Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rT73wGkId9VbinrOf5544km6LEI.roa
File: rT73wGkId9VbinrOf5544km6LEI.roa (raw, json)
Hash identifier: GF0OwJYLb5m/+gEsuOJeer0Swu7QgJR6WI5LusBSe8Y=
Subject key identifier: AD:3E:F7:C0:69:08:77:D5:5B:8A:7A:CE:7F:9E:78:E2:49:BA:2C:42
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0DE556A62FA5203A01E251E2978DB7E4C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rT73wGkId9VbinrOf5544km6LEI.roa
Signing time: Sat 26 Sep 2026 15:28:54 +0000
ROA not before: Sat 26 Sep 2026 15:28:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198077
IP address blocks: 85.208.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:55:6a:62:fa:52:03:a0:1e:25:1e:29:78:db:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 26 15:28:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad3ef7c0690877d55b8a7ace7f9e78e249ba2c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:e9:95:62:f0:e0:f4:81:f0:51:97:92:bb:
78:41:3a:e4:0f:d8:3d:40:97:44:02:65:51:76:a8:
58:39:bc:27:a8:26:c2:08:1d:0f:b9:fe:8f:69:42:
2c:5d:a3:a3:ea:2a:47:c3:e2:c8:2a:d3:fb:6e:83:
7c:38:60:5e:2f:e3:92:57:1b:30:d7:b6:c5:10:dd:
ff:4f:49:f4:7c:93:48:8d:bc:99:b8:a1:10:16:45:
7f:23:9e:b8:1c:53:a4:be:29:15:b9:21:70:fe:64:
b2:09:e2:02:b8:b6:f9:39:bc:6b:48:0d:8d:a1:ae:
f3:10:35:12:d2:6c:31:51:30:5b:46:41:18:b6:3c:
2b:77:b8:9c:07:77:7c:2d:2c:c6:6b:8f:ae:9f:47:
cd:67:12:3a:16:2d:06:d1:6c:af:f4:da:8b:08:69:
cd:d5:d7:63:e5:1a:1a:e8:98:07:db:ae:d2:e7:f5:
98:74:f4:06:85:54:e6:3c:5a:6e:ba:8e:d9:d8:b3:
ae:05:9d:7d:1e:f1:93:c8:b4:f5:e1:06:d1:61:d2:
ad:09:dd:01:c5:bc:cd:c7:34:eb:90:7d:78:81:0b:
9a:32:04:07:eb:86:b1:2e:c8:63:69:39:0d:bd:69:
7c:bc:c3:df:70:d2:ab:14:6f:cd:45:15:0a:13:5b:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3E:F7:C0:69:08:77:D5:5B:8A:7A:CE:7F:9E:78:E2:49:BA:2C:42
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rT73wGkId9VbinrOf5544km6LEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:79:d4:80:55:40:4b:42:e8:b8:a5:3c:0c:67:fc:4e:f6:99:
4f:bc:9a:eb:56:25:ec:c0:a7:58:ba:38:bf:a3:1f:2d:ef:0d:
c7:74:e3:3a:af:6c:7d:45:97:9d:56:b9:df:75:84:da:ff:95:
25:b4:ba:83:22:82:d3:fc:2c:53:3b:17:13:63:3b:e0:73:18:
f0:e4:b5:95:f7:42:0e:26:62:83:2b:01:18:4a:3a:82:19:5a:
16:9f:54:2f:da:2c:ef:39:ed:64:cc:c7:31:42:22:a6:6a:60:
53:d5:49:36:e1:f2:76:2f:1e:c5:43:a1:4c:d4:9e:f8:5d:7d:
ec:d5:5a:7a:ce:af:2d:c9:f3:bd:a7:4d:91:79:c0:1b:56:9f:
e9:b3:67:a0:f9:c4:e1:57:99:49:c6:40:37:db:04:c1:42:d0:
4e:b1:56:f5:bb:32:38:d7:a2:10:a1:d3:da:b7:71:aa:65:8c:
f4:83:6c:d0:25:ed:04:f0:9a:c5:a7:75:8d:cf:c1:78:6a:ef:
fe:74:d2:9d:ea:fc:1a:01:b7:ff:8d:d6:e0:9a:af:d7:c7:56:
8c:73:a7:91:ec:d1:20:89:30:f3:38:31:90:ca:5f:da:47:45:
74:38:3d:fa:5b:d9:f9:7d:2a:7d:53:dc:fb:5a:8c:41:ff:27:
8b:18:ff:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:34 2026 by rpki-client