Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/R-5w2OhY85ahLOn9d9XARIf0WJE.roa
File: R-5w2OhY85ahLOn9d9XARIf0WJE.roa (raw, json)
Hash identifier: ZrntMgUNbnCcVCqd80hEXtJhbHPgRihn20AF29/vEO8=
Subject key identifier: 47:EE:70:D8:E8:58:F3:96:A1:2C:E9:FD:77:D5:C0:44:87:F4:58:91
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019CD4EDF73529D186F6BBB8BFBE6FB2655F
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/R-5w2OhY85ahLOn9d9XARIf0WJE.roa
Signing time: Mon 09 Mar 2026 23:28:10 +0000
ROA not before: Mon 09 Mar 2026 23:28:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63018
IP address blocks: 85.149.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Mar 2026 23:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d4:ed:f7:35:29:d1:86:f6:bb:b8:bf:be:6f:b2:65:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Mar 9 23:28:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47ee70d8e858f396a12ce9fd77d5c04487f45891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:a1:7c:da:99:ec:b8:3b:13:aa:56:e4:92:
84:06:ab:ee:f1:d5:dd:1f:29:b1:96:d9:b7:2f:69:
5d:0f:12:e6:0d:bd:23:5a:2d:44:a4:a7:0b:66:44:
a5:01:15:26:df:96:4e:77:46:11:23:bc:bc:d0:67:
0c:3a:95:8c:eb:f0:3a:96:49:e3:ce:d5:b6:45:0a:
7a:6d:0d:de:28:03:13:55:8c:f9:62:5e:ca:ee:b2:
03:31:0d:50:4b:b1:4f:04:ea:e7:0c:c1:9c:28:fb:
ca:0a:2b:f6:6f:b5:c9:c5:c0:25:ac:b4:5e:5d:47:
ad:cb:16:9b:62:0f:f4:fe:d4:bf:98:12:74:e3:7f:
16:88:fc:74:60:76:3a:17:82:b4:bd:25:9a:23:b5:
ae:5c:7c:79:91:dc:d7:98:57:b3:8f:d2:20:af:59:
5c:e6:09:98:69:de:64:d5:65:8d:a8:f2:c9:95:e4:
78:39:79:8c:9c:f4:34:99:95:fd:40:35:95:a8:ba:
49:8d:60:b8:15:43:65:be:4e:72:4e:db:11:5d:01:
47:29:a5:fc:11:c1:58:04:ab:0f:ad:66:d5:7e:ea:
d6:d2:54:f7:25:e6:7a:f8:cf:18:e5:08:be:34:75:
73:48:c6:8b:3d:38:a6:02:c2:00:85:a0:39:5d:b5:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EE:70:D8:E8:58:F3:96:A1:2C:E9:FD:77:D5:C0:44:87:F4:58:91
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/R-5w2OhY85ahLOn9d9XARIf0WJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.149.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a6:e6:f6:ea:3d:f5:c8:f0:2d:7f:09:30:c1:ec:9f:90:c4:
65:08:03:dc:51:7d:84:01:9b:c6:cb:44:80:69:bb:9c:b3:d7:
50:92:c8:1c:ce:7a:d1:7f:93:65:82:53:68:fb:c9:65:e8:28:
0b:48:7e:8e:2c:7a:0c:f3:a9:9e:51:3d:87:15:fe:d7:b1:1e:
b2:7e:c0:48:5c:33:55:94:2f:bd:17:8a:7a:96:7d:14:e3:f2:
76:9f:db:a1:6b:7e:d7:51:05:87:b9:df:2e:66:4a:a6:86:3d:
04:4b:19:5a:6b:ed:8d:e5:6a:03:19:de:a3:81:a6:34:20:05:
c9:37:ac:70:2d:e3:db:f2:f5:50:ac:de:fe:11:37:78:45:0e:
60:ae:f5:97:cf:04:fa:bc:4a:40:9f:bd:25:69:d3:fc:1e:f7:
81:ba:f0:37:1c:09:b3:2f:83:7f:0c:2c:4d:9f:df:c0:05:49:
f1:3c:7e:e4:3c:f6:55:26:73:f8:e2:23:51:0d:1c:ac:e1:e9:
2b:bc:ad:69:bd:2e:32:97:a5:00:d5:b9:6e:ed:85:8d:73:ee:
2e:9d:01:90:a4:af:39:c4:58:82:52:33:2d:bd:23:71:8e:c7:
ed:7d:40:16:cd:4b:cc:11:c5:7b:f9:06:fb:ef:63:f5:ae:eb:
3d:ad:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 09:07:59 2026 by rpki-client