Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/8HyCmR3m3bB-ZPFvZNYQwHNfPQc.roa
File: 8HyCmR3m3bB-ZPFvZNYQwHNfPQc.roa (raw, json)
Hash identifier: dVgFr+se9/uNWjPcDQ0s+MLuqUnv796+kO0OhL/2WIw=
Subject key identifier: F0:7C:82:99:1D:E6:DD:B0:7E:64:F1:6F:64:D6:10:C0:73:5F:3D:07
Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial: 019F674AD9FCC54D64771D75BA46ECB2F5E3
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/8HyCmR3m3bB-ZPFvZNYQwHNfPQc.roa
Signing time: Wed 15 Jul 2026 19:39:46 +0000
ROA not before: Wed 15 Jul 2026 19:39:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39401
IP address blocks: 85.217.224.0/20 maxlen: 24
85.217.224.0/24 maxlen: 24
85.217.225.0/24 maxlen: 24
85.217.226.0/24 maxlen: 24
85.217.227.0/24 maxlen: 24
85.217.228.0/24 maxlen: 24
85.217.229.0/24 maxlen: 24
85.217.230.0/24 maxlen: 24
85.217.231.0/24 maxlen: 24
85.217.232.0/24 maxlen: 24
85.217.233.0/24 maxlen: 24
85.217.234.0/24 maxlen: 24
85.217.235.0/24 maxlen: 24
85.217.236.0/24 maxlen: 24
85.217.237.0/24 maxlen: 24
85.217.240.0/22 maxlen: 24
85.217.240.0/24 maxlen: 24
85.217.241.0/24 maxlen: 24
85.217.242.0/24 maxlen: 24
85.217.243.0/24 maxlen: 24
85.217.244.0/23 maxlen: 24
85.217.244.0/24 maxlen: 24
85.217.245.0/24 maxlen: 24
85.217.246.0/24 maxlen: 24
85.217.247.0/24 maxlen: 24
85.217.248.0/23 maxlen: 23
85.217.248.0/24 maxlen: 24
85.217.249.0/24 maxlen: 24
85.217.250.0/23 maxlen: 23
85.217.250.0/24 maxlen: 24
85.217.251.0/24 maxlen: 24
85.217.252.0/23 maxlen: 23
85.217.252.0/24 maxlen: 24
85.217.253.0/24 maxlen: 24
85.217.254.0/23 maxlen: 23
85.217.254.0/24 maxlen: 24
85.217.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:4a:d9:fc:c5:4d:64:77:1d:75:ba:46:ec:b2:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Validity
Not Before: Jul 15 19:39:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f07c82991de6ddb07e64f16f64d610c0735f3d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:48:88:46:b2:7a:cf:78:f2:7d:13:17:31:
8b:86:96:fa:b3:86:d7:4a:76:8e:57:20:56:17:5f:
3b:02:f5:4c:57:0a:16:0a:f7:00:11:7e:65:a5:54:
ab:9e:5e:25:46:ba:af:38:0d:63:1d:68:01:84:b9:
44:df:ff:86:c3:e8:e7:a0:c2:6f:28:51:64:54:c7:
da:2a:c1:77:f2:3c:04:8b:ef:84:d4:0c:58:b5:7b:
ba:fe:07:01:82:44:89:ec:e2:e1:dc:4a:d3:15:6c:
77:9e:88:3f:51:72:e4:76:da:6d:96:5f:7f:32:da:
5b:28:6e:3a:24:55:79:33:de:5c:ac:45:c8:5c:76:
05:c2:e2:5d:eb:a0:05:59:0b:8b:cc:56:97:e3:3d:
70:07:af:8a:f1:94:8b:63:6e:61:11:71:f2:f1:43:
7a:f1:e7:62:0d:e0:97:cc:46:df:65:f0:b0:13:1f:
a3:65:34:e8:4e:90:eb:5e:0a:cd:d6:52:2b:24:c6:
1e:b7:82:fe:39:b0:3f:b8:1f:70:68:c8:97:f3:36:
f0:74:d2:73:48:67:49:bd:32:83:49:73:6d:cb:13:
ce:90:42:75:54:72:b0:e5:e1:2b:d8:e5:09:53:af:
f5:fd:ac:55:c1:9d:38:fb:b3:c9:6a:44:48:79:f3:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7C:82:99:1D:E6:DD:B0:7E:64:F1:6F:64:D6:10:C0:73:5F:3D:07
X509v3 Authority Key Identifier:
keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/8HyCmR3m3bB-ZPFvZNYQwHNfPQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:88:3a:4a:e6:cd:92:69:eb:84:b6:24:14:6f:5e:1c:99:7e:
a0:b8:0b:5e:2a:a6:44:06:7a:f0:82:4c:aa:ad:41:c0:a7:0c:
c7:bc:dd:31:c3:79:b2:4a:4a:5f:cc:9c:06:c6:0e:5a:43:8b:
08:6d:13:ef:9b:19:e1:d6:81:db:e8:aa:9a:82:9e:c2:67:a6:
ff:81:25:37:57:d9:68:12:db:18:1a:d8:a1:b2:78:96:39:ae:
aa:75:75:6b:b2:42:ee:fe:25:e9:2d:ff:40:8f:03:62:02:7a:
da:da:c7:2d:c0:ee:5f:ef:a0:16:dd:84:c4:04:41:74:fc:e8:
de:bc:5f:40:66:97:ad:ea:bf:c9:cc:25:8c:50:d8:32:c9:4a:
d3:78:28:ca:0c:c6:82:a6:49:95:9d:83:f2:6d:23:fb:1f:cc:
aa:4c:94:1e:0a:a8:7b:64:37:16:94:f5:42:11:2d:19:39:70:
0c:4e:d9:4a:45:db:58:e6:6a:69:ea:d3:b3:e9:0f:26:70:b1:
7d:d1:02:2c:ea:7e:fc:65:94:ff:eb:e8:05:c6:90:67:ca:e1:
04:bd:49:fe:e2:89:ab:58:5c:b5:ac:98:ed:8e:2e:f0:ca:90:
ca:72:54:1a:16:e7:70:4f:f4:c0:da:99:a8:6a:65:51:d4:14:
d9:fa:15:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:35 2026 by rpki-client