Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/0KJKpOQIMMRUve_Db7ZUFTqmRws.roa
File: 0KJKpOQIMMRUve_Db7ZUFTqmRws.roa (raw, json)
Hash identifier: etju0WDFZjIJBWE3dUE0Yo+hxWpUlhYgNdf8HBRrcOY=
Subject key identifier: D0:A2:4A:A4:E4:08:30:C4:54:BD:EF:C3:6F:B6:54:15:3A:A6:47:0B
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 019CFC29DDC34578FC6D3E3E643A1502196F
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/0KJKpOQIMMRUve_Db7ZUFTqmRws.roa
Signing time: Tue 17 Mar 2026 14:18:48 +0000
ROA not before: Tue 17 Mar 2026 14:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42275
IP address blocks: 85.208.68.0/22 maxlen: 24
85.208.68.0/24 maxlen: 24
85.208.69.0/24 maxlen: 24
85.208.70.0/24 maxlen: 24
85.208.71.0/24 maxlen: 24
2a09:8340::/29 maxlen: 48
2a09:8340::/48 maxlen: 48
2a09:8340:1::/48 maxlen: 48
2a09:8340:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:29:dd:c3:45:78:fc:6d:3e:3e:64:3a:15:02:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Mar 17 14:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0a24aa4e40830c454bdefc36fb654153aa6470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fe:6b:bf:76:1b:7b:35:4d:77:66:94:0e:8d:
ec:b0:33:af:69:54:e8:60:a1:ae:b1:0f:d9:a1:eb:
23:3c:8b:a3:e6:54:3b:65:d0:a7:d9:08:57:94:6f:
6f:66:81:eb:3a:1c:00:f8:d8:c2:87:04:9c:32:1e:
1d:55:41:e3:51:ae:cf:e4:14:32:07:61:fd:ae:4e:
32:dd:79:cf:fd:a7:bb:7d:ef:8e:23:69:ea:6f:4a:
20:18:d5:ae:62:61:4a:c4:76:be:6a:85:2f:fa:f5:
9c:db:2e:24:2c:b2:e6:51:e2:d0:b9:24:d0:1e:97:
4c:ff:82:8f:09:f1:4c:1b:be:df:41:5c:e7:b9:e1:
73:d8:9f:71:99:38:f0:d2:d9:d3:12:83:7a:3c:07:
e6:09:b4:4f:f0:9b:65:9a:a5:dd:de:2d:a4:0a:77:
ae:e3:ce:50:9c:27:29:3a:85:4e:34:58:a4:5a:c9:
3f:97:8b:a8:d5:b6:9b:e5:a8:d4:4a:c9:5d:ca:e9:
16:fe:46:d5:fc:73:cd:83:28:34:68:8e:39:e3:88:
40:81:9c:23:96:c3:57:01:8f:c1:a8:bd:f6:e3:ac:
47:da:24:d9:88:fb:86:50:9d:f2:35:f3:87:66:69:
48:0f:67:f6:25:ee:90:34:93:1c:cc:c3:8c:53:80:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:4A:A4:E4:08:30:C4:54:BD:EF:C3:6F:B6:54:15:3A:A6:47:0B
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/0KJKpOQIMMRUve_Db7ZUFTqmRws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.68.0/22
IPv6:
2a09:8340::/29
Signature Algorithm: sha256WithRSAEncryption
44:56:14:bf:2c:e0:65:e4:53:4a:91:bd:ef:9f:7b:f2:f3:a1:
2b:e7:db:ea:6f:07:71:b2:8b:57:d0:c7:5b:08:50:53:6c:1f:
40:17:d4:3e:b7:d0:65:36:95:82:22:4c:a2:3e:9c:f2:d8:29:
29:ce:e8:3a:1b:fc:ea:94:eb:09:d4:ce:55:1f:e1:70:dc:5c:
71:ac:4e:26:09:d8:cc:dc:84:39:26:ea:d1:73:d0:60:7e:b0:
a8:ff:ac:5f:a4:06:96:6a:8b:8f:f4:a2:f0:ee:42:23:b0:1e:
eb:22:22:d3:fb:86:fe:15:87:cf:41:87:db:43:36:9a:79:5c:
5a:ba:ba:24:1e:c0:c5:d6:1c:26:2f:31:61:5a:07:bc:17:cc:
a0:43:63:ce:05:50:92:f5:3f:9c:63:6b:ec:52:6c:f6:d5:45:
4d:32:9c:a5:09:ba:21:e0:05:99:27:22:74:1d:15:56:8c:4d:
6b:a7:27:52:ec:06:b7:00:8d:5b:d3:79:c0:ec:c2:57:bf:ca:
38:42:63:5a:db:e9:00:42:82:55:02:4c:27:e3:2f:59:e7:7b:
a1:1c:e1:66:67:7f:53:46:e7:9c:99:c4:6a:8d:33:9e:5b:21:
30:e4:77:9d:f3:ec:a5:40:e8:88:64:91:a1:ee:ec:cd:70:5c:
89:54:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:22 2026 by rpki-client