Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/pYJ77Er_zqYbx41sBdo_5Z_kbUw.roa
File: pYJ77Er_zqYbx41sBdo_5Z_kbUw.roa (raw, json)
Hash identifier: YnpRc5L4nUM7CR7mnzL6CNBLZnDMNdSR23HD+fN/hSc=
Subject key identifier: A5:82:7B:EC:4A:FF:CE:A6:1B:C7:8D:6C:05:DA:3F:E5:9F:E4:6D:4C
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 01A0C8977A88C2B23DF63E559B4BB59E0CDC
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/pYJ77Er_zqYbx41sBdo_5Z_kbUw.roa
Signing time: Tue 22 Sep 2026 10:09:25 +0000
ROA not before: Tue 22 Sep 2026 10:09:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208073
IP address blocks: 85.8.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:97:7a:88:c2:b2:3d:f6:3e:55:9b:4b:b5:9e:0c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Sep 22 10:09:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5827bec4affcea61bc78d6c05da3fe59fe46d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:2f:32:16:47:04:42:79:08:f1:3e:31:ff:
30:5d:ca:2e:75:8f:8d:7d:d9:9b:fb:e7:64:39:97:
f9:4c:5e:4a:d6:c5:c7:63:c0:af:b9:c3:c0:50:18:
dc:78:4a:2b:99:1e:bf:5e:0b:5c:69:48:c5:a2:19:
21:db:43:2e:2e:a0:6f:fc:36:04:03:d2:72:07:ea:
c6:9c:ae:47:ef:3d:23:8f:c7:39:41:f2:8e:cf:a7:
9e:fa:44:32:50:76:02:e8:38:e3:4e:e0:0c:e1:1f:
64:3d:f7:55:2b:7d:0d:38:5b:90:ad:00:7a:3f:b5:
d2:a9:ee:32:09:52:b7:a2:43:f0:ff:20:49:49:42:
bd:73:cc:a8:91:56:48:d0:79:f2:55:a2:8a:fb:37:
90:f5:2c:f5:1b:ac:e6:cc:74:db:51:44:98:7e:05:
51:7a:a8:de:9d:87:c8:f4:3b:74:29:48:e9:1f:33:
d0:38:d1:f7:38:5a:8c:54:96:30:3b:4f:99:aa:aa:
31:c8:3c:f7:3c:34:c6:37:a2:17:eb:24:3e:db:29:
99:af:c8:da:e4:0c:1f:0d:c1:a1:06:24:52:1d:87:
7f:c0:b5:dd:f6:86:bd:0d:9c:b4:41:ef:9a:ca:91:
06:37:fb:41:0b:a5:7c:37:60:1e:93:94:95:aa:d3:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:82:7B:EC:4A:FF:CE:A6:1B:C7:8D:6C:05:DA:3F:E5:9F:E4:6D:4C
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/pYJ77Er_zqYbx41sBdo_5Z_kbUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:af:a2:b2:79:23:cf:e4:c5:1b:bb:52:24:9b:ad:99:f9:64:
77:2a:33:41:06:ab:2e:8e:a0:3a:b9:ae:a2:87:4a:7d:dc:43:
43:b2:21:11:5b:4f:18:67:5b:3f:db:db:98:7e:dd:f9:58:e8:
be:9d:bc:cc:cc:d1:d4:d1:6b:98:ef:f7:a1:85:cb:0d:d3:75:
db:b8:66:18:d3:02:2d:8b:29:b1:08:f9:5f:7f:9e:bf:25:a8:
45:ac:38:2f:dc:e6:ee:d5:46:c8:a1:0c:56:77:31:1a:19:48:
b6:63:c5:ca:84:79:40:b0:85:69:04:e9:23:84:0a:56:39:3a:
12:b0:ef:23:b2:8a:5a:6c:50:70:c7:e0:13:50:a4:57:44:84:
33:16:02:98:0a:33:df:d8:e0:ab:cf:28:ae:69:c7:0f:70:22:
0f:ec:f2:a8:da:bb:ed:8f:1c:4e:fa:4e:d6:f7:59:2b:fc:b2:
f7:50:8f:17:5a:e4:ea:ac:0a:83:7b:f2:20:4e:18:a6:ec:d1:
2b:5b:23:fb:c8:73:24:bb:fd:90:3e:34:73:9a:75:32:8a:59:
37:aa:a5:48:cb:92:16:19:54:5b:d1:f1:36:f8:ea:63:c6:c6:
9a:74:87:c7:d9:cb:60:71:fb:3f:c3:f2:51:45:fe:51:fb:c9:
9c:f0:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:21:33 2026 by rpki-client