Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/cq34xzctLYqO4YHpg8mI18UOe54.roa
File: cq34xzctLYqO4YHpg8mI18UOe54.roa (raw, json)
Hash identifier: 0aujtvTQc2NNmpQ8QZDl9cSHbe7wcJMt7msXFOTCM14=
Subject key identifier: 72:AD:F8:C7:37:2D:2D:8A:8E:E1:81:E9:83:C9:88:D7:C5:0E:7B:9E
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019FEBA5AE6BA07A135898A6CF7D567ABE23
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/cq34xzctLYqO4YHpg8mI18UOe54.roa
Signing time: Mon 10 Aug 2026 12:28:51 +0000
ROA not before: Mon 10 Aug 2026 12:28:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13150
IP address blocks: 85.255.16.0/24 maxlen: 24
85.255.17.0/24 maxlen: 24
85.255.18.0/24 maxlen: 24
85.255.19.0/24 maxlen: 24
85.255.20.0/24 maxlen: 24
85.255.21.0/24 maxlen: 24
85.255.22.0/24 maxlen: 24
85.255.23.0/24 maxlen: 24
85.255.24.0/24 maxlen: 24
85.255.25.0/24 maxlen: 24
85.255.26.0/24 maxlen: 24
85.255.27.0/24 maxlen: 24
85.255.28.0/24 maxlen: 24
85.255.29.0/24 maxlen: 24
85.255.30.0/24 maxlen: 24
85.255.31.0/24 maxlen: 24
159.117.224.0/24 maxlen: 24
159.117.225.0/24 maxlen: 24
159.117.226.0/24 maxlen: 24
159.117.227.0/24 maxlen: 24
159.117.228.0/24 maxlen: 24
159.117.229.0/24 maxlen: 24
159.117.230.0/24 maxlen: 24
159.117.231.0/24 maxlen: 24
159.117.232.0/24 maxlen: 24
159.117.233.0/24 maxlen: 24
159.117.234.0/24 maxlen: 24
159.117.235.0/24 maxlen: 24
159.117.236.0/24 maxlen: 24
159.117.237.0/24 maxlen: 24
159.117.238.0/24 maxlen: 24
159.117.239.0/24 maxlen: 24
159.117.240.0/24 maxlen: 24
159.117.241.0/24 maxlen: 24
159.117.242.0/24 maxlen: 24
159.117.243.0/24 maxlen: 24
159.117.244.0/24 maxlen: 24
159.117.245.0/24 maxlen: 24
159.117.246.0/24 maxlen: 24
159.117.247.0/24 maxlen: 24
159.117.248.0/24 maxlen: 24
159.117.249.0/24 maxlen: 24
185.114.120.0/24 maxlen: 24
185.114.121.0/24 maxlen: 24
185.114.122.0/24 maxlen: 24
185.114.123.0/24 maxlen: 24
209.206.0.0/24 maxlen: 24
209.206.1.0/24 maxlen: 24
209.206.2.0/24 maxlen: 24
209.206.3.0/24 maxlen: 24
209.206.4.0/24 maxlen: 24
209.206.5.0/24 maxlen: 24
209.206.6.0/24 maxlen: 24
209.206.7.0/24 maxlen: 24
209.206.8.0/24 maxlen: 24
209.206.9.0/24 maxlen: 24
209.206.10.0/24 maxlen: 24
209.206.11.0/24 maxlen: 24
209.206.12.0/24 maxlen: 24
209.206.13.0/24 maxlen: 24
209.206.14.0/24 maxlen: 24
209.206.15.0/24 maxlen: 24
209.206.16.0/24 maxlen: 24
209.206.17.0/24 maxlen: 24
209.206.18.0/24 maxlen: 24
209.206.19.0/24 maxlen: 24
209.206.20.0/24 maxlen: 24
209.206.21.0/24 maxlen: 24
209.206.22.0/24 maxlen: 24
209.206.23.0/24 maxlen: 24
209.206.24.0/24 maxlen: 24
209.206.25.0/24 maxlen: 24
209.206.26.0/24 maxlen: 24
209.206.27.0/24 maxlen: 24
209.206.28.0/24 maxlen: 24
209.206.29.0/24 maxlen: 24
209.206.30.0/24 maxlen: 24
209.206.31.0/24 maxlen: 24
216.252.176.0/24 maxlen: 24
216.252.177.0/24 maxlen: 24
216.252.178.0/24 maxlen: 24
216.252.179.0/24 maxlen: 24
216.252.180.0/24 maxlen: 24
216.252.181.0/24 maxlen: 24
216.252.182.0/24 maxlen: 24
216.252.183.0/24 maxlen: 24
216.252.184.0/24 maxlen: 24
216.252.185.0/24 maxlen: 24
216.252.186.0/24 maxlen: 24
216.252.187.0/24 maxlen: 24
216.252.188.0/24 maxlen: 24
216.252.189.0/24 maxlen: 24
216.252.190.0/24 maxlen: 24
216.252.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:a5:ae:6b:a0:7a:13:58:98:a6:cf:7d:56:7a:be:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Aug 10 12:28:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72adf8c7372d2d8a8ee181e983c988d7c50e7b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:95:bd:6e:5f:8a:04:46:cb:a4:da:6d:9d:
20:64:5a:57:45:2c:4e:26:34:0a:4f:d0:1c:e8:3a:
e0:c9:da:ee:a9:15:80:dc:e5:ac:3f:9f:45:0b:c0:
53:a7:d9:b3:77:10:6f:2b:87:5e:e4:f0:31:55:b6:
40:78:fa:fb:c7:60:8f:71:3f:3b:48:db:0e:f2:ec:
9d:b7:ae:4c:da:2c:83:6f:4a:3c:88:12:58:84:bf:
b6:53:30:f8:1c:b4:85:dc:4f:e3:ce:d8:21:70:8d:
eb:e2:75:dc:68:dc:a7:41:7b:54:b0:fd:c9:61:e0:
34:6d:37:a5:2f:9a:cb:db:fc:4b:c5:04:83:56:d2:
6f:c6:9f:2f:2a:d9:c8:ff:f6:43:6d:51:89:32:cc:
a4:d0:12:88:7a:1a:58:d3:18:31:b3:d7:63:0a:f9:
96:4a:89:93:fc:49:6a:ee:d0:a4:ae:75:da:97:bf:
41:ce:8e:d6:2d:20:62:a1:9a:5b:38:52:a2:16:57:
b8:d3:96:49:3f:83:47:68:3a:ae:ed:e4:55:79:18:
d9:66:04:da:c5:e8:61:f9:91:3f:bd:db:91:d9:c1:
9c:9a:8f:38:d4:60:7b:a3:47:5b:af:66:75:59:79:
77:9c:d9:3e:c7:fd:28:7a:90:0e:c6:bd:d9:6e:d1:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:F8:C7:37:2D:2D:8A:8E:E1:81:E9:83:C9:88:D7:C5:0E:7B:9E
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/cq34xzctLYqO4YHpg8mI18UOe54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.16.0/20
159.117.224.0-159.117.249.255
185.114.120.0/22
209.206.0.0/19
216.252.176.0/20
Signature Algorithm: sha256WithRSAEncryption
93:d5:3e:88:4b:9a:ae:74:98:2c:15:d3:b0:f5:59:4c:9d:08:
6d:4b:a3:91:53:c1:61:7c:dc:12:86:be:3c:70:76:e6:8a:a8:
53:1f:5a:3c:a4:c9:e6:41:ac:4c:d3:c0:d9:a1:d0:3e:2b:74:
6a:9d:c9:8f:0b:6b:79:3c:6d:3e:63:02:16:94:4e:44:4a:8d:
6f:49:4f:0c:92:cd:10:97:c6:06:e3:af:57:6f:07:e1:ce:c1:
e5:55:d3:5d:27:6f:c9:a2:74:4a:77:62:1e:c7:38:1d:df:f7:
f3:fa:1f:9a:c8:d3:70:37:47:02:54:e6:72:25:3c:7d:66:58:
8a:b8:eb:3d:53:06:f2:86:d4:5e:70:72:17:af:b7:6f:68:f5:
48:fc:58:61:85:dc:ca:df:a5:ad:e2:fb:6c:af:a7:20:da:2e:
91:9d:e9:24:15:67:d5:05:79:c9:fd:72:49:a3:12:f0:aa:02:
40:0b:5a:63:8d:67:b2:91:f3:6b:c2:59:b4:79:dc:dc:3c:f9:
de:7b:9c:d0:09:9f:2d:9f:5e:f2:2b:c4:03:5e:c9:4e:e7:52:
dc:5c:72:13:d9:56:34:a6:44:3a:3f:2c:01:7b:13:6b:4a:92:
3e:1f:e9:39:07:04:a8:84:51:c9:ca:e3:92:0c:7b:f1:dd:bc:
d7:6d:01:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:56 2026 by rpki-client