Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/8ZUgqFd0NP_VZcfdHA5LoaByeGU.roa
File: 8ZUgqFd0NP_VZcfdHA5LoaByeGU.roa (raw, json)
Hash identifier: P2C9SvAyP1IS7iHZ2iUnCFhZhtU9eH+oUEiRkI0L144=
Subject key identifier: F1:95:20:A8:57:74:34:FF:D5:65:C7:DD:1C:0E:4B:A1:A0:72:78:65
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019FCC70DA4000A282573C72F894C1D12E0A
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/8ZUgqFd0NP_VZcfdHA5LoaByeGU.roa
Signing time: Tue 04 Aug 2026 11:02:55 +0000
ROA not before: Tue 04 Aug 2026 11:02:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.76.0/24 maxlen: 24
85.142.87.0/24 maxlen: 24
85.142.100.0/24 maxlen: 24
85.142.101.0/24 maxlen: 24
85.142.113.0/24 maxlen: 24
85.142.212.0/23 maxlen: 24
85.142.215.0/24 maxlen: 24
85.142.240.0/24 maxlen: 24
85.142.242.0/24 maxlen: 24
85.142.250.0/24 maxlen: 24
85.143.41.0/24 maxlen: 24
85.143.42.0/23 maxlen: 24
85.143.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:70:da:40:00:a2:82:57:3c:72:f8:94:c1:d1:2e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Aug 4 11:02:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f19520a8577434ffd565c7dd1c0e4ba1a0727865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:ac:8a:d6:7c:c2:78:6c:48:bd:de:28:d5:
bb:48:72:4b:4a:79:6a:6b:ad:c8:15:63:b5:a1:e4:
a3:f7:ca:39:1e:d4:89:6a:17:2b:d0:5c:ec:61:2d:
c5:7b:4b:d6:d1:ae:e6:b3:1b:3e:e0:78:c2:b3:69:
5f:ad:55:c3:69:9a:e6:fc:ba:01:11:7b:70:0c:7b:
58:8b:08:6c:e3:d5:a1:3a:e6:7c:75:29:ef:b5:67:
6a:88:25:f1:38:b3:86:03:20:d2:5e:94:f8:c3:61:
e0:08:6d:43:6a:05:86:8c:71:1e:92:a4:a1:76:c9:
f0:d3:88:72:00:a9:ea:c8:78:29:3c:48:de:28:41:
d1:bc:f4:c0:8c:4c:48:39:5b:da:fb:44:f5:a8:7c:
92:6a:b2:83:01:67:48:2a:82:32:8b:b5:86:9e:b4:
d7:ad:ac:7b:95:c1:bf:4a:7d:96:77:51:a8:51:95:
80:07:ce:5f:8b:19:57:ba:4e:a4:66:a0:61:42:a3:
42:22:62:c1:1b:86:d1:7f:a8:46:fe:fc:1c:48:c4:
14:85:2a:4d:9c:df:61:bb:b1:a1:9f:65:37:84:88:
fe:51:06:6b:29:5a:b7:22:14:a7:f3:23:af:39:1a:
97:2d:a6:93:0a:a9:6f:23:44:49:0f:fd:44:76:36:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:95:20:A8:57:74:34:FF:D5:65:C7:DD:1C:0E:4B:A1:A0:72:78:65
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/8ZUgqFd0NP_VZcfdHA5LoaByeGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.76.0/24
85.142.87.0/24
85.142.100.0/23
85.142.113.0/24
85.142.212.0/23
85.142.215.0/24
85.142.240.0/24
85.142.242.0/24
85.142.250.0/24
85.143.41.0-85.143.44.255
Signature Algorithm: sha256WithRSAEncryption
4e:06:47:78:08:e7:0b:ec:b8:40:14:54:77:2f:a1:79:ae:ae:
25:13:e9:97:3e:5a:57:c3:04:6b:e2:58:57:5f:60:96:12:92:
0f:3c:04:7f:e8:8a:96:17:c1:8a:9f:75:42:1d:38:c9:ff:8b:
e3:1a:60:9c:8b:c1:88:e4:c8:3d:46:3a:53:b6:a7:fd:e1:b4:
a9:a6:74:83:60:43:21:64:e2:88:49:fd:63:f8:62:09:9b:ec:
0c:f8:8b:f9:b8:73:de:9c:c2:2c:37:a1:54:f3:bb:cc:91:3a:
03:8d:65:d9:f6:3a:91:37:66:10:2a:bf:84:e2:b2:d4:4b:08:
51:74:c0:7a:66:e2:92:46:9e:ec:b1:72:fa:c2:ea:12:48:4c:
7b:16:78:76:81:62:03:2b:30:b7:38:d6:88:4d:0c:78:14:d1:
b0:6b:db:96:d9:db:56:fe:42:d7:48:8f:a6:bf:7a:33:f0:3a:
98:3f:a5:6a:28:10:b9:58:c6:79:a4:e1:73:ba:ca:1c:65:5a:
60:93:e8:69:b3:ed:7d:cf:a3:98:45:eb:d8:7a:3a:1d:dc:de:
99:43:7f:60:6a:ec:94:d5:7d:ad:ac:84:cc:04:57:e9:83:17:
34:e9:b1:bd:48:cf:a5:04:4f:63:ff:52:45:4b:1c:fd:08:1c:
21:d1:67:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:51 2026 by rpki-client