Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/dOf14pcWNhqACX_OuHqgnInOiSY.roa
File: dOf14pcWNhqACX_OuHqgnInOiSY.roa (raw, json)
Hash identifier: u/CEFotnqGOPUeJz8opPU+xR5CT8FS6553goTtL0XDo=
Subject key identifier: 74:E7:F5:E2:97:16:36:1A:80:09:7F:CE:B8:7A:A0:9C:89:CE:89:26
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 01A09FDABB77832E14D960D87F974EE817EE
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/dOf14pcWNhqACX_OuHqgnInOiSY.roa
Signing time: Mon 14 Sep 2026 12:18:27 +0000
ROA not before: Mon 14 Sep 2026 12:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61272
IP address blocks: 85.206.160.0/22 maxlen: 32
85.206.164.0/22 maxlen: 32
85.206.166.58/32 maxlen: 32
85.206.168.0/22 maxlen: 32
85.206.172.0/22 maxlen: 32
85.206.240.0/22 maxlen: 32
86.38.109.0/24 maxlen: 32
86.38.110.0/24 maxlen: 32
88.119.160.0/21 maxlen: 32
88.119.168.0/24 maxlen: 32
88.119.169.0/24 maxlen: 32
88.119.170.0/24 maxlen: 32
88.119.171.0/24 maxlen: 32
88.119.173.0/24 maxlen: 32
88.119.174.0/24 maxlen: 32
88.119.175.0/24 maxlen: 32
89.117.211.0/24 maxlen: 32
89.117.242.0/24 maxlen: 32
91.216.163.0/24 maxlen: 32
185.25.48.0/22 maxlen: 32
185.64.104.0/22 maxlen: 32
213.252.228.0/24 maxlen: 32
213.252.229.0/24 maxlen: 32
213.252.230.0/24 maxlen: 32
213.252.231.0/24 maxlen: 32
213.252.232.0/24 maxlen: 32
213.252.233.0/24 maxlen: 32
213.252.238.0/24 maxlen: 32
213.252.239.0/24 maxlen: 32
2a04:2180::/32 maxlen: 64
2a04:2181:c010::/48 maxlen: 64
2a04:2181:c011::/48 maxlen: 64
2a04:2181:c012::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:da:bb:77:83:2e:14:d9:60:d8:7f:97:4e:e8:17:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Sep 14 12:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74e7f5e29716361a80097fceb87aa09c89ce8926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:da:c1:ae:de:80:dd:51:0c:e8:aa:7c:b3:
b7:1e:e7:dc:0f:10:f6:d1:9c:6c:4b:63:fe:4e:b4:
df:35:0f:81:9b:c0:14:61:71:43:1b:05:70:b1:fb:
08:47:89:cf:c7:be:65:58:99:17:51:db:9d:15:17:
1b:01:fa:cf:61:d6:41:a3:3f:e0:68:b5:99:fb:58:
0a:3b:a8:54:e1:f0:fe:f2:44:bd:74:ec:41:9f:72:
34:d8:b9:62:79:f9:c8:b0:4d:d2:2b:b7:70:a1:09:
ef:25:de:8d:fe:f7:40:85:6a:98:9b:09:7f:a5:34:
f2:a4:a4:5a:06:8e:57:40:05:9f:eb:55:06:d9:da:
c9:f6:d0:15:51:3a:98:f2:09:e2:1a:c0:58:8e:d5:
03:e3:f8:b8:39:94:42:49:dd:9c:c8:28:d3:04:40:
35:eb:a2:f8:63:9c:c0:b3:30:bb:d9:1d:3e:37:5f:
be:0e:1a:75:1d:70:84:72:7b:6c:0a:56:dd:2f:9f:
bb:a2:b6:98:f9:e5:fa:a8:3c:36:2b:89:3e:a4:f6:
23:d4:0a:67:de:76:13:06:0e:f5:3b:c3:ee:8f:68:
a3:d6:3f:d8:40:97:19:96:50:e3:4a:34:3c:14:0d:
e0:da:fb:40:51:b3:1d:cd:05:56:09:61:ef:d1:3c:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E7:F5:E2:97:16:36:1A:80:09:7F:CE:B8:7A:A0:9C:89:CE:89:26
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/dOf14pcWNhqACX_OuHqgnInOiSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.206.160.0/20
85.206.240.0/22
86.38.109.0-86.38.110.255
88.119.160.0-88.119.171.255
88.119.173.0-88.119.175.255
89.117.211.0/24
89.117.242.0/24
91.216.163.0/24
185.25.48.0/22
185.64.104.0/22
213.252.228.0-213.252.233.255
213.252.238.0/23
IPv6:
2a04:2180::/32
2a04:2181:c010::-2a04:2181:c012:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ca:e6:7f:3d:b3:60:f2:df:c7:54:68:0b:9b:87:6b:cb:63:40:
76:24:b0:43:e5:de:7d:5b:ce:ee:26:62:a7:c1:32:5a:2e:f1:
b3:6d:33:12:c8:86:21:02:43:09:a8:ca:7d:c9:77:01:6b:1a:
7d:a5:10:81:d2:22:a5:cc:8d:99:d8:26:80:4c:8f:7b:77:dc:
d0:86:2e:e0:8d:02:f8:51:ec:87:69:13:f5:4e:93:24:f6:db:
d3:6c:da:6a:0b:f3:d0:6e:4f:2f:f2:e3:23:aa:e3:be:a6:f1:
c4:4e:f1:a3:af:50:27:91:cb:03:c5:02:71:bf:71:8f:90:a8:
32:c1:2c:d4:47:df:0a:4e:fc:59:e7:37:19:d0:32:c7:45:7b:
f8:06:02:f6:29:8e:f7:20:ee:a2:68:f7:a3:50:7e:fc:5a:56:
06:42:8c:4a:1e:c5:78:0e:d2:ce:6a:e1:a3:20:fa:b9:98:32:
ef:1c:d3:e0:2f:10:7f:83:d0:ab:3b:e6:c5:05:75:df:3f:61:
9a:79:c8:dd:d2:81:8c:14:e4:67:f6:71:eb:b3:44:90:12:40:
5a:ac:6f:a0:68:3b:8e:ef:1e:25:b9:a4:26:73:df:c8:38:e4:
a7:98:05:16:5d:65:0a:df:a6:06:dd:36:c2:09:2a:c1:ff:aa:
e0:54:21:b0
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgISAaCf2rt3gy4U2WDYf5dO6BfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NmVhNzM1OTIyMWMxYjc3ZDZjYzAwNmY3YjY3MDZhOWE5
MDgyOTkwHhcNMjYwOTE0MTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGU3ZjVlMjk3MTYzNjFhODAwOTdmY2ViODdhYTA5Yzg5Y2U4OTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd3awa7egN1RDOiqfLO3HufcDxD2
0ZxsS2P+TrTfNQ+Bm8AUYXFDGwVwsfsIR4nPx75lWJkXUdudFRcbAfrPYdZBoz/g
aLWZ+1gKO6hU4fD+8kS9dOxBn3I02LliefnIsE3SK7dwoQnvJd6N/vdAhWqYmwl/
pTTypKRaBo5XQAWf61UG2drJ9tAVUTqY8gniGsBYjtUD4/i4OZRCSd2cyCjTBEA1
66L4Y5zAszC72R0+N1++Dhp1HXCEcntsClbdL5+7oraY+eX6qDw2K4k+pPYj1Apn
3nYTBg71O8Puj2ij1j/YQJcZllDjSjQ8FA3g2vtAUbMdzQVWCWHv0Tw2fQIDAQAB
o4ICkTCCAo0wHQYDVR0OBBYEFHTn9eKXFjYagAl/zrh6oJyJzokmMB8GA1UdIwQY
MBaAFLZupzWSIcG3fWzABve2cGqakIKZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMt
Njk5ODM1YzkyYmZlLzEvZE9mMTRwY1dOaHFBQ1hfT3VIcWduSW5PaVNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMtNjk5ODM1YzkyYmZl
LzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGmBggrBgEFBQcBBwEB/wSBljCBkzBuBAIAATBoAwQEVc6g
AwQCVc7wMAwDBABWJm0DBABWJm4wDAMEBVh3oAMEAlh3qDAMAwQAWHetAwQEWHeg
AwQAWXXTAwQAWXXyAwQAW9ijAwQCuRkwAwQCuUBoMAwDBALV/OQDBAHV/OgDBAHV
/O4wIQQCAAIwGwMFACoEIYAwEgMHBCoEIYHAEAMHACoEIYHAEjANBgkqhkiG9w0B
AQsFAAOCAQEAyuZ/PbNg8t/HVGgLm4dry2NAdiSwQ+XefVvO7iZip8EyWi7xs20z
EsiGIQJDCajKfcl3AWsafaUQgdIipcyNmdgmgEyPe3fc0IYu4I0C+FHsh2kT9U6T
JPbb02zaagvz0G5PL/LjI6rjvqbxxE7xo69QJ5HLA8UCcb9xj5CoMsEs1EffCk78
Wec3GdAyx0V7+AYC9imO9yDuomj3o1B+/FpWBkKMSh7FeA7SzmrhoyD6uZgy7xzT
4C8Qf4PQqzvmxQV13z9hmnnI3dKBjBTkZ/Zx67NEkBJAWqxvoGg7ju8eJbmkJnPf
yDjkp5gFFl1lCt+mBt02wgkqwf+q4FQhsA==
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:32:47 2026 by rpki-client