Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/vdGT0nZTpJLGcOzDL6xuJ_FCZW8.roa
File: vdGT0nZTpJLGcOzDL6xuJ_FCZW8.roa (raw, json)
Hash identifier: Xc1ItXjvzK2wPVfmMfhj8HS0B6C/GKW+6dgSc1M77LU=
Subject key identifier: BD:D1:93:D2:76:53:A4:92:C6:70:EC:C3:2F:AC:6E:27:F1:42:65:6F
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 01A161B87F284A54E76C430E71C17865D779
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/vdGT0nZTpJLGcOzDL6xuJ_FCZW8.roa
Signing time: Thu 22 Oct 2026 03:47:23 +0000
ROA not before: Thu 22 Oct 2026 03:47:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210528
IP address blocks: 85.208.212.0/22 maxlen: 24
85.208.213.0/24 maxlen: 24
199.241.120.0/21 maxlen: 24
2a0f:3ec0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:b8:7f:28:4a:54:e7:6c:43:0e:71:c1:78:65:d7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Oct 22 03:47:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdd193d27653a492c670ecc32fac6e27f142656f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:b3:7e:dd:7f:66:85:0c:8f:d3:88:a2:8d:
f9:1e:fe:63:eb:ef:ac:17:0f:da:9a:22:2b:70:6d:
14:8c:c3:c8:77:7a:20:e9:9b:29:c8:5f:5e:e6:81:
2f:47:e0:63:44:b5:af:c0:18:50:e4:9d:0f:ad:55:
ee:f3:b0:39:35:97:08:33:fa:a7:a5:ec:6e:84:3c:
2e:37:a8:e2:dd:33:58:22:c3:a4:b4:9a:30:cd:5e:
33:f1:00:8d:2b:fc:ff:cc:b2:92:8a:2b:74:22:ab:
1b:e8:ff:97:42:c3:4e:c5:2f:2b:c2:d8:28:80:d0:
34:af:d4:55:75:7e:4a:2f:eb:f7:d8:81:c3:40:b4:
5a:cf:ca:91:cd:0b:05:0c:83:2c:0a:97:e6:0c:07:
55:21:e2:08:8f:cb:71:cf:23:36:de:73:51:9f:61:
99:34:c7:04:34:21:f0:6f:27:82:f5:61:8b:38:57:
e2:21:c8:36:a5:70:0c:08:cf:4b:0c:1c:b0:5e:89:
2a:c9:c0:3f:71:74:81:bf:3a:f6:7e:3a:3d:8a:83:
73:c8:93:fc:c8:82:0a:0b:8e:9b:66:48:67:41:22:
80:8c:30:98:e4:0f:e6:77:e5:f6:84:c4:99:93:88:
cf:81:ac:85:5e:8e:bb:29:88:43:93:1f:ce:73:70:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D1:93:D2:76:53:A4:92:C6:70:EC:C3:2F:AC:6E:27:F1:42:65:6F
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/vdGT0nZTpJLGcOzDL6xuJ_FCZW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.212.0/22
199.241.120.0/21
IPv6:
2a0f:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:35:0f:f0:b3:83:08:14:ea:c5:df:fa:5e:1f:2d:05:bd:a6:
fb:a6:05:13:ad:9e:a3:7b:ab:13:72:51:17:c3:88:4e:8c:8a:
23:14:2c:a1:b6:ea:ce:6f:98:10:00:5a:1b:34:a7:80:5d:8a:
85:e4:cb:30:2c:9d:14:fe:ec:fb:d0:55:9b:e9:01:39:95:fb:
8d:56:d5:66:0f:c2:d7:cf:25:62:be:18:d1:74:97:fe:99:77:
9c:bc:60:5c:69:7a:ed:da:a2:dd:fa:3e:e4:49:35:cb:a2:18:
4f:25:7a:5b:94:3f:b7:e3:dc:af:25:1d:b7:b6:b3:d6:2e:a0:
9f:39:1c:6f:9e:d8:ec:91:b7:b9:49:93:a0:2a:11:9d:41:ff:
ac:98:01:f8:54:db:7c:77:0d:ad:88:d0:3c:8c:59:fb:d2:17:
03:0a:5f:39:6b:9e:4a:b1:08:19:f4:5b:b3:c7:fe:77:f9:2a:
29:e5:eb:dc:07:7c:28:c3:6d:da:f3:0f:7f:a5:73:d6:aa:29:
eb:bb:ec:51:94:60:f2:d5:2f:5f:d5:01:d5:39:e6:86:36:9d:
8e:27:65:e8:09:9b:68:cc:42:35:78:fc:74:75:0a:2f:b9:b9:
02:b3:a7:8e:b1:40:4a:5e:bf:a6:ff:7d:01:f0:7c:21:4b:4f:
c7:6b:19:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:03 2026 by rpki-client