Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/uW45if_g0Nv9TgZ77He1I1p8DhU.roa
File: uW45if_g0Nv9TgZ77He1I1p8DhU.roa (raw, json)
Hash identifier: uPgWIe+MxfxtyE4R7IRkj/X3YLjMRu2EzP3gVWseLcc=
Subject key identifier: B9:6E:39:89:FF:E0:D0:DB:FD:4E:06:7B:EC:77:B5:23:5A:7C:0E:15
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A195E6FD883CCB1263488368CE7589A47E
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/uW45if_g0Nv9TgZ77He1I1p8DhU.roa
Signing time: Sun 01 Nov 2026 06:58:25 +0000
ROA not before: Sun 01 Nov 2026 06:58:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.70.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.72.0/23 maxlen: 24
213.145.76.0/23 maxlen: 24
213.145.78.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:e6:fd:88:3c:cb:12:63:48:83:68:ce:75:89:a4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Nov 1 06:58:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b96e3989ffe0d0dbfd4e067bec77b5235a7c0e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:17:7d:77:49:96:77:7e:fb:99:20:d7:ac:
e7:cb:53:df:08:b6:81:5f:0b:9b:f2:11:a5:f1:89:
47:ad:41:e9:b7:59:57:a3:cb:bc:bf:b3:d7:82:39:
9e:8d:cb:6b:09:3e:df:ba:57:de:30:0d:72:26:fa:
43:d6:55:80:f5:e6:47:71:6d:10:c2:0c:59:7f:da:
c4:a2:42:cb:7f:e8:10:e8:49:0c:84:6b:aa:2a:95:
e2:45:0f:45:c8:d3:02:f7:1e:b3:64:1a:4d:c5:b3:
cd:5f:e9:2b:c3:86:56:49:32:61:f0:1d:1d:a3:05:
68:83:12:c8:56:f1:4b:dd:9a:ed:5b:be:2c:c9:19:
97:90:ba:12:fa:0b:4e:27:a0:e2:c3:e0:af:7f:49:
de:3e:b0:bc:22:83:ee:d3:2c:50:5c:00:74:dc:f8:
ce:f2:e1:d8:08:c7:38:f1:e9:79:d1:40:3d:74:5e:
f7:b1:a0:70:9d:de:83:57:52:de:41:6e:16:5e:ac:
18:f1:5f:98:16:e5:3f:48:0f:8e:a9:68:d7:59:a5:
fa:17:ec:e1:89:a4:2c:f8:c3:89:ec:80:2b:85:7c:
9f:35:30:3e:21:4a:2a:10:29:32:c8:8d:d4:84:72:
15:eb:20:e4:1a:d3:7f:70:3e:79:2c:50:d5:02:5c:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6E:39:89:FF:E0:D0:DB:FD:4E:06:7B:EC:77:B5:23:5A:7C:0E:15
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/uW45if_g0Nv9TgZ77He1I1p8DhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.84.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
98:d4:38:10:7c:41:94:59:8c:00:9f:46:93:ce:00:00:87:69:
42:22:a3:02:3a:d1:05:ef:1f:5f:85:bf:64:bb:db:be:58:40:
e1:13:d7:f0:73:8f:cd:cd:ee:59:c4:17:b6:0b:2e:5c:a5:8c:
03:fa:64:e3:26:2a:e1:f9:c0:02:a2:0a:79:63:fa:57:1f:4e:
12:8b:39:08:68:7f:48:30:ef:93:ca:b6:c7:ff:63:fb:27:2e:
14:3b:0d:e7:8b:f6:21:e3:f1:d0:dd:4c:e2:a6:ca:00:2c:ef:
f3:ef:1f:82:b3:6c:09:60:fd:0d:99:a1:f6:8d:65:59:ce:18:
56:82:1e:74:21:63:51:30:4f:cd:68:7d:97:8a:13:28:3f:05:
79:43:bd:29:11:aa:0e:b9:8b:13:64:5b:45:a1:22:5f:f8:6d:
c7:a2:5a:c9:4f:d0:5a:28:9b:71:f4:e2:4f:b1:92:18:14:bb:
9b:68:50:25:6e:c6:f6:e7:ec:09:a4:db:91:35:d2:ff:af:7b:
8a:09:b2:41:ec:b6:f1:19:b5:d4:9b:7c:55:8e:15:1b:d3:85:
f1:89:03:b4:d9:29:5c:59:7e:0b:7d:76:0c:45:f3:74:3d:91:
57:ce:57:fb:06:aa:1b:f1:7a:27:ac:58:2b:a4:af:ad:65:a4:
0d:a5:fd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:41 2026 by rpki-client