Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/wDVVsACpsiR5l1cTOi-d9O7OwNM.roa
File: wDVVsACpsiR5l1cTOi-d9O7OwNM.roa (raw, json)
Hash identifier: brl42J6QrRGQ7zMiwW/xpTyzUuzmwf2YtA561oH5iPo=
Subject key identifier: C0:35:55:B0:00:A9:B2:24:79:97:57:13:3A:2F:9D:F4:EE:CE:C0:D3
Certificate issuer: /CN=75caad9dd336f82019093693607cb9ed2f990d71
Certificate serial: 019F236864DC17D773146BE003C07CE9DDBA
Authority key identifier: 75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/wDVVsACpsiR5l1cTOi-d9O7OwNM.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 85.118.208.0/24 maxlen: 24
85.118.209.0/24 maxlen: 24
85.118.210.0/24 maxlen: 24
85.118.211.0/24 maxlen: 24
85.118.212.0/24 maxlen: 24
85.118.213.0/24 maxlen: 24
85.118.214.0/24 maxlen: 24
85.118.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:64:dc:17:d7:73:14:6b:e0:03:c0:7c:e9:dd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caad9dd336f82019093693607cb9ed2f990d71
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c03555b000a9b224799757133a2f9df4eecec0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:eb:fc:80:00:e4:3a:6b:f5:12:4b:fd:9e:37:
42:20:9a:84:fa:71:75:a8:82:6a:ac:a7:5f:7b:2d:
18:38:4c:79:27:6a:22:8a:9e:fa:30:3f:25:37:ba:
91:b7:7e:5a:95:d2:9e:f8:08:d9:6c:2f:b5:56:39:
64:b3:f3:d6:39:ed:ec:ce:65:10:5f:35:25:df:f2:
07:4b:0e:f8:bb:13:a2:f6:eb:92:45:1f:6f:71:d2:
56:ce:4b:8d:b8:1f:e4:6e:a5:b3:93:c3:b9:6c:67:
33:78:c5:ec:2d:52:e1:2c:88:1b:8f:f4:7c:3a:ec:
b7:1b:71:dc:fd:af:24:cf:bc:88:b4:93:09:82:32:
8e:ab:d1:6a:08:f1:5e:2d:7b:b8:ed:14:d8:85:8e:
d7:4b:ba:01:29:65:9e:c3:4e:0a:3b:0f:8e:e1:ac:
f9:5f:48:46:03:6b:f3:7b:79:66:9e:d9:18:20:38:
8e:98:dc:49:45:65:23:f1:75:52:5b:f9:43:0b:93:
c5:70:61:10:f7:1e:79:85:ef:14:c7:85:34:58:54:
1f:46:b2:ff:7d:e3:bc:01:89:89:85:fb:da:dd:df:
7b:13:af:01:0d:6a:b6:09:94:e9:96:f0:58:43:da:
e8:ca:95:22:5a:24:e3:ad:25:f0:1d:12:41:ef:ad:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:35:55:B0:00:A9:B2:24:79:97:57:13:3A:2F:9D:F4:EE:CE:C0:D3
X509v3 Authority Key Identifier:
keyid:75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/wDVVsACpsiR5l1cTOi-d9O7OwNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.208.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:71:c3:51:8c:4f:54:c1:11:a0:c3:d3:fe:b6:26:80:0e:6d:
70:5b:d0:e6:8d:27:c6:3c:f1:9f:af:8e:a1:bf:7b:04:2f:31:
a8:56:dc:e8:3b:21:07:c5:fc:a9:3f:64:26:1a:6d:ee:18:dc:
e1:71:b5:14:8a:47:1d:53:bd:1a:a7:39:82:f4:bb:5c:3c:b2:
a3:be:2d:68:23:5b:c4:3d:6e:d1:40:a3:59:e5:65:d0:1c:3a:
5a:55:a7:06:5f:9a:28:9b:96:2c:10:43:c9:ed:a0:92:6d:f4:
17:a0:2c:55:ef:e8:4e:6e:5a:09:e4:fa:02:32:67:15:4c:15:
b6:99:0c:20:51:85:8c:dd:be:32:1c:9a:25:b6:4b:67:9b:5f:
29:73:7b:23:63:66:e0:38:20:af:2a:be:6c:5a:56:82:e3:9d:
00:57:8f:c0:69:35:cd:72:d5:0c:4b:c5:7e:99:6a:76:cb:79:
46:73:32:a8:f4:bd:46:7c:c8:36:30:2a:5b:24:6b:66:48:29:
a3:3b:56:68:e8:8e:bc:23:84:c7:29:4b:81:0d:55:0d:d0:8d:
30:3d:2b:d5:c6:23:df:b8:4f:a0:ec:56:5e:7e:11:fb:9b:94:
9c:56:bc:2a:f8:11:36:e1:00:c2:af:32:10:e8:07:26:7f:3b:
18:3d:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:29 2026 by rpki-client