Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n_KYrlj_ECatrzWiaLltu5Mlh0A.roa
File: n_KYrlj_ECatrzWiaLltu5Mlh0A.roa (raw, json)
Hash identifier: vsbueqBIngMxwCNgmSWClZ7XuI+AAxMiG/LD5KJwvyA=
Subject key identifier: 9F:F2:98:AE:58:FF:10:26:AD:AF:35:A2:68:B9:6D:BB:93:25:87:40
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F83AA2B6C040C7A7138FF676467D19997
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n_KYrlj_ECatrzWiaLltu5Mlh0A.roa
Signing time: Tue 21 Jul 2026 07:53:15 +0000
ROA not before: Tue 21 Jul 2026 07:53:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 85.189.16.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.245.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.86.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.161.0/24 maxlen: 24
87.83.163.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.83.192.0/24 maxlen: 24
87.83.216.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.152.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.156.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.84.237.0/24 maxlen: 24
87.84.239.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
217.79.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:aa:2b:6c:04:0c:7a:71:38:ff:67:64:67:d1:99:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 21 07:53:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ff298ae58ff1026adaf35a268b96dbb93258740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:d2:c6:22:39:73:49:8b:99:2e:c4:27:0e:
fd:15:40:c5:c2:7a:a5:f1:58:91:22:45:bf:db:66:
b7:a9:00:1e:3a:be:88:a2:6f:fd:ed:1c:2b:8a:03:
48:85:58:cf:f3:f3:11:d5:91:47:29:d9:bd:f9:ea:
7a:d1:a1:b0:73:96:ce:bf:54:76:5f:70:eb:45:32:
8e:23:24:2c:12:50:8a:43:69:4b:7c:17:a7:d5:50:
5f:1c:c1:b4:6d:9b:2a:fc:2e:bc:2a:d7:41:9a:c3:
a4:03:33:93:39:d3:0b:1f:2f:ba:31:03:b9:fd:7c:
b2:3f:a7:ea:24:9e:b1:dc:64:4e:2c:9f:a0:1a:4c:
f2:d5:a8:b2:a6:38:af:31:d2:95:e8:b1:91:06:78:
15:0d:c3:be:9c:91:f0:ff:b1:d4:81:00:8e:0a:cf:
3d:80:00:6b:f8:61:fc:52:e8:37:7c:34:2a:c4:c3:
ed:06:55:a0:6c:c0:37:1f:bf:11:9a:af:94:7d:58:
a5:24:fd:d3:d6:60:f3:46:69:10:2c:75:c0:1d:43:
36:a7:d2:ee:24:27:d0:89:37:aa:27:10:aa:3e:5e:
95:07:23:a9:85:dc:64:97:04:b1:a7:6d:0e:3f:97:
2c:eb:c1:53:cd:c1:38:85:f5:49:b3:e6:e2:5b:20:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F2:98:AE:58:FF:10:26:AD:AF:35:A2:68:B9:6D:BB:93:25:87:40
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n_KYrlj_ECatrzWiaLltu5Mlh0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.16.0/24
85.189.36.0/24
87.82.213.0/24
87.82.232.0/24
87.82.240.0/23
87.82.243.0/24
87.82.245.0/24
87.82.247.0/24
87.83.86.0/24
87.83.125.0/24
87.83.161.0/24
87.83.163.0/24
87.83.174.0/24
87.83.192.0/24
87.83.216.0/24
87.84.64.0/24
87.84.76.0/24
87.84.79.0/24
87.84.128.0/24
87.84.130.0/24
87.84.132.0/24
87.84.134.0/24
87.84.152.0/24
87.84.154.0/24
87.84.156.0/24
87.84.158.0/24
87.84.218.0/24
87.84.220.0/24
87.84.237.0/24
87.84.239.0/24
212.135.143.0/24
217.79.113.0/24
Signature Algorithm: sha256WithRSAEncryption
01:70:2a:e4:7e:e2:d3:fe:48:eb:ba:7d:9f:77:43:87:69:dd:
83:b7:8c:90:38:cf:1e:1c:a9:6e:d3:38:01:12:fa:01:27:8f:
2e:ea:87:35:46:12:7c:6c:9a:79:3b:c5:77:b7:d2:7f:c0:89:
a4:e3:50:52:47:13:15:44:9a:72:b9:8d:70:40:67:9b:76:42:
c3:bd:4e:0e:a9:1c:8b:d6:f5:0a:82:bb:fe:7b:e0:d5:5d:5b:
97:46:e3:f1:c4:7d:3e:ab:4f:51:2f:de:74:bc:e2:ba:85:03:
11:d3:c5:c4:aa:cb:dd:ff:7d:4a:9b:22:0c:d6:fc:bc:c5:36:
8c:82:55:f4:6f:4a:83:24:78:74:49:1d:54:36:35:b9:f9:88:
f3:c2:fc:44:2e:c4:0c:a5:48:22:58:04:d9:90:41:14:01:05:
05:57:92:6b:29:85:81:8a:49:50:e2:4d:4d:67:36:84:b7:9c:
e1:4e:7c:10:9f:29:df:1b:e8:05:f3:56:6a:4c:4e:5b:9a:82:
82:8c:bc:69:d4:a2:42:f0:66:82:57:e3:07:96:88:9d:35:c9:
29:75:f0:fb:d2:f2:35:f7:1a:f9:fe:32:a7:ee:b1:cf:d2:6f:
c8:03:58:66:82:b3:be:4d:b3:47:15:64:34:49:26:2b:21:42:
cc:ef:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:19 2026 by rpki-client