Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lXrZQDbfybBVe6xOJdiYdc9t_Ew.roa
File: lXrZQDbfybBVe6xOJdiYdc9t_Ew.roa (raw, json)
Hash identifier: Vzua/I5pDODwI7XZ3m4/uVcqbZZ/8J5LjuoC1N84GKc=
Subject key identifier: 95:7A:D9:40:36:DF:C9:B0:55:7B:AC:4E:25:D8:98:75:CF:6D:FC:4C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F68B73BE7ABD25DC4D330458A4D1D3A3F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lXrZQDbfybBVe6xOJdiYdc9t_Ew.roa
Signing time: Thu 16 Jul 2026 02:17:46 +0000
ROA not before: Thu 16 Jul 2026 02:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36236
IP address blocks: 85.189.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:68:b7:3b:e7:ab:d2:5d:c4:d3:30:45:8a:4d:1d:3a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 16 02:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=957ad94036dfc9b0557bac4e25d89875cf6dfc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:76:14:03:38:6f:8a:4b:c0:32:1d:18:51:
df:1d:9d:54:4c:f0:cb:fe:aa:10:69:aa:1f:1f:09:
55:b0:9a:d8:5d:e9:4b:8d:81:04:d1:e5:1a:7f:01:
35:b2:88:49:b8:da:ee:25:b1:22:24:ed:c8:d7:ee:
c9:a3:c9:68:4c:24:42:12:a7:ce:08:36:0c:0e:9a:
6f:93:f9:1c:01:d1:47:cc:0e:14:b9:bc:2f:ba:2b:
10:11:ef:3e:c5:27:49:91:ff:98:cb:02:a9:e3:72:
0c:b1:fa:5d:a7:d9:64:62:74:95:61:84:b9:2c:9b:
3a:c2:af:25:4c:c9:8c:e5:09:71:1c:f1:54:51:14:
0f:e0:ab:4c:2c:c6:07:b2:74:39:cc:ed:81:07:17:
c1:2c:6c:ac:f9:27:a5:8a:cd:c5:0a:a4:18:33:e0:
0f:52:b2:fc:0d:c9:ae:15:48:50:49:0e:7f:3b:96:
06:5e:fd:82:dc:98:9b:b9:f0:55:21:8e:dc:6f:67:
7a:90:ba:ec:ff:8e:2a:15:94:ff:c5:8c:93:ad:3b:
ca:e4:5b:24:ec:d5:aa:ed:0a:3e:68:a1:34:40:a4:
53:7a:97:96:ee:a9:2b:f4:43:fa:8e:c3:b2:fc:ea:
15:51:da:b1:f5:a3:3a:c0:5a:fc:6a:6b:5c:7e:11:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7A:D9:40:36:DF:C9:B0:55:7B:AC:4E:25:D8:98:75:CF:6D:FC:4C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lXrZQDbfybBVe6xOJdiYdc9t_Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.29.0/24
Signature Algorithm: sha256WithRSAEncryption
08:73:24:cd:2e:59:f4:80:37:3b:95:98:b6:dd:da:da:38:2f:
83:c8:fe:73:07:bc:1e:0c:95:57:5c:fd:7c:ae:2d:de:41:a1:
3c:a4:bc:fa:9f:41:31:d2:54:d5:5b:9a:c8:17:d3:11:45:ca:
03:73:4e:97:a1:7b:2e:ad:ab:29:36:13:59:22:6b:d6:a1:7e:
48:6b:f1:f8:b1:0f:7a:01:6d:de:c0:3d:d2:90:63:e2:d8:2c:
18:9d:f3:bd:96:42:2b:a9:32:6d:07:bb:5a:67:c7:fc:61:c7:
ba:3e:28:61:e4:5f:d0:3a:82:c4:01:66:83:17:a2:f3:68:ed:
84:c5:bd:9f:e0:d4:1b:b9:ec:b1:2b:bf:26:ed:70:a4:85:63:
e4:fa:b1:00:81:c1:f2:2c:0d:21:2a:1d:05:20:48:07:2f:f9:
7c:08:f5:38:70:e0:d6:3d:1d:d9:1a:18:71:39:64:a8:31:1f:
b0:8a:7b:6c:0d:c7:cc:cf:8d:dc:dd:d0:10:73:c7:30:e7:86:
67:cb:49:3f:ca:c7:b3:2b:ed:79:f0:0b:c8:35:be:d7:be:05:
81:65:7a:ee:20:9b:64:f1:5c:be:49:52:47:93:c4:bf:5b:2a:
83:a8:d6:d2:6b:3e:6c:c8:3a:d2:92:e5:5c:61:12:df:9e:32:
61:8f:75:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9otzvnq9JdxNMwRYpNHTo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzE2MDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTdhZDk0MDM2ZGZjOWIwNTU3YmFjNGUyNWQ4OTg3NWNmNmRmYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkF2FAM4b4pLwDIdGFHfHZ1UTPDL
/qoQaaofHwlVsJrYXelLjYEE0eUafwE1sohJuNruJbEiJO3I1+7Jo8loTCRCEqfO
CDYMDppvk/kcAdFHzA4UubwvuisQEe8+xSdJkf+YywKp43IMsfpdp9lkYnSVYYS5
LJs6wq8lTMmM5QlxHPFUURQP4KtMLMYHsnQ5zO2BBxfBLGys+Selis3FCqQYM+AP
UrL8DcmuFUhQSQ5/O5YGXv2C3JibufBVIY7cb2d6kLrs/44qFZT/xYyTrTvK5Fsk
7NWq7Qo+aKE0QKRTepeW7qkr9EP6jsOy/OoVUdqx9aM6wFr8amtcfhEMBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJV62UA238mwVXusTiXYmHXPbfxMMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvbFhyWlFEYmZ5YkJWZTZ4T0pkaVlkYzl0X0V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVb0dMA0G
CSqGSIb3DQEBCwUAA4IBAQAIcyTNLln0gDc7lZi23draOC+DyP5zB7weDJVXXP18
ri3eQaE8pLz6n0Ex0lTVW5rIF9MRRcoDc06XoXsuraspNhNZImvWoX5Ia/H4sQ96
AW3ewD3SkGPi2CwYnfO9lkIrqTJtB7taZ8f8Yce6Pihh5F/QOoLEAWaDF6LzaO2E
xb2f4NQbueyxK78m7XCkhWPk+rEAgcHyLA0hKh0FIEgHL/l8CPU4cODWPR3ZGhhx
OWSoMR+wintsDcfMz43c3dAQc8cw54Zny0k/ysezK+158AvINb7XvgWBZXruIJtk
8Vy+SVJHk8S/WyqDqNbSaz5syDrSkuVcYRLfnjJhj3WS
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:59:00 2026 by rpki-client