Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/OdBmG6fU-UEhnEKntxCaonyyB4w.roa
File: OdBmG6fU-UEhnEKntxCaonyyB4w.roa (raw, json)
Hash identifier: zZOVEl4vhmKrOMSZUOhczKKn2MWTdVMJKBavMTbZMl0=
Subject key identifier: 39:D0:66:1B:A7:D4:F9:41:21:9C:42:A7:B7:10:9A:A2:7C:B2:07:8C
Certificate issuer: /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial: 019F2368849797B99864A7177A7A89CE3B74
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/OdBmG6fU-UEhnEKntxCaonyyB4w.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34354
IP address blocks: 85.158.72.0/23 maxlen: 23
85.158.74.0/23 maxlen: 23
85.158.76.0/23 maxlen: 23
85.158.78.0/23 maxlen: 23
89.221.112.0/23 maxlen: 23
89.221.114.0/23 maxlen: 23
89.221.116.0/23 maxlen: 23
89.221.118.0/23 maxlen: 23
89.221.120.0/23 maxlen: 23
89.221.120.0/24 maxlen: 24
89.221.122.0/23 maxlen: 23
89.221.124.0/23 maxlen: 23
89.221.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:84:97:97:b9:98:64:a7:17:7a:7a:89:ce:3b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39d0661ba7d4f941219c42a7b7109aa27cb2078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:bd:de:d1:98:2d:a4:8a:28:2c:59:1a:54:
20:76:06:27:20:d8:26:c0:61:fb:26:74:a2:2d:38:
ac:6c:c4:41:95:d7:65:27:fb:6d:ca:7d:88:9c:a0:
e4:79:ab:54:5e:af:a6:4e:58:7f:fd:66:9d:76:2d:
ce:a2:d9:1e:04:e4:63:0f:46:b5:97:8b:3a:11:2e:
51:9f:e2:da:db:05:92:3b:c6:bb:17:89:af:1e:b0:
79:aa:20:ed:13:8c:60:0c:34:04:65:39:e5:98:fe:
b5:e4:a3:0a:7f:79:f5:9f:09:24:de:7f:fc:83:44:
89:61:ff:91:93:fc:52:08:70:f5:2f:ed:85:d2:3f:
9c:e0:80:7d:d7:24:44:e0:14:86:93:1d:cc:73:41:
e4:1c:42:17:1c:1e:d4:f0:7c:de:7d:1a:bf:c4:e3:
27:cb:6d:71:7d:88:51:0a:d8:92:9f:0f:61:ce:b1:
9e:79:0a:12:d9:d9:be:a8:d0:01:78:4b:cf:3a:d7:
ac:07:16:ee:46:e8:32:71:08:15:11:da:72:05:ec:
41:4a:49:38:f5:78:19:bb:7f:aa:12:87:e6:aa:7d:
32:f3:5d:2a:b5:d9:cb:89:04:b9:5c:50:4a:89:9d:
e5:eb:68:8b:28:45:fe:52:ad:f5:ac:c0:1b:46:ea:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:66:1B:A7:D4:F9:41:21:9C:42:A7:B7:10:9A:A2:7C:B2:07:8C
X509v3 Authority Key Identifier:
keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/OdBmG6fU-UEhnEKntxCaonyyB4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.72.0/21
89.221.112.0/20
Signature Algorithm: sha256WithRSAEncryption
43:26:89:76:af:31:ee:cf:61:f9:30:aa:d9:94:c0:e9:d8:ab:
02:13:d0:f7:d1:3a:91:89:86:f3:95:58:47:b5:7d:85:8f:6d:
16:ea:e7:ca:ff:3c:60:0a:5f:15:a7:e6:b9:0f:4e:d8:3d:e9:
dc:52:97:1d:7d:11:89:cd:65:86:53:7e:72:5b:fd:ba:c3:01:
13:f3:5c:ee:b2:29:c6:94:8e:ae:c0:f1:77:49:9c:54:3d:09:
e8:8d:ce:7f:b5:24:cd:91:96:ee:f1:63:b6:af:28:89:36:e9:
4f:f3:22:18:16:3f:d8:da:b1:9b:2f:d6:4d:9f:dd:73:2a:6a:
6b:91:03:52:60:0b:68:05:9e:e3:07:45:e7:7b:7d:77:b2:ae:
f9:89:eb:78:17:0c:97:44:f7:0d:98:85:cc:58:ea:22:d3:94:
21:b0:c8:73:71:31:ca:7d:30:10:35:59:c8:61:41:40:59:76:
80:64:ee:28:a0:fc:26:90:6d:02:06:e3:e7:b4:dc:8d:8d:43:
b0:a8:a5:af:e8:4f:06:3c:14:69:2f:df:0a:56:b2:de:f7:6e:
7d:c0:b8:3c:bc:19:5e:d4:36:3a:5e:a4:6f:0e:13:46:fa:34:
c3:46:9f:9f:f0:1b:70:26:c2:48:3e:29:fc:99:57:8f:dc:83:
d1:cf:9d:12
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaISXl7mYZKcXenqJzjt0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzBmZjA4OTA3YTk4NGI4ZTc3NjNlN2FhOGE5ZmM4YWY1
MWVkYTYwHhcNMjYwNzAyMTUxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWQwNjYxYmE3ZDRmOTQxMjE5YzQyYTdiNzEwOWFhMjdjYjIwNzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1si93tGYLaSKKCxZGlQgdgYnINgm
wGH7JnSiLTisbMRBlddlJ/ttyn2InKDkeatUXq+mTlh//Waddi3OotkeBORjD0a1
l4s6ES5Rn+La2wWSO8a7F4mvHrB5qiDtE4xgDDQEZTnlmP615KMKf3n1nwkk3n/8
g0SJYf+Rk/xSCHD1L+2F0j+c4IB91yRE4BSGkx3Mc0HkHEIXHB7U8HzefRq/xOMn
y21xfYhRCtiSnw9hzrGeeQoS2dm+qNABeEvPOtesBxbuRugycQgVEdpyBexBSkk4
9XgZu3+qEofmqn0y810qtdnLiQS5XFBKiZ3l62iLKEX+Uq31rMAbRuqKNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDnQZhun1PlBIZxCp7cQmqJ8sgeMMB8GA1UdIwQY
MBaAFFbA/wiQephLjndj56qKn8ivUe2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt
YzVlNmQyM2Y4YjA5LzEvT2RCbUc2ZlUtVUVobkVLbnR4Q2Fvbnl5QjR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5
LzEvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVZ5IAwQE
Wd1wMA0GCSqGSIb3DQEBCwUAA4IBAQBDJol2rzHuz2H5MKrZlMDp2KsCE9D30TqR
iYbzlVhHtX2Fj20W6ufK/zxgCl8Vp+a5D07YPencUpcdfRGJzWWGU35yW/26wwET
81zusinGlI6uwPF3SZxUPQnojc5/tSTNkZbu8WO2ryiJNulP8yIYFj/Y2rGbL9ZN
n91zKmprkQNSYAtoBZ7jB0Xne313sq75iet4FwyXRPcNmIXMWOoi05QhsMhzcTHK
fTAQNVnIYUFAWXaAZO4ooPwmkG0CBuPntNyNjUOwqKWv6E8GPBRpL98KVrLe9259
wLg8vBle1DY6XqRvDhNG+jTDRp+f8BtwJsJIPin8mVeP3IPRz50S
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:02:59 2026 by rpki-client