Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yDBPcZs0zcdXPTIgIMO-RZIC4y0.roa
File: yDBPcZs0zcdXPTIgIMO-RZIC4y0.roa (raw, json)
Hash identifier: W9p4Yok9Rp4x0quUd7ZBmgMzpiFpWIDzYBBWbZNlQts=
Subject key identifier: C8:30:4F:71:9B:34:CD:C7:57:3D:32:20:20:C3:BE:45:92:02:E3:2D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1CF96C0AC289D038E4A20A5F1964556AD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yDBPcZs0zcdXPTIgIMO-RZIC4y0.roa
Signing time: Thu 12 Nov 2026 11:48:45 +0000
ROA not before: Thu 12 Nov 2026 11:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 85.189.4.0/24 maxlen: 24
87.83.80.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.212.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:96:c0:ac:28:9d:03:8e:4a:20:a5:f1:96:45:56:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 12 11:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8304f719b34cdc7573d322020c3be459202e32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:00:9a:22:31:02:f8:56:b2:15:e1:35:41:
be:3a:68:c6:b7:d0:a3:b1:dd:40:68:f1:54:b5:a8:
05:59:7d:77:c2:44:10:2c:68:2c:e7:5e:6a:e3:f0:
dc:62:21:a1:2d:6d:2e:5d:a9:2c:91:8f:89:15:4d:
38:4f:9c:77:7f:fc:ec:3c:26:62:e6:ed:71:6b:9f:
72:41:9b:e5:c4:5d:91:df:91:9b:ed:33:d3:b2:c6:
55:e8:df:f0:31:ef:bf:63:b9:d4:9c:7a:73:2a:3a:
47:d6:8a:ce:fd:60:19:80:d0:e2:11:2f:2e:9f:95:
6c:93:cb:67:3a:ff:3d:24:2c:0e:f6:05:a1:62:b6:
56:44:17:b8:17:62:86:08:c9:eb:be:6d:4c:6d:c5:
3c:b9:cc:25:51:36:c9:cb:a3:db:b8:80:63:a2:42:
c5:d2:9f:ba:64:7c:18:42:0f:63:df:69:e1:7b:ba:
d7:f5:cd:1b:43:38:e9:ab:a2:81:a6:48:5b:45:9e:
b5:6f:f9:e8:dd:a5:01:c3:5a:7f:d3:d4:b7:5f:30:
12:7e:ef:6d:f0:61:2d:fe:4d:c0:2a:57:dd:77:5f:
e2:ba:30:59:fc:e9:8b:6a:59:33:92:3e:8f:04:74:
45:60:b0:44:5f:6a:51:1c:80:c2:5c:0b:a1:63:28:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:4F:71:9B:34:CD:C7:57:3D:32:20:20:C3:BE:45:92:02:E3:2D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yDBPcZs0zcdXPTIgIMO-RZIC4y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.4.0/24
87.83.80.0/24
212.135.26.0/24
212.212.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f4:65:06:5f:78:9c:80:9e:06:c6:fb:ea:77:b0:1a:21:f5:
27:b6:ea:b0:7f:5d:97:c1:7c:68:19:6c:50:16:79:23:8f:95:
09:cd:04:e0:af:18:c9:b7:84:7f:10:77:76:25:e8:79:93:f8:
d9:19:25:ac:66:c6:46:05:84:0f:37:e9:5f:24:f3:89:78:3b:
ec:c7:46:39:cb:2b:81:f4:e5:35:c5:68:ab:e3:bd:5d:85:51:
24:ba:c7:c6:78:49:a0:0d:34:98:46:9a:93:b8:26:93:4d:ff:
d9:c0:ab:89:5e:a0:d1:01:ae:79:ff:d7:65:67:b4:59:e5:9a:
6f:bd:c9:df:46:b4:1e:04:f2:fa:f8:d5:81:6a:1e:a2:fa:a9:
1a:88:fa:13:44:6a:0a:dc:ea:ea:13:f8:76:99:53:51:10:f3:
c9:42:fc:eb:dd:75:2a:3a:89:52:bb:18:44:ee:25:65:65:9e:
5e:b4:27:9e:92:cd:29:0a:a6:56:e4:6d:87:a9:63:74:23:0f:
ad:15:c1:ec:b0:30:11:95:16:f8:b6:8d:36:6f:2b:0e:c1:0c:
f7:20:db:48:e2:63:50:fd:bb:5a:e6:9c:8c:73:2c:dc:3d:54:
ba:dc:58:0d:e4:71:10:5d:95:25:79:cf:30:86:57:22:ea:f1:
36:c2:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:03:53 2026 by rpki-client