Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/g40iPVEhhkZlqmHJ3xh2amLoibs.roa
File: g40iPVEhhkZlqmHJ3xh2amLoibs.roa (raw, json)
Hash identifier: pvCD4+RtH1lI+E7q9BwSzx1vYXeOz4FdgT7fvEqT8VE=
Subject key identifier: 83:8D:22:3D:51:21:86:46:65:AA:61:C9:DF:18:76:6A:62:E8:89:BB
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A1599C40B065C8E19B94740AB02C2D0035
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/g40iPVEhhkZlqmHJ3xh2amLoibs.roa
Signing time: Tue 20 Oct 2026 13:59:34 +0000
ROA not before: Tue 20 Oct 2026 13:59:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.70.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.72.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
213.145.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:9c:40:b0:65:c8:e1:9b:94:74:0a:b0:2c:2d:00:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 20 13:59:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=838d223d5121864665aa61c9df18766a62e889bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:d4:9d:59:d1:c9:e9:72:d2:1f:3d:4e:89:
bb:af:0f:40:61:d1:21:58:61:3c:03:8e:73:17:0f:
5e:56:20:41:2c:b8:01:13:48:ef:de:72:bc:90:25:
04:f1:dc:20:af:a5:25:82:de:16:8b:2f:17:2d:2b:
96:31:81:a6:6f:c3:1a:9c:54:38:c7:1a:d6:9b:f6:
98:53:f9:8d:a1:9a:89:0f:78:2b:8f:4d:57:f5:de:
74:3e:ff:3d:48:b1:69:80:13:8e:bd:dd:a8:b2:63:
20:32:0b:06:f2:37:66:22:e2:fe:f3:03:12:c3:52:
af:be:fe:6e:50:d4:15:c7:7d:4b:17:5c:52:fe:e1:
7e:15:9b:67:2c:14:5e:3a:4f:7a:73:c5:1f:ac:b3:
8a:dc:65:f5:8f:39:2d:26:f1:9e:de:07:c7:28:d6:
8b:2a:55:fc:2e:28:7f:dd:8a:f0:86:89:08:68:29:
37:e1:25:45:94:68:40:15:8f:5d:1d:6f:1d:8b:a6:
e0:d1:14:f4:8a:79:99:6f:8a:35:e8:ff:da:fa:8a:
6a:27:b0:08:85:de:5a:13:9e:6e:35:7e:c9:3c:4e:
18:c6:e0:c9:8b:91:96:9d:16:a6:86:7e:7c:63:b5:
96:56:82:6c:c8:08:25:d3:81:03:e4:b8:57:9b:12:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:22:3D:51:21:86:46:65:AA:61:C9:DF:18:76:6A:62:E8:89:BB
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/g40iPVEhhkZlqmHJ3xh2amLoibs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.84.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
45:2d:05:19:28:a6:6e:68:56:d3:0d:70:55:96:05:14:9a:ff:
97:2f:ee:6d:51:34:c3:0a:da:d0:7e:ad:66:75:ad:d6:9e:35:
18:66:c3:a4:f8:0d:59:cf:f6:ed:b2:42:36:45:2a:5c:52:4a:
74:f0:a1:f4:8a:b2:9a:4a:b1:4e:50:af:2a:3b:5b:8e:50:b0:
32:b4:5b:a3:a9:0f:19:6f:bc:82:c9:89:6d:14:75:f3:7f:69:
a9:f6:d7:ba:b6:3f:b3:ea:a3:0e:6c:b8:86:88:49:f5:93:d0:
ef:1e:00:8a:0c:ce:8f:e5:7e:3a:7b:f5:7e:88:2d:c4:72:b6:
c4:97:8f:aa:23:77:a5:c8:cb:e1:f6:00:34:5e:39:81:4b:9a:
e5:a7:94:07:bd:39:76:58:84:20:03:55:65:d7:7e:66:19:3e:
54:05:f8:70:e8:0c:da:ff:d9:61:4d:81:59:25:a7:cb:ae:b4:
39:b9:ed:98:97:f6:ec:ae:2b:06:dc:1a:93:f2:5c:3c:f0:23:
f7:84:4f:4e:b0:d2:eb:76:c4:e8:8c:2d:69:cf:6e:a3:cd:7a:
9e:2b:02:d4:aa:72:cb:26:fc:23:2a:d0:7c:59:cd:46:6f:09:
f0:a3:3d:0d:aa:d7:1b:d9:45:b7:04:4f:86:a5:86:9b:ef:8e:
a5:8d:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:20 2026 by rpki-client