Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/71ztyRZN0E_dZWd9j97M2dWN9BI.roa
File: 71ztyRZN0E_dZWd9j97M2dWN9BI.roa (raw, json)
Hash identifier: N0NmHaly5wzap4G0v7p8Xmzk6eQ/F8VdHotq8qDtwSw=
Subject key identifier: EF:5C:ED:C9:16:4D:D0:4F:DD:65:67:7D:8F:DE:CC:D9:D5:8D:F4:12
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01A17859AD5C249339C1BC44A258F7584483
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/71ztyRZN0E_dZWd9j97M2dWN9BI.roa
Signing time: Mon 26 Oct 2026 13:15:05 +0000
ROA not before: Mon 26 Oct 2026 13:15:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 83.229.113.0/24 maxlen: 24
185.90.220.0/24 maxlen: 24
185.90.221.0/24 maxlen: 24
185.90.222.0/24 maxlen: 24
185.90.223.0/24 maxlen: 24
193.57.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:59:ad:5c:24:93:39:c1:bc:44:a2:58:f7:58:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Oct 26 13:15:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef5cedc9164dd04fdd65677d8fdeccd9d58df412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:28:8b:2d:6d:25:98:48:79:c0:82:1a:19:
1a:51:d9:5f:17:35:0d:f4:f4:4f:4d:81:04:1d:da:
1a:fe:21:a6:1a:db:18:08:97:20:8e:a4:a1:45:79:
ba:a1:cc:e9:a9:94:77:26:8e:2f:c0:74:9d:a3:21:
8f:ed:46:0d:c9:94:f0:18:51:07:d5:06:5e:ff:30:
78:f6:20:4a:98:72:1f:fe:2e:6e:c6:4f:b5:15:21:
e9:0a:2d:c2:31:bc:30:01:0f:fa:93:c0:56:e6:05:
15:b9:a9:95:45:43:62:91:5d:3e:05:eb:e2:aa:98:
00:e8:d1:c4:9c:41:17:c1:d4:cd:08:80:03:c4:fa:
9e:ea:bc:20:57:b9:ba:79:80:7f:23:64:e5:c3:81:
30:0f:b9:ef:7d:b2:06:bd:e2:9d:bd:cf:ed:ca:55:
4d:89:08:5b:3f:f2:ff:f1:91:86:2a:b8:5e:ee:3a:
b1:82:96:cd:b6:43:d0:73:70:8a:d1:81:82:b5:63:
ed:0b:7d:a9:4b:4d:8e:25:ce:f0:d3:5a:d3:58:5b:
ac:e3:00:09:17:12:73:9f:ca:4c:4c:36:2a:72:9e:
db:e9:12:f5:da:20:2a:f1:49:31:3f:40:2d:bc:45:
f1:da:1a:2e:4a:da:2c:b8:0e:a8:51:04:7e:86:6c:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5C:ED:C9:16:4D:D0:4F:DD:65:67:7D:8F:DE:CC:D9:D5:8D:F4:12
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/71ztyRZN0E_dZWd9j97M2dWN9BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.113.0/24
185.90.220.0/22
193.57.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:af:3f:c1:ef:70:1f:44:84:9d:80:94:13:ae:d1:fd:fb:fe:
04:49:30:81:b7:32:6a:e6:9c:0c:e7:a2:b6:73:3c:db:ea:86:
0b:0f:67:08:a5:50:a3:38:06:fb:41:e9:6b:c8:54:4a:eb:80:
d4:8b:48:cb:6a:a6:46:c3:d2:c2:51:df:9a:3f:2f:b1:3e:9f:
c0:5b:ab:cf:a5:a4:71:f8:10:af:04:5a:57:6e:2c:58:20:b5:
7c:1a:e3:fa:24:a8:a6:9d:d7:d4:c0:59:e4:59:0f:f2:a4:04:
ab:f5:71:68:cf:12:8b:1f:6b:d1:e5:cb:f2:12:36:5b:e9:71:
85:3e:94:3e:ae:c4:46:9e:13:77:2f:76:e4:70:96:5c:bd:6d:
b7:e9:75:ba:8f:0f:09:1b:e5:21:d3:6d:83:36:5a:bb:b3:96:
2d:ce:1f:77:17:09:81:a6:b3:83:59:47:e7:12:e2:6d:6b:a9:
27:72:31:67:57:6e:5c:cb:0d:ba:7e:3a:5a:71:40:90:ee:cf:
2b:25:ce:51:d6:97:22:2f:10:b9:2f:38:0a:6f:ed:87:71:4e:
31:b6:bd:ce:36:ae:ba:8d:31:47:28:b8:0e:15:5d:b5:2e:3f:
0b:d0:0c:59:08:4a:e2:50:e4:b9:b6:b1:0e:f3:8a:9b:bf:5b:
ea:be:7e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:53 2026 by rpki-client