Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/jRWtyYMGTuWg2E6keQtB_dgm3p0.roa
File: jRWtyYMGTuWg2E6keQtB_dgm3p0.roa (raw, json)
Hash identifier: iF2FFz6WfUZwQrceNhMGsrL5i0NWuW8PDnRcyn9YNrY=
Subject key identifier: 8D:15:AD:C9:83:06:4E:E5:A0:D8:4E:A4:79:0B:41:FD:D8:26:DE:9D
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019F81887F72F4A08733E1F8AD8D92834360
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/jRWtyYMGTuWg2E6keQtB_dgm3p0.roa
Signing time: Mon 20 Jul 2026 21:57:14 +0000
ROA not before: Mon 20 Jul 2026 21:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
85.115.210.0/24 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.70.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.72.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:88:7f:72:f4:a0:87:33:e1:f8:ad:8d:92:83:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 20 21:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d15adc983064ee5a0d84ea4790b41fdd826de9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:fa:32:b2:8c:b7:ce:c3:ab:17:b4:01:aa:
d9:48:f2:76:df:2d:44:bd:6d:a9:fc:35:32:e4:8e:
29:98:c8:28:ad:ac:41:f9:82:f9:c5:2b:18:0b:90:
70:bb:b3:41:42:4d:fd:bb:99:9f:69:8d:ba:0f:b1:
2d:94:84:5d:b2:93:ad:04:28:00:07:36:90:60:a4:
77:cc:ac:9a:d7:7a:23:10:2a:5e:7f:e9:b2:a7:76:
d8:24:af:f8:57:49:3d:36:99:ee:09:ba:88:f2:e6:
91:33:98:6a:b1:ed:b4:6d:77:01:97:e3:e0:1c:f5:
50:01:f1:f5:22:18:ab:7b:b0:d4:98:1a:71:e5:fb:
c0:e1:2c:e1:7b:7d:1b:91:ac:b9:af:36:78:5c:b4:
85:2a:8e:b9:2d:95:bc:7e:c8:c7:3e:5e:9c:35:46:
fe:8e:42:46:7a:27:55:30:39:91:9f:73:9b:94:b0:
2a:90:27:c1:eb:e2:70:8d:62:22:6a:56:f4:c0:e0:
e2:ac:20:a8:a5:8f:be:72:64:c3:ea:66:c3:7a:2c:
b3:7d:f4:e3:2e:6e:8e:79:10:4f:2d:7c:58:04:8b:
0a:ad:44:90:99:e3:7b:85:10:b8:03:9b:bc:30:64:
13:e1:0a:28:24:b4:28:a2:40:88:4e:83:7b:c7:d2:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:15:AD:C9:83:06:4E:E5:A0:D8:4E:A4:79:0B:41:FD:D8:26:DE:9D
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/jRWtyYMGTuWg2E6keQtB_dgm3p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.84.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
7c:6c:7f:04:19:3e:48:32:68:3f:3d:ba:17:75:49:73:2e:aa:
a3:26:3e:a0:eb:f6:38:88:ad:8c:b6:cd:cd:8a:68:9a:af:ff:
f1:c4:dd:d4:a4:be:8b:50:5a:ab:eb:e9:1b:a8:fb:62:23:99:
3e:7c:6f:f9:89:56:e8:cc:f4:a3:d9:8b:b3:2b:81:d1:72:a5:
70:14:fa:00:bc:8d:dc:f8:f9:cb:e8:29:fe:d4:92:d3:77:0f:
8a:ab:8e:59:ba:ec:d2:42:4d:f2:ed:88:40:6c:65:6a:3d:13:
cc:8d:2e:25:47:59:77:0a:17:83:ad:59:35:2d:82:ec:06:60:
21:0c:f7:e5:07:59:74:d8:21:51:1c:23:eb:91:f5:c8:22:69:
8a:81:4b:3e:d1:31:92:f6:99:82:a7:56:1a:fc:0e:02:7c:47:
23:17:92:65:70:80:fc:c1:df:c9:a4:7a:83:97:77:1c:32:d2:
fa:a8:b9:5c:6a:b9:2f:15:a2:35:ef:43:98:1c:64:7e:a9:87:
58:84:2b:68:b0:7d:ec:89:f0:96:34:09:8b:04:96:ce:c3:51:
04:3e:30:fe:25:35:38:9f:65:c6:df:d7:e8:24:fc:a1:2b:ca:
9c:c6:22:b8:e6:d3:2c:10:ca:65:5a:7a:c2:67:78:5d:93:9b:
05:2d:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:01:57 2026 by rpki-client