Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EuR_kqkhy805Kl5iYYcx5JFu_38.roa
File: EuR_kqkhy805Kl5iYYcx5JFu_38.roa (raw, json)
Hash identifier: jboFY1F3ko4whA6WH4jxosVKrs7kw3w1Xkt8GTp/iIQ=
Subject key identifier: 12:E4:7F:92:A9:21:CB:CD:39:2A:5E:62:61:87:31:E4:91:6E:FF:7F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019CBD6C74D4D0C38D584AAFD9467494526B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EuR_kqkhy805Kl5iYYcx5JFu_38.roa
Signing time: Thu 05 Mar 2026 09:55:27 +0000
ROA not before: Thu 05 Mar 2026 09:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 85.208.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:6c:74:d4:d0:c3:8d:58:4a:af:d9:46:74:94:52:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 5 09:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12e47f92a921cbcd392a5e62618731e4916eff7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:3c:23:88:da:52:05:14:2d:b0:a6:66:6a:
12:84:2b:ab:90:fb:5f:dc:6d:7f:d9:c4:71:cb:99:
23:e0:80:ad:c9:60:c3:99:17:94:4c:e4:e8:ee:8d:
b7:00:bd:70:6e:38:a0:f4:4a:30:69:c0:5a:53:91:
f2:26:46:b6:2b:17:04:43:9a:04:a7:37:a8:dc:79:
e7:3a:bc:03:35:3b:ff:34:04:26:60:cd:4a:d8:fa:
be:75:13:96:23:ec:a0:db:4f:86:30:31:4f:0d:b4:
ed:00:82:b2:8c:9a:d3:ed:5d:00:56:00:ed:b2:d0:
24:ca:35:3a:de:1c:1c:cd:68:4d:8a:6a:ff:69:c8:
90:9b:b9:c1:d9:63:bb:da:5f:64:76:92:5b:c5:81:
c5:0f:04:db:ee:47:b3:aa:a2:fb:22:73:ef:ca:66:
04:e2:1c:08:a8:9f:cb:05:e9:96:84:48:61:86:06:
7a:e8:c4:37:5a:87:1a:9a:e7:6d:8a:c9:8b:3c:f7:
5e:f1:90:7e:79:35:87:00:56:f7:b7:58:91:e1:f6:
95:f2:bb:45:12:e2:a4:02:d0:13:1e:5e:27:71:bd:
b6:20:5d:cb:84:52:8e:03:81:96:d8:7d:19:c5:55:
57:43:2b:1f:c8:d1:9c:a3:6d:72:11:21:f3:8f:14:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:7F:92:A9:21:CB:CD:39:2A:5E:62:61:87:31:E4:91:6E:FF:7F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EuR_kqkhy805Kl5iYYcx5JFu_38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:48:e7:43:d6:5b:14:9c:db:17:d7:42:f0:f6:b8:8d:ce:80:
a6:7c:f2:10:3a:ce:b1:7c:ac:a2:cb:56:c4:ba:6e:1d:b0:b4:
7f:5c:d9:0c:7e:b6:b0:61:88:49:dd:75:5c:4e:18:23:99:2e:
fc:c2:81:58:2c:3c:59:02:ce:c3:31:85:6e:b6:41:24:ec:c2:
b7:09:70:a8:bc:23:f8:88:c3:f3:79:f5:01:a0:58:1c:68:d4:
4b:47:26:6a:b4:c6:32:b9:dd:c8:cf:d8:5a:f8:5a:4e:e7:36:
00:9a:a8:cf:89:c6:bd:80:ee:a9:40:8e:fa:2c:ea:a1:d6:5b:
c7:37:a6:58:46:b2:b5:51:46:4a:c6:08:c3:11:6b:c7:06:30:
9e:cb:35:16:b0:cb:5a:d2:8d:89:70:25:17:36:fa:ce:50:ca:
78:ea:96:ec:56:4e:e0:af:39:b4:b6:2d:27:76:f5:e6:03:c9:
81:77:97:67:ed:04:54:e7:c5:06:c5:82:43:68:4c:87:49:f1:
f6:fc:02:38:a0:71:8e:12:ea:a0:f4:1e:eb:f5:42:aa:50:31:
6b:7c:96:f1:c4:6b:77:85:40:97:27:e2:b0:9f:b4:00:05:ab:
a7:2b:6f:a2:89:cd:21:9b:c4:c5:48:8d:ed:76:87:a0:bb:e6:
08:1d:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:42:36 2026 by rpki-client