Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/f1UURy4WYYMhl8kDyxAk5uISDuQ.roa
File: f1UURy4WYYMhl8kDyxAk5uISDuQ.roa (raw, json)
Hash identifier: wftY/sxC1wRHkgOwuGR+lGzWU68w9Te8WHrbew7fywA=
Subject key identifier: 7F:55:14:47:2E:16:61:83:21:97:C9:03:CB:10:24:E6:E2:12:0E:E4
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 01A0EC378A975D01A6658BF006499BE7DD73
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/f1UURy4WYYMhl8kDyxAk5uISDuQ.roa
Signing time: Tue 29 Sep 2026 08:10:58 +0000
ROA not before: Tue 29 Sep 2026 08:10:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15704
IP address blocks: 85.85.104.0/21 maxlen: 21
85.85.112.0/20 maxlen: 20
85.85.160.0/20 maxlen: 21
85.85.176.0/20 maxlen: 21
85.85.200.0/21 maxlen: 21
85.85.224.0/20 maxlen: 20
85.86.24.0/21 maxlen: 21
85.86.32.0/21 maxlen: 21
85.86.56.0/21 maxlen: 21
85.86.64.0/21 maxlen: 21
85.86.176.0/21 maxlen: 24
85.86.184.0/21 maxlen: 24
85.86.208.0/21 maxlen: 21
85.86.216.0/22 maxlen: 22
85.86.220.0/22 maxlen: 24
85.86.232.0/21 maxlen: 21
85.86.240.0/21 maxlen: 22
85.86.248.0/21 maxlen: 24
85.87.0.0/16 maxlen: 24
85.87.8.0/21 maxlen: 22
85.87.160.0/21 maxlen: 22
85.87.176.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:37:8a:97:5d:01:a6:65:8b:f0:06:49:9b:e7:dd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Sep 29 08:10:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f5514472e1661832197c903cb1024e6e2120ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:96:fc:8c:27:21:1b:2f:80:9e:77:c5:13:
55:04:b9:05:34:ed:4b:2c:78:d4:ae:30:2d:4b:b5:
46:e4:c1:6b:11:19:f0:fc:b5:49:ad:7f:56:9e:a4:
1e:89:08:0a:ff:74:99:87:d0:44:2c:ca:04:fe:4c:
3b:a7:77:a4:4d:49:5e:3a:a6:26:46:98:b9:cf:34:
c2:62:78:97:45:e0:5c:2b:a4:0f:c3:9b:d4:0e:84:
e3:26:08:2d:ee:ad:ca:bf:2e:00:83:ae:90:25:ff:
23:67:50:4f:89:6c:8f:ed:04:47:5d:5e:07:ba:a6:
20:70:77:57:db:cc:86:56:66:8f:bd:ba:74:d6:59:
9e:f6:a8:29:3b:bc:eb:48:25:21:9c:3e:8f:cc:78:
9a:9c:83:92:c7:dc:19:5b:61:23:d3:3b:80:40:75:
74:7a:27:9e:ae:0c:4c:58:a2:16:d4:ba:50:61:02:
e6:26:72:44:f3:f0:b3:e3:70:b2:fc:0c:85:e2:a0:
f6:38:66:e2:01:c6:20:d9:a6:13:02:5d:4d:81:91:
db:8d:18:9a:4b:74:dc:21:6a:c3:b7:13:9c:4b:bd:
0b:0d:0e:2d:92:47:76:92:f1:a9:84:df:86:55:98:
72:39:b5:ab:a3:2c:eb:cf:d7:8c:0d:ab:5a:b5:03:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:14:47:2E:16:61:83:21:97:C9:03:CB:10:24:E6:E2:12:0E:E4
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/f1UURy4WYYMhl8kDyxAk5uISDuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.85.104.0-85.85.127.255
85.85.160.0/19
85.85.200.0/21
85.85.224.0/20
85.86.24.0-85.86.39.255
85.86.56.0-85.86.71.255
85.86.176.0/20
85.86.208.0/20
85.86.232.0-85.87.255.255
Signature Algorithm: sha256WithRSAEncryption
07:a6:41:bf:f6:8a:4c:5f:f8:37:d8:df:9d:62:fa:0a:04:ac:
bd:2b:62:34:1b:9b:71:42:ba:be:fd:66:d9:01:75:a5:95:7d:
3f:a7:00:2a:be:d1:67:7a:b4:cb:71:ba:11:79:10:ff:1b:24:
62:11:28:bd:94:32:83:68:bc:79:fe:17:bc:b2:fc:0b:fe:f9:
b7:a4:ed:12:b8:d1:62:17:7d:81:35:a5:fb:b5:94:0e:09:3e:
76:87:a6:bc:29:27:78:f0:ac:bf:c3:a6:e7:e4:83:4e:27:f6:
e7:af:ba:b1:e1:27:21:6f:7a:20:29:3e:75:a9:6d:7b:11:cd:
a8:bc:24:b8:8c:6a:f9:c2:a0:f4:f1:39:2d:ff:94:94:f3:85:
23:8f:e2:85:e9:d4:ad:3e:1d:84:43:51:87:30:da:a4:cd:ec:
23:e1:af:73:98:8b:3e:6c:50:ed:a3:1c:16:d0:9d:ec:5b:9d:
81:9d:45:e1:48:d6:6b:8a:93:b1:3f:78:f1:7b:51:94:df:35:
f7:87:96:77:3b:c1:3b:ec:cb:dc:01:52:e0:0a:85:23:c0:f2:
43:77:ff:7f:72:11:0c:94:6c:98:0f:75:d9:49:be:cb:ca:c6:
88:7c:be:57:54:0a:c2:c8:ee:fc:9b:73:85:c1:03:bb:cd:1c:
32:1b:1e:1c
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISAaDsN4qXXQGmZYvwBkmb591zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTM5YjQxMDc0YzdkNmFkYzhlZTI3NGUyMzlmN2I4ZWIz
NTg1ZTkwHhcNMjYwOTI5MDgxMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjU1MTQ0NzJlMTY2MTgzMjE5N2M5MDNjYjEwMjRlNmUyMTIwZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVeW/IwnIRsvgJ53xRNVBLkFNO1L
LHjUrjAtS7VG5MFrERnw/LVJrX9WnqQeiQgK/3SZh9BELMoE/kw7p3ekTUleOqYm
Rpi5zzTCYniXReBcK6QPw5vUDoTjJggt7q3Kvy4Ag66QJf8jZ1BPiWyP7QRHXV4H
uqYgcHdX28yGVmaPvbp01lme9qgpO7zrSCUhnD6PzHianIOSx9wZW2Ej0zuAQHV0
eieergxMWKIW1LpQYQLmJnJE8/Cz43Cy/AyF4qD2OGbiAcYg2aYTAl1NgZHbjRia
S3TcIWrDtxOcS70LDQ4tkkd2kvGphN+GVZhyObWroyzrz9eMDatatQMBrwIDAQAB
o4ICWDCCAlQwHQYDVR0OBBYEFH9VFEcuFmGDIZfJA8sQJObiEg7kMB8GA1UdIwQY
MBaAFA/jm0EHTH1q3I7idOI597jrNYXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUt
MDRlODEyZDQ4ZTcyLzEvZjFVVVJ5NFdZWU1obDhrRHl4QWs1dUlTRHVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUtMDRlODEyZDQ4ZTcy
LzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVMAwDBANVVWgD
BAdVVQADBAVVVaADBANVVcgDBARVVeAwDAMEA1VWGAMEA1VWIDAMAwQDVVY4AwQD
VVZAAwQEVVawAwQEVVbQMAsDBANVVugDAwNVUDANBgkqhkiG9w0BAQsFAAOCAQEA
B6ZBv/aKTF/4N9jfnWL6CgSsvStiNBubcUK6vv1m2QF1pZV9P6cAKr7RZ3q0y3G6
EXkQ/xskYhEovZQyg2i8ef4XvLL8C/75t6TtErjRYhd9gTWl+7WUDgk+doemvCkn
ePCsv8Om5+SDTif256+6seEnIW96ICk+daltexHNqLwkuIxq+cKg9PE5Lf+UlPOF
I4/ihenUrT4dhENRhzDapM3sI+Gvc5iLPmxQ7aMcFtCd7FudgZ1F4UjWa4qTsT94
8XtRlN8194eWdzvBO+zL3AFS4AqFI8DyQ3f/f3IRDJRsmA912Um+y8rGiHy+V1QK
wsju/JtzhcEDu80cMhseHA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 17:55:30 2026 by rpki-client