Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uMi3fk8WIs2HBXUdhtjVRu7COr8.roa
File: uMi3fk8WIs2HBXUdhtjVRu7COr8.roa (raw, json)
Hash identifier: dzQidXeY0rpXmlpwOMgk48wScCyGFYrLePsMz+Vw3cI=
Subject key identifier: B8:C8:B7:7E:4F:16:22:CD:87:05:75:1D:86:D8:D5:46:EE:C2:3A:BF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A060D58532B9C507AF60743D51013EA261
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uMi3fk8WIs2HBXUdhtjVRu7COr8.roa
Signing time: Wed 02 Sep 2026 06:36:41 +0000
ROA not before: Wed 02 Sep 2026 06:36:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139659
IP address blocks: 85.189.40.0/23 maxlen: 24
85.189.44.0/23 maxlen: 24
85.189.54.0/23 maxlen: 24
85.189.58.0/23 maxlen: 24
85.189.66.0/23 maxlen: 24
85.189.70.0/23 maxlen: 24
85.189.80.0/23 maxlen: 24
85.189.88.0/23 maxlen: 24
87.84.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:d5:85:32:b9:c5:07:af:60:74:3d:51:01:3e:a2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 2 06:36:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8c8b77e4f1622cd8705751d86d8d546eec23abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:36:3f:d6:aa:13:a7:21:30:34:ce:8e:39:
45:88:a8:16:4d:7a:4f:30:2c:da:1c:3d:b1:f2:46:
44:e7:54:67:25:46:8d:73:92:c0:5f:1a:b5:e4:71:
6b:f3:6f:fa:4a:8d:07:9b:93:2e:30:3d:5f:10:d2:
8c:6d:fa:a2:9c:f6:54:9b:ed:2c:13:5b:dc:c3:35:
a6:8c:9d:57:e2:24:6d:42:4d:b0:ec:7d:0c:6c:54:
73:fe:83:90:d0:28:ec:09:cf:3f:4d:26:38:c9:6d:
0c:20:33:82:78:1e:97:a4:fc:b6:f2:25:3a:be:ca:
08:5b:15:69:8a:c8:74:14:9d:8c:e7:7f:68:3e:28:
57:04:16:25:8f:23:ce:0f:2c:2f:42:ea:9b:59:b1:
11:e2:c3:f5:1e:c7:fe:bc:4c:c5:b6:b5:7a:7a:9a:
76:ab:fe:4d:ac:d6:78:bc:84:83:41:3f:2d:88:44:
61:fd:0b:b2:f2:19:f2:6c:c1:8c:f1:9a:10:0d:ad:
fb:f7:c7:2c:fa:5a:24:cd:14:f1:ad:64:8d:19:a0:
b1:62:01:87:a6:a6:21:82:98:47:2b:fb:05:ac:fb:
c6:a1:12:45:18:ae:36:ec:78:19:f2:87:e2:f8:db:
ae:ff:f1:7f:a9:64:8c:4d:6f:4f:3f:67:55:5d:d4:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C8:B7:7E:4F:16:22:CD:87:05:75:1D:86:D8:D5:46:EE:C2:3A:BF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uMi3fk8WIs2HBXUdhtjVRu7COr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.40.0/23
85.189.44.0/23
85.189.54.0/23
85.189.58.0/23
85.189.66.0/23
85.189.70.0/23
85.189.80.0/23
85.189.88.0/23
87.84.190.0/23
Signature Algorithm: sha256WithRSAEncryption
28:0e:2f:80:db:6c:de:4d:85:24:ec:68:f0:85:30:de:02:e3:
4e:b8:26:35:ab:14:f3:04:dc:e8:f1:ff:88:d5:4a:c6:19:ad:
67:ba:ac:28:09:0d:8b:6a:b9:e1:d9:7f:c1:6f:8f:b0:0a:70:
6f:f4:ae:a7:01:b5:ab:ca:45:7e:4e:f0:f3:7d:7b:1d:02:20:
f3:fa:f4:ed:06:25:65:69:b1:be:2d:1f:0c:8a:35:fc:e3:c5:
9c:60:dd:88:f6:3a:f6:0e:1b:75:a9:9e:e4:cf:9f:a2:c2:3b:
b4:5f:35:dc:6a:73:ac:5b:8c:a5:2a:78:62:c1:c2:f0:2a:77:
c6:0f:b1:c7:7f:42:83:a3:5e:a4:bf:ec:d8:24:fb:12:81:37:
4a:33:6f:50:65:f1:f4:3b:55:de:07:d1:91:0a:07:fa:20:da:
6a:11:75:c7:9c:5d:7c:a8:bc:18:be:23:cf:a4:a1:be:2a:2e:
39:ea:d2:0f:97:a7:0e:bb:f8:f8:95:99:22:4b:0e:fc:2f:5f:
97:88:fb:42:9e:3e:8a:8d:e5:c8:2c:1c:1b:68:23:0b:4b:1d:
38:59:2b:d5:d1:3c:ca:7d:07:df:05:43:1a:0c:6d:ac:7a:f4:
08:c5:cb:ea:52:7a:03:a3:7d:4c:56:5b:60:be:9a:8d:bd:83:
fd:b3:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:15 2026 by rpki-client