Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/RgvVQm5i55AP3gZ5KWsISLCa9Hk.roa
File: RgvVQm5i55AP3gZ5KWsISLCa9Hk.roa (raw, json)
Hash identifier: OZ0ysfXOwKHpmAoO/4k/2zxN5HNQM5NxSbPzjXOrOvI=
Subject key identifier: 46:0B:D5:42:6E:62:E7:90:0F:DE:06:79:29:6B:08:48:B0:9A:F4:79
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 0199B88271AFFF66958091BCE4B368EF5949
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/RgvVQm5i55AP3gZ5KWsISLCa9Hk.roa
Signing time: Mon 06 Oct 2025 07:53:00 +0000
ROA not before: Mon 06 Oct 2025 07:53:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 85.85.104.0/21 maxlen: 21
85.85.112.0/20 maxlen: 20
85.85.160.0/20 maxlen: 21
85.85.176.0/20 maxlen: 21
85.85.200.0/21 maxlen: 21
85.85.224.0/20 maxlen: 20
85.86.24.0/21 maxlen: 21
85.86.32.0/21 maxlen: 21
85.86.56.0/21 maxlen: 21
85.86.64.0/21 maxlen: 21
85.86.176.0/21 maxlen: 24
85.86.184.0/21 maxlen: 24
85.86.208.0/21 maxlen: 21
85.86.216.0/22 maxlen: 22
85.86.232.0/21 maxlen: 21
85.86.240.0/21 maxlen: 22
85.86.248.0/21 maxlen: 24
85.87.0.0/16 maxlen: 23
85.87.8.0/21 maxlen: 22
85.87.160.0/21 maxlen: 22
85.87.176.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:82:71:af:ff:66:95:80:91:bc:e4:b3:68:ef:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Oct 6 07:53:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=460bd5426e62e7900fde0679296b0848b09af479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:6d:8a:96:bd:5e:0d:ae:da:81:d6:9b:5a:
a7:fe:82:9e:10:d1:8c:79:ee:e9:eb:1c:bb:90:a7:
ae:28:e0:50:bc:40:15:46:ad:6b:10:c7:c6:66:c7:
11:58:56:b8:b4:5e:86:58:76:69:ba:b8:59:87:2b:
8d:85:b9:66:58:b4:6b:5e:5a:54:c9:7d:88:1a:1c:
b7:37:20:49:0d:6c:e3:c5:2a:4f:e8:45:ca:7e:ed:
5a:15:ee:e8:2b:2e:4f:71:94:30:db:c1:e9:f8:96:
76:2c:dd:4a:13:fd:b6:9a:24:6d:03:d3:f9:fd:25:
e6:64:52:fc:14:ea:1f:55:b3:f3:0f:1f:fa:a2:77:
df:4a:7d:ed:21:40:d9:84:d4:a3:19:60:e1:9e:4b:
b5:51:4b:bc:88:70:d3:27:2f:3d:2e:19:00:52:45:
d4:96:fa:c5:42:48:0a:56:89:f7:e2:a9:fa:25:e2:
d8:6b:58:de:94:7b:82:0e:15:9b:97:93:b8:41:9d:
29:90:69:41:fc:31:ea:24:8c:73:16:52:b5:bc:46:
bd:da:46:78:50:37:55:65:33:34:17:41:31:8a:db:
bf:bf:d4:7d:54:48:0c:91:25:c6:1c:71:94:0c:48:
00:cb:9e:a2:56:57:dd:a8:41:cb:27:b5:0b:8f:02:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0B:D5:42:6E:62:E7:90:0F:DE:06:79:29:6B:08:48:B0:9A:F4:79
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/RgvVQm5i55AP3gZ5KWsISLCa9Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.85.104.0-85.85.127.255
85.85.160.0/19
85.85.200.0/21
85.85.224.0/20
85.86.24.0-85.86.39.255
85.86.56.0-85.86.71.255
85.86.176.0/20
85.86.208.0-85.86.219.255
85.86.232.0-85.87.255.255
Signature Algorithm: sha256WithRSAEncryption
8c:03:2d:e9:9b:33:db:ca:d8:fc:59:e5:e7:0b:95:55:d7:d0:
1a:b1:a2:c7:76:01:7a:d9:ed:87:3f:ea:12:68:9b:a7:4c:8a:
e8:bd:51:76:25:52:b3:75:12:c0:fa:82:98:03:5a:87:49:8f:
c2:61:30:c4:d0:f3:35:ed:1b:db:27:72:31:dc:1a:3a:40:7d:
d2:67:eb:b7:17:7e:4d:1c:34:f3:7a:e8:ab:d8:21:6b:78:52:
25:18:1c:01:c6:89:1c:f5:02:dc:cb:ab:fb:04:26:f1:69:4a:
90:de:5e:38:e2:8c:a4:aa:f1:d3:52:11:30:95:55:eb:70:63:
f1:8b:93:81:ad:33:1a:12:d3:25:26:94:23:19:60:f3:ad:13:
6f:e0:63:88:95:0a:6e:05:85:f2:27:cd:a6:d4:5d:3f:3c:7d:
e3:aa:a0:5d:8d:f3:56:d3:ea:05:8d:f9:9d:70:82:80:2f:fd:
4b:0e:4f:73:c9:26:a7:f9:53:5e:bc:5a:15:84:33:24:51:9c:
2a:c4:77:0d:1e:01:55:29:5e:1c:c7:3e:14:a7:97:b0:6c:8f:
69:8b:14:d9:00:f9:b2:7a:e3:db:39:8a:de:56:d1:f4:93:48:
3f:ec:b8:d6:99:6f:b0:70:b9:c9:63:85:89:e7:37:dc:b2:dc:
27:86:fc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:49:29 2025 by rpki-client