Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LRtzzyFxC4GarqKUVWllM8XIw9g.roa
File: LRtzzyFxC4GarqKUVWllM8XIw9g.roa (raw, json)
Hash identifier: 5RWtrtV9ZHwm9f3tCdWycb/4O9C3MRmeDtQe+s7YiY0=
Subject key identifier: 2D:1B:73:CF:21:71:0B:81:9A:AE:A2:94:55:69:65:33:C5:C8:C3:D8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019FF5C75E3BE856DFC89517617F633753D0
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LRtzzyFxC4GarqKUVWllM8XIw9g.roa
Signing time: Wed 12 Aug 2026 11:41:51 +0000
ROA not before: Wed 12 Aug 2026 11:41:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142473
IP address blocks: 85.208.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:c7:5e:3b:e8:56:df:c8:95:17:61:7f:63:37:53:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 12 11:41:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d1b73cf21710b819aaea29455696533c5c8c3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:fa:78:49:07:87:05:9a:15:82:ed:55:53:
c3:8d:18:eb:87:39:e2:dd:eb:89:20:b0:94:2e:b9:
92:32:0c:49:0e:af:cb:75:f6:b1:3c:12:6c:de:31:
11:4d:7d:75:52:ac:6c:d0:9e:ab:d1:33:a2:8e:e3:
f2:39:86:09:61:59:af:33:32:c4:4d:66:51:d3:bf:
50:e5:76:18:9b:57:ce:88:5a:bc:2d:34:f3:2e:ec:
85:2d:de:1a:ef:31:d8:b1:09:ad:1a:26:d4:b2:f0:
32:4e:7a:ce:3c:74:77:ad:5e:c0:b6:66:9a:62:f7:
13:b6:5b:20:1a:1f:f6:c3:fa:23:17:b0:19:ed:00:
3c:c0:af:ac:c9:43:02:3a:0a:3b:30:2e:5e:e9:05:
09:03:f1:29:39:c4:f9:07:b6:6b:d7:10:10:5c:da:
b5:ee:5c:7b:ff:db:27:8d:1b:47:70:45:db:3e:9c:
a5:2f:77:c3:1d:ef:15:2e:8a:50:b7:cd:40:c5:be:
8c:02:64:9c:bd:3b:e4:94:96:8c:f1:1f:d0:7e:74:
fd:e6:98:f9:27:7e:c2:eb:3f:8f:85:96:fc:99:d3:
ec:4c:f9:69:b6:ef:b8:7b:b0:8b:00:69:10:3f:e2:
30:43:a8:69:d0:4d:2a:f3:77:7b:46:a4:d2:b8:0d:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1B:73:CF:21:71:0B:81:9A:AE:A2:94:55:69:65:33:C5:C8:C3:D8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LRtzzyFxC4GarqKUVWllM8XIw9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.113.0/24
Signature Algorithm: sha256WithRSAEncryption
76:70:f9:82:e3:cf:98:40:0a:f8:20:e2:b7:ca:85:1d:88:0a:
ae:2b:49:dd:47:40:dc:c4:ba:16:c2:90:b7:a6:d1:8a:9f:1f:
b5:26:51:f1:4c:cc:9b:78:39:00:84:2f:76:98:e8:5f:b9:bb:
80:bb:7f:55:ef:38:77:a1:ca:5d:28:dc:ee:7e:28:5d:04:66:
a1:09:e7:a3:2b:ca:18:52:16:7e:1c:65:db:df:3b:06:50:47:
df:dd:47:3b:9c:12:1d:25:b3:56:3e:0e:9c:f7:ad:0d:bf:db:
d6:9e:19:57:82:60:ee:26:88:ce:b7:97:7e:20:b9:ed:33:58:
4a:06:dc:38:80:20:96:fa:c6:70:80:0d:ee:8b:0c:8f:ec:62:
d1:d8:83:b7:8c:7f:c6:cc:6b:b6:b1:bf:f2:cc:4a:4b:72:c6:
71:72:64:8d:10:6e:48:25:1a:ff:f4:b8:dc:5c:88:fc:98:28:
2b:36:ae:1a:fa:6b:3c:15:68:e8:c7:95:28:3c:86:3d:1a:94:
2a:4b:02:81:d1:fe:a9:c0:44:97:34:e4:5c:af:b8:6b:08:a0:
27:fb:70:e6:7b:30:b5:1a:70:a6:0e:f3:65:65:07:62:c4:e4:
0a:96:42:eb:e5:79:84:68:41:2d:b5:f7:1c:20:01:4f:b6:35:
14:c3:df:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/1x1476FbfyJUXYX9jN1PQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwODEyMTE0MTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDFiNzNjZjIxNzEwYjgxOWFhZWEyOTQ1NTY5NjUzM2M1YzhjM2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyf6eEkHhwWaFYLtVVPDjRjrhzni
3euJILCULrmSMgxJDq/LdfaxPBJs3jERTX11Uqxs0J6r0TOijuPyOYYJYVmvMzLE
TWZR079Q5XYYm1fOiFq8LTTzLuyFLd4a7zHYsQmtGibUsvAyTnrOPHR3rV7Atmaa
YvcTtlsgGh/2w/ojF7AZ7QA8wK+syUMCOgo7MC5e6QUJA/EpOcT5B7Zr1xAQXNq1
7lx7/9snjRtHcEXbPpylL3fDHe8VLopQt81Axb6MAmScvTvklJaM8R/QfnT95pj5
J37C6z+PhZb8mdPsTPlptu+4e7CLAGkQP+IwQ6hp0E0q83d7RqTSuA1vHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC0bc88hcQuBmq6ilFVpZTPFyMPYMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvTFJ0enp5RnhDNEdhcnFLVVZXbGxNOFhJdzlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdBxMA0G
CSqGSIb3DQEBCwUAA4IBAQB2cPmC48+YQAr4IOK3yoUdiAquK0ndR0DcxLoWwpC3
ptGKnx+1JlHxTMybeDkAhC92mOhfubuAu39V7zh3ocpdKNzufihdBGahCeejK8oY
UhZ+HGXb3zsGUEff3Uc7nBIdJbNWPg6c960Nv9vWnhlXgmDuJojOt5d+ILntM1hK
Btw4gCCW+sZwgA3uiwyP7GLR2IO3jH/GzGu2sb/yzEpLcsZxcmSNEG5IJRr/9Ljc
XIj8mCgrNq4a+ms8FWjox5UoPIY9GpQqSwKB0f6pwESXNORcr7hrCKAn+3DmezC1
GnCmDvNlZQdixOQKlkLr5XmEaEEttfccIAFPtjUUw99m
-----END CERTIFICATE-----
Generated at Thu Aug 20 10:21:44 2026 by rpki-client