Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/z6ArXRIRhk0yAX4Mi4jgQdw71lE.roa
File: z6ArXRIRhk0yAX4Mi4jgQdw71lE.roa (raw, json)
Hash identifier: Y0imKoMGzumnwy1bIm8Q9GYklM1fBse0xpcYWrhIXTE=
Subject key identifier: CF:A0:2B:5D:12:11:86:4D:32:01:7E:0C:8B:88:E0:41:DC:3B:D6:51
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019FCC70D9D12DB0AA16A695E4EF8B8E3035
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/z6ArXRIRhk0yAX4Mi4jgQdw71lE.roa
Signing time: Tue 04 Aug 2026 11:02:55 +0000
ROA not before: Tue 04 Aug 2026 11:02:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 85.142.0.0/22 maxlen: 24
85.142.4.0/23 maxlen: 24
85.142.6.0/24 maxlen: 24
85.142.7.0/24 maxlen: 24
85.142.40.0/21 maxlen: 24
85.142.48.0/22 maxlen: 24
85.142.64.0/22 maxlen: 24
85.142.72.0/24 maxlen: 24
85.142.81.0/24 maxlen: 24
85.142.85.0/24 maxlen: 24
85.142.99.0/24 maxlen: 24
85.142.128.0/21 maxlen: 24
85.142.137.0/24 maxlen: 24
85.142.138.0/23 maxlen: 24
85.142.140.0/22 maxlen: 24
85.142.253.0/24 maxlen: 24
85.142.254.0/23 maxlen: 24
85.143.48.0/22 maxlen: 24
85.143.52.0/23 maxlen: 24
85.143.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:70:d9:d1:2d:b0:aa:16:a6:95:e4:ef:8b:8e:30:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Aug 4 11:02:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfa02b5d1211864d32017e0c8b88e041dc3bd651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:d3:ee:dc:1f:8d:1f:81:5f:ca:ea:2b:b8:
c1:62:08:2a:c9:16:d5:93:8b:0d:54:7f:1a:f3:55:
d7:85:00:73:4d:f4:54:35:1c:72:3f:ed:11:05:64:
18:b0:03:2e:0a:47:d7:86:63:56:fb:c2:35:14:0f:
ae:84:4f:ef:95:6d:ec:74:a2:6d:92:99:4d:a6:07:
58:1c:b1:e4:7c:72:fd:d7:70:fb:54:58:c4:90:39:
84:57:95:54:bd:d2:a8:59:bd:30:07:a9:f1:57:49:
34:54:f8:7f:85:e6:dc:a0:6c:a6:46:4c:8d:21:a8:
b5:62:8d:6d:ca:f2:78:20:b0:40:d0:b9:a7:6a:1b:
c6:f2:12:41:28:ca:bf:e1:8a:71:28:0a:cf:b0:cd:
72:cd:2c:30:13:43:c7:1b:94:b8:9b:c1:fe:98:ff:
99:3e:44:28:cd:d7:f5:52:fa:f5:df:34:01:2a:a8:
d6:68:cc:94:a8:2c:83:b1:68:c7:c0:e6:78:32:7a:
c2:24:71:14:e2:e8:8a:28:be:88:d9:2c:6a:46:92:
15:1b:31:3b:2b:52:7a:dc:ca:e2:72:c7:c6:6b:3e:
c3:07:23:7d:fe:d1:74:c9:84:1c:e1:d3:bb:cc:94:
bc:96:f1:0c:9f:c7:98:4c:7c:b4:84:05:67:e2:61:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A0:2B:5D:12:11:86:4D:32:01:7E:0C:8B:88:E0:41:DC:3B:D6:51
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/z6ArXRIRhk0yAX4Mi4jgQdw71lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.0.0/21
85.142.40.0-85.142.51.255
85.142.64.0/22
85.142.72.0/24
85.142.81.0/24
85.142.85.0/24
85.142.99.0/24
85.142.128.0/21
85.142.137.0-85.142.143.255
85.142.253.0-85.142.255.255
85.143.48.0-85.143.54.255
Signature Algorithm: sha256WithRSAEncryption
79:20:79:90:ae:c2:45:06:3c:8a:9f:35:22:6d:cf:fc:3d:9e:
61:c0:f9:05:df:25:1f:70:12:5c:d9:ee:30:94:dc:c8:d6:33:
a1:fc:58:69:ec:9e:7e:7f:44:54:e5:1e:3a:2e:fd:69:8d:bf:
80:f1:43:ac:67:51:00:3d:9b:ea:77:b9:22:db:84:df:3e:a2:
b1:46:52:cd:97:6f:d0:50:1f:56:75:80:7e:b5:d7:a5:e7:45:
ea:e3:61:08:b0:55:ab:bc:b3:d6:8a:d7:b2:89:51:08:80:c9:
3b:f6:b0:34:14:14:fa:58:1f:c7:21:2f:23:05:e8:89:fb:37:
81:3b:d9:2e:f2:dc:27:b9:9c:d8:72:ed:0e:98:6c:82:68:79:
d7:10:a3:fd:98:72:30:0e:ba:90:6f:0f:2f:7b:d9:df:7f:2d:
a5:67:ff:1e:7d:08:5d:3c:18:2f:74:6b:5b:7b:cf:92:a6:0b:
1a:a1:cb:93:21:cf:cb:2d:c5:e3:bd:3b:68:df:b4:7f:27:75:
09:e7:c0:03:14:20:11:8a:a7:ea:05:79:85:41:c8:33:d0:2f:
44:26:91:00:69:0a:03:a8:b1:4c:d5:d6:42:e8:45:0c:35:5b:
93:06:fd:39:6a:bd:4c:97:f3:98:8a:1a:a5:f4:dc:60:e5:d1:
83:08:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:45 2026 by rpki-client