Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/YOD6juWqLr8ovSKXGYZyl_bOXhU.roa
File: YOD6juWqLr8ovSKXGYZyl_bOXhU.roa (raw, json)
Hash identifier: /zUn9PBvmeNcg8L6ufut/ybOdlqaK/FgJWENlir8bts=
Subject key identifier: 60:E0:FA:8E:E5:AA:2E:BF:28:BD:22:97:19:86:72:97:F6:CE:5E:15
Certificate issuer: /CN=deceda98c164c705cc46a8bab74510164a4e5443
Certificate serial: 019F2368B67395987417690C564A4D16C534
Authority key identifier: DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/YOD6juWqLr8ovSKXGYZyl_bOXhU.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41350
IP address blocks: 85.223.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:73:95:98:74:17:69:0c:56:4a:4d:16:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deceda98c164c705cc46a8bab74510164a4e5443
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60e0fa8ee5aa2ebf28bd229719867297f6ce5e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:3a:05:ef:6f:bc:7c:44:3a:75:22:b9:8b:
ed:e7:ce:26:fb:51:00:5d:71:30:10:5f:42:ba:5b:
44:cc:28:23:45:0f:8f:0e:e3:43:25:c4:0a:b6:a9:
29:01:c7:1a:43:8d:de:b1:f2:6f:76:ac:b8:3f:15:
de:91:92:96:1c:37:ec:b8:bf:9c:7a:7c:77:ec:1a:
72:53:51:fc:3a:7f:dd:a7:a4:f3:47:2a:87:08:d5:
4a:22:f3:13:74:41:67:d8:26:22:df:68:2e:71:02:
72:c4:ee:dd:98:14:b8:5c:5e:63:c3:de:d2:9c:d0:
6e:84:99:3b:42:3a:0f:10:e6:a2:ed:52:65:25:d1:
df:bd:10:6e:1a:9c:b3:3a:53:c6:27:5d:c1:16:f1:
d6:f6:ba:76:67:4f:c7:45:4f:71:8d:17:51:60:e7:
35:ed:52:29:b6:9f:cf:74:c0:b2:84:ec:1e:e3:31:
c4:14:99:90:74:e7:11:d9:bb:a1:40:20:8f:66:93:
9c:f5:79:ec:96:5c:66:f5:8e:1f:a5:eb:25:2c:fc:
07:0a:c3:2c:37:8a:76:0d:b4:a7:ba:05:cb:09:5c:
07:80:9f:ee:3f:55:23:2d:78:c2:ae:7b:c4:43:05:
9a:3a:70:65:2a:51:de:fd:fc:39:89:df:b1:ea:83:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:FA:8E:E5:AA:2E:BF:28:BD:22:97:19:86:72:97:F6:CE:5E:15
X509v3 Authority Key Identifier:
keyid:DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/YOD6juWqLr8ovSKXGYZyl_bOXhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.223.143.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1a:46:76:0c:b9:20:24:2e:ad:35:e7:21:ea:b7:4d:c7:a8:
16:6d:bd:7b:18:13:8c:b2:9a:64:48:49:a7:87:59:a5:76:a1:
06:0a:32:26:7e:51:02:d1:3b:d5:a3:f3:e2:e9:fd:28:cd:b8:
e4:f7:1e:12:2b:6a:75:80:ad:4a:84:15:4f:d2:85:6d:15:85:
6c:42:2d:13:4c:9f:3e:68:bd:d9:ef:36:96:4b:32:0d:d8:c9:
2f:c4:75:f9:72:a7:99:88:76:45:9c:14:43:8c:85:6b:7b:e0:
4a:57:f2:55:59:34:e7:46:98:2b:12:d4:46:f8:c8:bb:33:96:
1d:3d:d1:af:54:ef:b7:38:d6:27:f7:98:80:ea:78:4d:07:2a:
57:5c:c4:f8:e8:cd:f9:d7:16:0e:aa:4b:31:76:8d:1c:4a:ac:
f2:d9:c9:cf:f7:a8:5a:1c:f0:31:03:07:9c:a8:6e:3e:88:3c:
6d:52:22:f8:37:81:13:0e:c3:b3:2f:c2:15:58:ba:bf:55:0b:
ac:33:8e:d6:49:eb:0d:68:99:2e:c4:c5:51:bc:ec:53:08:77:
d5:0b:b5:cc:df:0f:86:01:18:47:72:64:9a:eb:26:f9:f7:85:
fe:48:2d:01:24:65:3a:67:cb:8f:6d:f3:b9:a1:fc:8b:00:eb:
92:6a:14:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaLZzlZh0F2kMVkpNFsU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlY2VkYTk4YzE2NGM3MDVjYzQ2YThiYWI3NDUxMDE2NGE0
ZTU0NDMwHhcNMjYwNzAyMTUxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGUwZmE4ZWU1YWEyZWJmMjhiZDIyOTcxOTg2NzI5N2Y2Y2U1ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTU6Be9vvHxEOnUiuYvt584m+1EA
XXEwEF9CultEzCgjRQ+PDuNDJcQKtqkpAccaQ43esfJvdqy4PxXekZKWHDfsuL+c
enx37BpyU1H8On/dp6TzRyqHCNVKIvMTdEFn2CYi32gucQJyxO7dmBS4XF5jw97S
nNBuhJk7QjoPEOai7VJlJdHfvRBuGpyzOlPGJ13BFvHW9rp2Z0/HRU9xjRdRYOc1
7VIptp/PdMCyhOwe4zHEFJmQdOcR2buhQCCPZpOc9Xnsllxm9Y4fpeslLPwHCsMs
N4p2DbSnugXLCVwHgJ/uP1UjLXjCrnvEQwWaOnBlKlHe/fw5id+x6oN7QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGDg+o7lqi6/KL0ilxmGcpf2zl4VMB8GA1UdIwQY
MBaAFN7O2pjBZMcFzEaourdFEBZKTlRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3M3YW1NRmt4d1hNUnFpNnQwVVFGa3BPVkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAt
ZGUwNWM1NDA0NWJiLzEvWU9ENmp1V3FMcjhvdlNLWEdZWnlsX2JPWGhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAtZGUwNWM1NDA0NWJi
LzEvM3M3YW1NRmt4d1hNUnFpNnQwVVFGa3BPVkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVd+PMA0G
CSqGSIb3DQEBCwUAA4IBAQBAGkZ2DLkgJC6tNech6rdNx6gWbb17GBOMsppkSEmn
h1mldqEGCjImflEC0TvVo/Pi6f0ozbjk9x4SK2p1gK1KhBVP0oVtFYVsQi0TTJ8+
aL3Z7zaWSzIN2MkvxHX5cqeZiHZFnBRDjIVre+BKV/JVWTTnRpgrEtRG+Mi7M5Yd
PdGvVO+3ONYn95iA6nhNBypXXMT46M351xYOqksxdo0cSqzy2cnP96haHPAxAwec
qG4+iDxtUiL4N4ETDsOzL8IVWLq/VQusM47WSesNaJkuxMVRvOxTCHfVC7XM3w+G
ARhHcmSa6yb594X+SC0BJGU6Z8uPbfO5ofyLAOuSahR1
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:49 2026 by rpki-client