Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/16fGP20rotRg7Kd12TZtKTXl2yM.roa
File: 16fGP20rotRg7Kd12TZtKTXl2yM.roa (raw, json)
Hash identifier: jyzJQHK8MZKeJTVBUXe7EBzYCJO1n/ZGhmBDaIiO5Rc=
Subject key identifier: D7:A7:C6:3F:6D:2B:A2:D4:60:EC:A7:75:D9:36:6D:29:35:E5:DB:23
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 01A0529C07880CAD1D47F588053A606BD21C
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/16fGP20rotRg7Kd12TZtKTXl2yM.roa
Signing time: Sun 30 Aug 2026 12:19:12 +0000
ROA not before: Sun 30 Aug 2026 12:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 85.155.130.0/24 maxlen: 24
85.155.131.0/24 maxlen: 24
209.35.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:9c:07:88:0c:ad:1d:47:f5:88:05:3a:60:6b:d2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Aug 30 12:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7a7c63f6d2ba2d460eca775d9366d2935e5db23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:63:23:3e:b6:cc:0b:ae:79:aa:5b:5e:ee:
2a:b0:3e:8e:53:7d:aa:e5:0d:2a:6d:97:e4:80:7f:
33:8a:d4:43:65:15:bb:52:be:68:84:fc:31:ec:c6:
5d:bd:6f:2d:01:be:d0:d2:78:3c:ff:a0:6c:0b:73:
9f:1e:c8:58:dd:cc:bd:95:ec:40:8b:7a:13:df:49:
e5:be:77:86:d0:e2:8a:58:fb:5c:e4:96:74:99:a8:
5b:eb:be:0c:4c:33:a9:14:04:66:61:82:06:75:4a:
72:19:b7:aa:d6:7b:ac:97:56:c7:fb:a4:cd:d2:fd:
50:3d:8e:32:99:9a:eb:51:92:51:49:69:10:39:0a:
32:28:d6:01:a5:31:83:42:b7:05:bd:1c:7d:2f:46:
93:2b:22:79:1a:8e:1b:09:b3:f0:37:62:0f:cb:2b:
b8:49:5e:d7:1a:f2:cf:00:a0:50:0f:e4:96:8c:b9:
23:28:86:23:55:46:a9:6d:81:ae:f1:25:96:42:22:
04:fd:58:9f:82:5a:e5:11:09:cb:40:d6:a9:7f:da:
d8:cb:83:c3:33:e9:c1:8b:93:a6:6c:1c:b2:22:4c:
bc:b2:1b:52:d1:78:cf:1d:b4:8e:7e:f9:1f:25:c1:
4f:0c:2b:fc:d1:77:f1:55:ce:d3:2a:2c:b2:06:16:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A7:C6:3F:6D:2B:A2:D4:60:EC:A7:75:D9:36:6D:29:35:E5:DB:23
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/16fGP20rotRg7Kd12TZtKTXl2yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.130.0/23
209.35.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7c:66:b4:26:4b:23:5d:74:b3:c4:21:c1:14:2a:37:c9:31:
ef:9f:33:5c:82:62:07:6b:c5:7b:00:41:ed:db:18:aa:33:af:
0f:c0:47:8e:44:be:6d:2a:44:e6:46:00:2e:85:95:78:42:6d:
00:a3:77:28:31:a7:2e:56:2e:99:f2:0a:4d:47:2c:68:54:b3:
21:30:0c:fc:e6:45:94:b8:32:7d:65:a8:b6:52:c0:64:74:14:
a2:59:83:6c:ca:2c:33:99:4e:e9:a6:7b:f6:7f:72:92:7a:77:
77:34:82:d8:bf:b1:f5:fc:5d:94:1a:0f:92:61:09:f1:21:a5:
57:15:f5:93:9e:43:48:7c:1d:cc:c2:c3:f9:22:6c:e4:a3:2f:
de:07:02:fb:a7:7d:9a:2f:3b:e7:9c:f2:d0:85:a3:d2:31:d1:
f6:6e:77:6f:76:c1:9e:b2:76:d1:91:cc:77:d5:30:d5:7a:16:
8a:f4:82:85:2b:80:c4:af:39:08:8a:a1:30:67:1b:f3:bc:00:
41:c2:83:53:ff:24:8a:42:f2:52:2a:59:bf:15:3a:34:e4:ca:
3c:3b:43:aa:3f:37:df:d6:69:1c:b3:aa:01:2f:aa:9f:b0:58:
d6:cb:eb:89:a7:ec:f2:64:cf:ad:d1:65:e7:0c:a3:1f:7a:b9:
64:80:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:48:51 2026 by rpki-client