocks: 85.189.60.0/24 maxlen: 24
85.189.62.0/24 maxlen: 24
85.189.65.0/24 maxlen: 24
85.189.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:6d:5d:c9:bd:2a:1a:92:45:f1:8d:f0:04:13:bb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 29 08:09:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c65962bb2bfa71ce6d57c17e3d7d5246623b36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:e1:f2:f4:09:40:17:2c:e1:f8:61:03:89:
1c:fe:38:01:17:f2:82:bc:7d:cf:3c:2c:3c:b6:c4:
25:91:62:62:f3:aa:64:48:f0:9d:8a:56:77:45:24:
80:46:1a:be:f8:5e:ad:b3:45:73:c1:8c:44:5e:ee:
36:1b:57:97:ea:d7:45:44:e3:4c:07:7b:5d:0d:d4:
ea:23:47:2e:d3:d4:b8:3a:f0:b4:42:4f:92:3c:78:
e2:44:19:69:55:72:70:be:9c:04:42:af:c2:08:c6:
92:06:e5:a1:b1:b7:12:16:8c:62:29:0e:23:15:7a:
af:8e:ea:bd:c2:25:88:1b:63:4a:fd:06:09:7a:8b:
30:f9:56:d3:8c:3d:03:0e:5a:11:a7:40:74:b1:49:
97:89:04:06:c9:79:fe:5e:ec:95:c5:89:37:35:b3:
df:18:a9:f6:18:32:88:49:56:5c:69:bd:15:d6:62:
71:6b:76:1a:1e:78:8f:c0:79:68:c3:bc:e8:c6:cb:
28:d3:0f:92:25:55:2c:56:a6:d6:7a:79:0f:e3:39:
7f:e9:7e:d5:da:09:65:51:09:35:32:0a:e7:1b:28:
92:46:1d:9c:ff:69:f3:ef:28:15:6a:7d:3a:fe:cc:
7d:cb:e5:fe:c8:da:47:c4:df:85:02:69:44:8c:fb:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:96:2B:B2:BF:A7:1C:E6:D5:7C:17:E3:D7:D5:24:66:23:B3:6C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jGWWK7K_pxzm1XwX49fVJGYjs2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.60.0/24
85.189.62.0/24
85.189.65.0/24
85.189.82.0/24
Signature Algorithm: sha256WithRSAEncryption
68:10:c0:fe:f3:e6:e1:34:d1:a4:a6:c2:99:eb:c5:c5:32:a1:
0a:4b:83:68:b5:c3:87:7e:00:2a:3d:fb:35:7b:63:33:a2:a4:
cd:aa:9a:0c:b2:83:6a:6e:5e:c3:e4:49:3e:af:8d:e0:2a:69:
c2:14:a4:2f:d1:b4:cd:4d:f8:61:4f:cb:49:41:44:a3:43:13:
aa:d2:87:96:72:ae:08:ca:4a:ad:6e:5c:82:44:de:40:ec:92:
45:16:af:c6:ac:51:b2:a1:eb:62:f8:3b:d7:e8:f3:31:87:18:
ad:b3:e5:fc:42:41:0d:95:d5:d6:df:bc:3f:17:15:db:51:8c:
dd:16:f9:8f:e1:5f:4b:1e:58:e5:d2:67:e3:c5:25:50:50:4d:
15:28:ed:4b:75:db:54:4b:f7:61:7e:67:b8:db:42:19:d5:e8:
d0:69:85:43:39:60:69:5d:69:d4:f2:0d:13:04:a4:86:c1:07:
07:36:6d:e1:90:22:aa:58:7c:e2:68:32:50:77:58:97:8c:ea:
02:2a:ea:f3:db:05:a3:e8:5b:01:1e:da:4d:29:3f:3c:0c:1a:
f7:86:89:4f:fa:d6:a9:54:45:0b:47:c7:f8:1e:dc:c4:cc:71:
d6:1c:c8:2f:41:6f:db:1e:e6:d5:76:44:69:7a:58:dd:6f:55:
4f:84:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:40 2026 by rpki-client