Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/u9L3Ca4qY0-dGsgZeXrXW-8mIA0.roa
File: u9L3Ca4qY0-dGsgZeXrXW-8mIA0.roa (raw, json)
Hash identifier: TwYwd+IzkvSOnVI4Cv+kbiuUXs20CSGaoY9cOlytmpw=
Subject key identifier: BB:D2:F7:09:AE:2A:63:4F:9D:1A:C8:19:79:7A:D7:5B:EF:26:20:0D
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01A11A9665D4609C9571729695AC0F5CB010
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/u9L3Ca4qY0-dGsgZeXrXW-8mIA0.roa
Signing time: Thu 08 Oct 2026 08:17:06 +0000
ROA not before: Thu 08 Oct 2026 08:17:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56534
IP address blocks: 82.179.248.0/22 maxlen: 22
85.142.82.0/24 maxlen: 24
85.142.88.0/22 maxlen: 24
85.142.92.0/22 maxlen: 24
85.142.136.0/24 maxlen: 24
85.142.147.0/24 maxlen: 24
85.142.164.0/22 maxlen: 22
85.142.168.0/21 maxlen: 21
85.142.176.0/22 maxlen: 22
85.142.192.0/22 maxlen: 24
85.142.208.0/22 maxlen: 22
85.142.231.0/24 maxlen: 24
85.142.236.0/22 maxlen: 24
85.142.244.0/24 maxlen: 24
85.142.252.0/24 maxlen: 24
85.143.144.0/22 maxlen: 22
85.143.160.0/21 maxlen: 21
85.143.176.0/22 maxlen: 22
85.143.184.0/22 maxlen: 22
85.143.203.0/24 maxlen: 24
85.143.204.0/22 maxlen: 22
85.143.250.0/24 maxlen: 24
85.143.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:96:65:d4:60:9c:95:71:72:96:95:ac:0f:5c:b0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Oct 8 08:17:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbd2f709ae2a634f9d1ac819797ad75bef26200d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:26:1a:f2:0c:d0:b7:0e:4b:3f:92:a2:2d:
67:39:50:09:8c:1b:98:da:1e:3f:30:97:b0:b3:b0:
14:44:12:07:cf:8e:54:73:05:f7:b7:90:b3:2f:dc:
25:85:f0:dd:c6:3b:30:77:49:b4:a1:d7:3b:00:b3:
67:94:90:52:32:ed:2f:7a:7b:9c:57:e9:f1:3a:e3:
13:49:30:71:f4:8d:2d:6c:0b:7d:80:53:d5:61:c2:
e8:4b:00:62:1d:be:7a:5a:82:49:e2:64:bc:9f:ee:
17:fb:1b:6a:c2:3e:b0:ca:2a:6b:35:61:76:57:71:
9e:b4:b0:dc:88:db:45:68:e8:e8:12:09:94:a2:3a:
3c:24:de:eb:dc:1e:9b:0c:25:b7:f0:db:70:a7:35:
8b:01:c0:19:4f:af:50:2e:1d:f8:4a:32:7d:62:ac:
5a:16:98:a3:87:ff:90:12:4b:16:3c:88:c2:fd:25:
01:9e:e6:58:15:76:e4:d1:2d:99:09:d7:3a:85:44:
55:b7:29:ff:80:65:6c:d4:bf:a3:71:56:7d:86:cd:
61:0a:65:ea:2c:45:f9:99:ac:fd:9c:f7:a5:54:ac:
3b:1d:d9:06:13:7a:89:7a:33:26:ca:ea:8f:d5:61:
9e:a2:a2:58:22:27:ad:3a:a9:0f:4a:05:0c:55:c3:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:F7:09:AE:2A:63:4F:9D:1A:C8:19:79:7A:D7:5B:EF:26:20:0D
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/u9L3Ca4qY0-dGsgZeXrXW-8mIA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.248.0/22
85.142.82.0/24
85.142.88.0/21
85.142.136.0/24
85.142.147.0/24
85.142.164.0-85.142.179.255
85.142.192.0/22
85.142.208.0/22
85.142.231.0/24
85.142.236.0/22
85.142.244.0/24
85.142.252.0/24
85.143.144.0/22
85.143.160.0/21
85.143.176.0/22
85.143.184.0/22
85.143.203.0-85.143.207.255
85.143.250.0/24
85.143.252.0/22
Signature Algorithm: sha256WithRSAEncryption
14:98:ae:eb:5b:b5:19:86:43:00:89:7b:fe:16:b8:d9:5f:6b:
14:53:47:4f:b4:2e:df:5a:6c:c2:cd:8e:8c:37:64:71:59:a2:
e4:59:0a:44:98:cf:e4:0c:58:ad:41:dd:af:52:07:60:78:b8:
79:0e:6e:1b:d0:86:7d:7d:f4:a3:e2:17:b1:d8:b5:c7:55:4d:
0c:18:b0:36:2e:01:41:5e:00:2e:ad:e8:0d:1a:79:f3:cd:bd:
e4:1e:63:ad:cf:85:de:1d:48:24:cf:bc:29:d0:4b:de:1a:20:
f4:b9:e3:91:1c:a5:08:31:7f:f0:f5:cd:89:d5:73:12:6b:40:
60:b2:20:03:02:bb:6a:45:b2:1c:c2:5b:fd:91:2c:81:6d:0d:
10:01:87:e7:ea:2a:f8:c3:2e:9b:1b:0e:8f:99:98:e0:e4:fe:
24:f9:d3:6d:32:8e:2e:69:44:17:14:0b:14:f5:6c:f2:f4:e6:
40:b6:25:81:eb:71:da:97:6b:1b:42:53:ac:d5:4c:89:7b:9d:
3e:c7:46:39:58:4c:d2:2b:47:69:4f:f8:d2:be:ce:76:56:98:
2d:76:62:d5:71:3c:6e:8a:7e:53:c3:7c:73:62:5e:5e:e2:2a:
8e:af:a6:cb:c2:1e:c0:b7:0c:33:e5:e6:73:0b:74:0d:74:4e:
d7:9c:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:46 2026 by rpki-client