Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/vNBxcilTCF9bkKF4Fp5yWCyn6WI.roa
File: vNBxcilTCF9bkKF4Fp5yWCyn6WI.roa (raw, json)
Hash identifier: AlHcv2RUOxd4iRm2eYcXjPspXsoC6zy+k/v6jB0x6Wc=
Subject key identifier: BC:D0:71:72:29:53:08:5F:5B:90:A1:78:16:9E:72:58:2C:A7:E9:62
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A0D337F3B05A71E39DB5218C2E1C4DDE51
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/vNBxcilTCF9bkKF4Fp5yWCyn6WI.roa
Signing time: Thu 24 Sep 2026 11:40:54 +0000
ROA not before: Thu 24 Sep 2026 11:40:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29262
IP address blocks: 93.190.14.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
2a0b:6780::/29 maxlen: 29
2a0c:46c0::/29 maxlen: 29
2a0c:67c0::/29 maxlen: 29
2a10:8b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:37:f3:b0:5a:71:e3:9d:b5:21:8c:2e:1c:4d:de:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 24 11:40:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcd071722953085f5b90a178169e72582ca7e962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:f5:b1:92:58:0e:e4:a9:ca:a6:d4:14:a5:
e4:d9:26:4c:fb:c1:db:82:01:79:e3:7a:05:02:39:
99:5e:f8:23:32:b5:1d:6d:cb:e3:a9:05:5b:fc:c7:
3b:1b:ff:ff:27:bd:60:2e:a8:c7:f7:8c:09:e5:ef:
ec:5c:36:77:de:40:64:dc:68:9e:d5:25:37:7d:5d:
e0:b4:f9:6e:b9:35:8a:25:03:60:a3:32:36:7c:31:
1f:16:67:32:25:64:9d:65:dc:77:60:8c:cb:a3:a5:
0f:bc:f0:9b:29:8b:7d:e6:3a:71:e2:77:b8:dc:de:
cc:4e:cb:a4:d1:87:3f:88:61:00:29:de:62:76:06:
02:c9:35:c5:b7:90:89:19:cb:fa:28:53:84:a6:b9:
ab:cc:a3:59:6d:b3:c3:c0:f6:da:8c:41:ab:db:0d:
ee:54:38:50:fc:d5:78:46:a1:fb:62:3e:b4:a3:92:
f0:5a:88:a6:8a:23:ab:e5:fc:85:53:2e:44:72:87:
dc:1f:2e:0b:94:0c:0b:37:8c:46:aa:47:11:df:ac:
15:ca:23:b7:6c:81:0f:86:58:85:3a:55:6d:cc:80:
43:f8:ea:85:ae:07:31:dc:7a:8f:32:be:de:97:e8:
32:52:1a:bd:6d:b3:06:8d:da:29:59:b4:2f:d3:f1:
75:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D0:71:72:29:53:08:5F:5B:90:A1:78:16:9E:72:58:2C:A7:E9:62
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/vNBxcilTCF9bkKF4Fp5yWCyn6WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.14.0/24
185.85.189.0-185.85.190.255
185.85.237.0/24
185.86.5.0/24
185.88.172.0/23
185.88.175.0/24
185.98.63.0/24
185.119.80.0/24
185.249.200.0/22
IPv6:
2a0b:6780::/29
2a0c:46c0::/29
2a0c:67c0::/29
2a10:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:5d:31:b0:12:f5:6f:a4:68:2a:1b:40:2d:3d:c3:dc:54:57:
0a:8d:4b:87:a8:9f:3b:21:c5:ce:ed:31:b7:e1:bb:5f:7a:14:
f8:d6:6e:58:39:d3:bc:29:92:d3:57:1a:12:fb:a2:f6:ef:45:
e3:f2:ab:d5:5a:ec:7b:3c:3c:6e:f4:80:ff:37:8c:3c:61:3d:
92:c6:f7:4f:7d:a5:9b:1a:29:07:d6:27:5e:8d:92:c6:9c:fe:
ed:fb:31:2f:4f:9e:7b:b3:e8:c6:a9:f3:ea:47:21:9d:23:4b:
d8:ce:a4:34:66:18:38:34:c3:c5:fa:9c:86:aa:86:72:ed:10:
80:06:53:6d:53:34:6c:91:8d:db:e2:1e:a1:94:c8:11:dc:a6:
f0:cf:b6:39:88:8e:86:78:71:ae:81:87:b4:ad:3e:d4:4a:31:
30:27:35:19:07:82:e8:6d:7b:0f:2e:29:04:51:58:d5:10:a7:
d0:b9:20:2a:a6:39:62:f3:ca:ca:9b:c0:33:d5:f9:bb:e8:11:
2f:c5:a4:21:5f:ec:d6:33:61:3d:54:75:72:c9:23:fc:2e:26:
b2:d3:f3:e7:c8:d3:b4:d2:fe:25:2f:c5:71:fe:b8:6c:ec:63:
2b:78:de:5a:64:02:a5:4b:fb:56:7e:61:b2:5d:25:89:01:37:
09:59:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:45:55 2026 by rpki-client