Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/FGz2Azbf0AxE4zPSOoCg4bCQxHI.roa
File: FGz2Azbf0AxE4zPSOoCg4bCQxHI.roa (raw, json)
Hash identifier: zLIxet4MNh+fLw8tWoHJ+9JWHfqaXota8sy9Ge4lA3s=
Subject key identifier: 14:6C:F6:03:36:DF:D0:0C:44:E3:33:D2:3A:80:A0:E1:B0:90:C4:72
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 019ED46DA70E1B92758757D4FCD979DEDE28
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/FGz2Azbf0AxE4zPSOoCg4bCQxHI.roa
Signing time: Wed 17 Jun 2026 07:13:36 +0000
ROA not before: Wed 17 Jun 2026 07:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31365
IP address blocks: 85.115.206.0/24 maxlen: 24
85.115.207.0/24 maxlen: 24
85.153.1.0/24 maxlen: 24
85.153.2.0/24 maxlen: 24
85.153.3.0/24 maxlen: 24
85.153.4.0/24 maxlen: 24
85.153.5.0/24 maxlen: 24
85.153.6.0/24 maxlen: 24
85.153.7.0/24 maxlen: 24
85.153.8.0/24 maxlen: 24
85.153.9.0/24 maxlen: 24
85.153.10.0/24 maxlen: 24
85.153.32.0/24 maxlen: 24
85.153.33.0/24 maxlen: 24
85.153.43.0/24 maxlen: 24
85.153.47.0/24 maxlen: 24
85.153.56.0/24 maxlen: 24
85.153.58.0/24 maxlen: 24
85.153.64.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
85.153.74.0/24 maxlen: 24
85.153.75.0/24 maxlen: 24
85.153.76.0/22 maxlen: 22
85.153.80.0/24 maxlen: 24
85.153.84.0/22 maxlen: 22
85.153.92.0/24 maxlen: 24
85.153.93.0/24 maxlen: 24
85.153.108.0/22 maxlen: 22
85.153.112.0/24 maxlen: 24
85.153.115.0/24 maxlen: 24
85.153.116.0/24 maxlen: 24
85.153.117.0/24 maxlen: 24
85.153.118.0/24 maxlen: 24
85.153.120.0/24 maxlen: 24
85.153.121.0/24 maxlen: 24
85.153.122.0/24 maxlen: 24
85.153.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:6d:a7:0e:1b:92:75:87:57:d4:fc:d9:79:de:de:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jun 17 07:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=146cf60336dfd00c44e333d23a80a0e1b090c472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:4f:fc:53:6a:e0:f3:e3:07:3d:a4:43:34:
0c:59:d0:1f:ab:ea:23:15:7b:41:90:95:5c:6f:23:
41:cb:69:44:c0:2c:59:c5:e7:2e:cd:90:d9:45:5f:
08:6b:87:de:98:2d:28:61:88:bb:28:24:41:51:5d:
57:d6:5b:c4:05:a8:0d:96:1a:a6:b8:e9:ae:e0:31:
02:62:30:75:07:3a:86:da:df:b9:3c:72:ce:b7:51:
d3:8f:28:a3:99:5d:73:ca:7c:39:c1:82:ca:ad:6a:
33:f9:5a:f0:2b:27:b7:b3:e1:c2:00:7d:a5:6a:40:
b6:2a:af:03:69:1f:49:0b:a1:ab:6f:49:8e:cf:ba:
a6:13:17:08:be:d5:7a:48:34:3c:67:c3:8d:47:54:
d0:84:6b:67:cd:3c:ba:17:b5:4a:19:b3:5b:25:e7:
4b:d3:79:ef:5d:64:00:59:bf:54:1a:47:87:8e:22:
ff:54:d2:b6:43:a9:ea:2f:c4:f3:16:64:de:da:80:
c4:ca:ce:78:ca:05:ce:9d:e6:2f:94:a9:0c:9b:98:
76:83:11:02:e1:13:c6:bc:fd:bb:dc:6f:b7:9a:de:
32:ac:23:56:2b:f1:95:92:be:03:10:c3:36:54:2d:
94:92:d3:28:3c:d1:33:fb:14:62:9f:d7:eb:ab:7a:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6C:F6:03:36:DF:D0:0C:44:E3:33:D2:3A:80:A0:E1:B0:90:C4:72
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/FGz2Azbf0AxE4zPSOoCg4bCQxHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.206.0/23
85.153.1.0-85.153.10.255
85.153.32.0/23
85.153.43.0/24
85.153.47.0/24
85.153.56.0/24
85.153.58.0/24
85.153.64.0/23
85.153.74.0-85.153.80.255
85.153.84.0/22
85.153.92.0/23
85.153.108.0-85.153.112.255
85.153.115.0-85.153.118.255
85.153.120.0/22
Signature Algorithm: sha256WithRSAEncryption
31:c6:39:0b:d0:1f:f8:a2:8e:8a:40:e9:c9:25:58:3e:e6:6d:
da:0f:e0:25:c4:9c:eb:5a:a6:7d:37:48:ff:7d:f1:06:b1:73:
e1:52:55:a1:fc:34:2a:1e:2b:36:1e:dc:34:72:fe:e0:7c:d3:
34:ee:18:49:fd:40:12:8e:d9:14:db:71:a5:ae:19:e9:d3:ec:
bf:d8:38:5b:bb:d0:62:42:7e:34:e0:0b:38:e7:60:e4:85:81:
e5:f3:8d:5b:84:51:82:75:ba:ef:d9:56:c9:77:30:7b:a4:f2:
a0:6b:44:b5:e9:b1:87:18:cf:55:39:8b:a2:a0:36:6c:5e:a7:
44:d1:67:fb:cc:b6:7d:b1:0e:39:13:92:e1:77:2e:96:45:93:
da:cd:49:60:06:75:b5:e2:17:d6:31:a4:31:09:b2:4f:72:fc:
48:96:eb:f7:fd:cc:da:ff:01:f5:ab:11:1d:8a:3d:23:ec:43:
29:42:ce:6c:e0:8f:64:92:98:3d:55:87:e4:7f:b1:39:58:51:
68:86:ca:f9:b0:4c:ad:40:cd:0a:aa:f3:ee:ef:d3:43:a0:7c:
f9:25:b8:56:e6:82:8c:e4:a8:67:35:66:ab:da:5f:c2:e5:1a:
a4:fb:47:31:bf:d2:3e:ef:35:8b:6e:bf:67:da:b0:5b:2e:50:
31:72:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:42 2026 by rpki-client