Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/UY0wDVQF1SMA4v3hodoenfyrm2o.roa
File: UY0wDVQF1SMA4v3hodoenfyrm2o.roa (raw, json)
Hash identifier: A1SEc2uoU9trsZSrKCtC+EzyCf/Gy64XR4zhl7vE57Y=
Subject key identifier: 51:8D:30:0D:54:05:D5:23:00:E2:FD:E1:A1:DA:1E:9D:FC:AB:9B:6A
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A05D3FBAB222D3A4F0F9CAB6BE83B236FA
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/UY0wDVQF1SMA4v3hodoenfyrm2o.roa
Signing time: Tue 01 Sep 2026 13:54:12 +0000
ROA not before: Tue 01 Sep 2026 13:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
85.115.210.0/24 maxlen: 24
85.115.211.0/24 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.70.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.72.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 16:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:3f:ba:b2:22:d3:a4:f0:f9:ca:b6:be:83:b2:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 1 13:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=518d300d5405d52300e2fde1a1da1e9dfcab9b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:41:a2:0a:af:89:c1:00:67:46:8c:c2:9b:
f8:b1:9e:e4:ce:b5:d5:ba:20:40:62:b4:39:d3:f0:
b8:10:49:ab:83:38:b0:23:6f:77:e2:5c:12:ed:c2:
47:cb:00:ab:3d:d0:21:55:47:b8:b6:e0:b5:d2:cd:
f7:74:92:bf:24:ff:7a:d9:fa:ae:64:39:ce:ce:83:
0f:a5:33:cb:63:ad:46:f0:b5:94:b5:db:ff:d5:9c:
ac:66:43:03:5a:61:b9:44:8f:2c:89:a4:34:fc:eb:
94:8b:af:ce:6c:bc:6d:5c:cd:e8:d8:2c:5a:b3:c7:
6e:44:d2:b3:4b:57:8d:01:ae:29:b4:7b:77:1c:8a:
dd:b2:46:8a:fd:e0:66:2e:1d:f1:01:2d:07:f6:3f:
19:75:f8:97:6c:d2:0b:45:6f:a8:9a:27:f1:05:79:
d1:79:df:e7:b6:ae:e9:45:ff:e8:57:cf:06:50:ac:
a3:8b:b6:26:a8:87:5b:d1:10:35:67:3d:8e:cb:d6:
9a:55:17:c6:50:d8:61:e1:a1:67:1e:80:a5:d7:d0:
3b:96:ea:c0:e8:2b:4e:49:18:2a:c5:45:a8:48:86:
2f:e1:cb:b9:0d:74:15:94:f7:92:ba:13:bf:1c:c4:
5c:46:bb:5a:4b:d4:b3:04:b6:b8:90:4c:2a:9a:1d:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8D:30:0D:54:05:D5:23:00:E2:FD:E1:A1:DA:1E:9D:FC:AB:9B:6A
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/UY0wDVQF1SMA4v3hodoenfyrm2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.84.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
b2:c4:26:57:0f:56:23:19:68:ee:67:ce:f9:cf:bb:2c:69:4d:
3b:9e:0a:08:fa:e1:43:b9:b7:5c:fa:41:6e:c9:bb:8c:50:65:
a9:ad:b6:3c:24:c7:d1:e2:77:f0:6b:56:82:58:b9:83:9d:be:
ca:33:80:4e:c7:95:72:d3:ef:8a:ca:63:b6:34:2c:6f:1a:9c:
34:f7:46:7f:02:d5:eb:79:c0:dc:81:08:0c:bf:b9:73:22:20:
37:6e:ac:c5:70:d0:2a:66:e5:f8:8e:9e:74:77:50:45:31:2e:
cb:73:a6:9d:27:c8:d9:5e:a8:35:88:6e:47:2e:a3:c2:cd:14:
61:59:67:04:81:59:77:3b:6a:0a:f8:30:2e:0c:f8:59:f1:53:
d9:38:e9:ed:f5:50:4b:1e:0e:c7:6b:82:4e:bb:87:5c:31:c2:
65:01:8a:0e:9a:b3:39:89:8c:c4:2c:9c:7a:63:3a:d3:a3:00:
df:f6:fc:3b:2c:76:3c:c3:49:f7:fc:55:26:f8:e7:80:0f:c7:
1a:80:ae:0a:66:30:f1:2d:ab:99:21:93:81:60:e1:b0:d2:eb:
22:60:b0:ed:00:62:5b:99:49:3e:67:64:32:38:1e:11:cc:1c:
15:c6:8e:f2:62:a5:4c:17:9a:4c:b6:aa:de:14:60:68:f4:2a:
55:d3:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 22:40:37 2026 by rpki-client