Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/k3v88wDW6w7CV0KQmgDCujnXNPA.roa
File: k3v88wDW6w7CV0KQmgDCujnXNPA.roa (raw, json)
Hash identifier: LQ+PD4XhvWxN2fgx9STD3zlGhJWHzA+LJ7kS0EJFYtM=
Subject key identifier: 93:7B:FC:F3:00:D6:EB:0E:C2:57:42:90:9A:00:C2:BA:39:D7:34:F0
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01A0EC5B40ED141751AF24AF8655D410959C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/k3v88wDW6w7CV0KQmgDCujnXNPA.roa
Signing time: Tue 29 Sep 2026 08:49:58 +0000
ROA not before: Tue 29 Sep 2026 08:49:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34577
IP address blocks: 85.187.19.0/24 maxlen: 24
85.187.19.5/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:5b:40:ed:14:17:51:af:24:af:86:55:d4:10:95:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Sep 29 08:49:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=937bfcf300d6eb0ec25742909a00c2ba39d734f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:50:26:f3:f1:fc:b3:6f:16:24:5a:af:5b:f8:
bf:4c:1d:eb:50:f7:16:7f:fd:77:56:ff:b5:80:d7:
5d:cf:ee:3d:59:88:14:c5:0d:8e:0e:6e:43:4b:5b:
3b:32:bc:f4:5f:f7:2c:76:c6:b5:91:7d:65:ab:8e:
a5:45:99:f9:13:38:c6:bd:51:25:d7:33:48:73:83:
dd:98:95:09:bd:2b:21:4a:01:bf:ce:9b:11:88:fa:
0d:fc:5f:61:87:54:12:d5:7e:33:5a:f3:72:31:ed:
03:ba:9a:74:48:e8:d2:60:98:8d:e1:97:05:ae:72:
72:7a:0c:4c:f3:a8:38:07:81:3a:0d:02:a3:1f:bb:
5c:cc:4f:d1:ee:19:f2:5c:9c:4a:9c:b0:f6:34:cf:
ee:af:aa:c4:2c:d1:b5:5c:30:e7:21:86:f0:64:06:
b3:36:71:c5:8d:cf:c4:37:12:35:4d:13:80:f6:ad:
29:9c:7a:b6:c6:43:d8:d6:ec:b6:0a:d6:2e:ca:bb:
f3:e1:57:d3:cd:05:65:75:0b:82:10:6c:ac:91:00:
54:ef:30:92:fb:6d:6a:b0:b5:60:72:f3:60:eb:9f:
aa:0d:b8:b5:17:58:d9:5a:95:15:b2:f9:e1:cd:b7:
ff:ae:be:d2:11:11:c5:ce:01:78:59:71:50:57:77:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7B:FC:F3:00:D6:EB:0E:C2:57:42:90:9A:00:C2:BA:39:D7:34:F0
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/k3v88wDW6w7CV0KQmgDCujnXNPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.19.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b9:bc:12:b4:5d:dd:88:7e:52:c2:3c:bd:8c:4f:1b:c9:e5:
f1:1f:25:25:d2:c7:d8:99:93:1b:86:aa:2a:96:75:ae:56:0a:
4d:fd:63:42:18:98:39:79:5b:c6:61:97:60:b8:cf:85:f1:5f:
9d:84:bb:24:a3:37:95:ab:97:a5:7e:41:4c:ec:8d:08:90:83:
44:e6:12:c7:1b:fc:c4:b2:77:69:71:e6:59:ed:3c:15:78:10:
f5:97:6d:55:e4:e2:0a:45:a4:1c:31:9f:af:0b:cd:f6:63:e2:
4d:05:21:5c:7a:fe:78:ae:5d:a3:e6:55:33:8e:1f:49:e6:61:
5b:4a:5e:c5:bf:8a:1d:51:13:fd:49:a6:48:5a:49:81:31:9f:
89:b2:d6:ba:04:c8:83:db:e8:fb:ac:7f:ea:0e:cd:ac:1a:37:
52:57:14:54:b1:14:35:68:3f:61:c2:60:6b:fd:bf:01:00:49:
2e:bc:43:3e:c4:04:a4:4f:8d:69:c3:59:21:35:34:21:d4:54:
2e:f6:14:91:43:ec:76:d9:14:a8:b5:b4:7b:45:cb:df:6c:ba:
17:21:78:9f:e2:99:47:19:a9:0b:c3:3e:c8:02:bc:08:16:af:
cd:da:e1:ce:fa:b2:77:23:6b:b5:6d:00:1a:73:cb:c5:ca:8d:
35:59:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:42:20 2026 by rpki-client