Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/N9EJH0F4f496iS5bO4cI1QMgMwY.roa
File: N9EJH0F4f496iS5bO4cI1QMgMwY.roa (raw, json)
Hash identifier: SugxopE2aYOpxZm8LbSOiqQv+lLQWdLLXD8ThtP0lUU=
Subject key identifier: 37:D1:09:1F:41:78:7F:8F:7A:89:2E:5B:3B:87:08:D5:03:20:33:06
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 019E1B9037513452363F8FD467A12ACDB531
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/N9EJH0F4f496iS5bO4cI1QMgMwY.roa
Signing time: Tue 12 May 2026 09:41:36 +0000
ROA not before: Tue 12 May 2026 09:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31365
IP address blocks: 85.115.206.0/24 maxlen: 24
85.115.207.0/24 maxlen: 24
85.153.1.0/24 maxlen: 24
85.153.2.0/24 maxlen: 24
85.153.3.0/24 maxlen: 24
85.153.4.0/24 maxlen: 24
85.153.5.0/24 maxlen: 24
85.153.6.0/24 maxlen: 24
85.153.7.0/24 maxlen: 24
85.153.8.0/24 maxlen: 24
85.153.9.0/24 maxlen: 24
85.153.10.0/24 maxlen: 24
85.153.33.0/24 maxlen: 24
85.153.43.0/24 maxlen: 24
85.153.47.0/24 maxlen: 24
85.153.56.0/24 maxlen: 24
85.153.58.0/24 maxlen: 24
85.153.64.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
85.153.74.0/24 maxlen: 24
85.153.75.0/24 maxlen: 24
85.153.76.0/22 maxlen: 22
85.153.80.0/24 maxlen: 24
85.153.93.0/24 maxlen: 24
85.153.112.0/24 maxlen: 24
85.153.115.0/24 maxlen: 24
85.153.116.0/24 maxlen: 24
85.153.117.0/24 maxlen: 24
85.153.118.0/24 maxlen: 24
85.153.120.0/24 maxlen: 24
85.153.121.0/24 maxlen: 24
85.153.122.0/24 maxlen: 24
85.153.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:90:37:51:34:52:36:3f:8f:d4:67:a1:2a:cd:b5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: May 12 09:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37d1091f41787f8f7a892e5b3b8708d503203306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:b9:e6:42:3f:8b:b4:e5:0b:d6:63:87:a1:
59:3c:a2:c2:f0:37:00:29:c9:29:42:4e:a8:20:14:
8f:2f:1a:49:ae:d3:04:97:31:82:3c:53:73:6f:67:
50:64:5d:24:36:f6:6d:b6:16:79:54:b5:ae:c5:9b:
69:fa:ce:3d:d3:6a:a3:53:4c:36:8d:08:51:fb:dd:
ac:e2:73:ff:41:94:68:ad:41:0b:ae:aa:3a:f8:24:
a1:23:aa:16:b0:9d:5f:0d:8c:d8:c9:d2:5d:2d:9d:
a0:59:f9:09:a5:80:1b:75:cf:0b:66:d5:96:a8:a0:
72:55:fb:29:f2:7d:a0:89:8e:76:de:83:7c:df:e4:
1d:06:3c:65:ae:ec:0b:b5:5a:5d:26:32:1f:69:08:
74:df:94:61:e1:43:28:7d:1d:c4:70:ee:85:8f:9b:
76:ac:0a:d5:e6:97:96:2f:79:19:ac:66:ef:ae:11:
d2:43:79:d3:2d:93:a3:ae:4c:2b:ca:e8:f9:af:81:
40:58:ee:56:9d:6a:bd:5d:5d:14:79:20:e5:24:c0:
df:f9:27:7b:e5:81:dc:74:0d:96:8e:8c:4c:96:b8:
6a:08:62:90:f3:a5:27:c8:ee:59:d2:07:ff:68:98:
44:83:62:ee:ae:38:0a:b7:1f:76:b1:17:26:3d:2b:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D1:09:1F:41:78:7F:8F:7A:89:2E:5B:3B:87:08:D5:03:20:33:06
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/N9EJH0F4f496iS5bO4cI1QMgMwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.206.0/23
85.153.1.0-85.153.10.255
85.153.33.0/24
85.153.43.0/24
85.153.47.0/24
85.153.56.0/24
85.153.58.0/24
85.153.64.0/23
85.153.74.0-85.153.80.255
85.153.93.0/24
85.153.112.0/24
85.153.115.0-85.153.118.255
85.153.120.0/22
Signature Algorithm: sha256WithRSAEncryption
96:9d:67:67:75:90:7b:62:50:e8:c4:47:95:64:1e:3b:85:0f:
06:cb:dd:2f:4e:b7:3c:ff:41:1d:f1:8b:53:b7:08:f4:c5:98:
a6:cf:13:18:5d:12:bc:a4:3b:b3:c8:20:4f:53:31:46:0a:a0:
1a:19:04:40:77:55:91:d2:a6:ad:a3:ef:92:b6:86:0c:f3:c1:
4d:6b:4d:7c:9f:79:f4:a6:3a:2c:e7:67:2e:a7:42:bc:b2:fa:
4d:db:e8:c0:5c:7b:45:0f:7a:ac:f4:bd:96:d5:db:21:0a:56:
96:ca:55:c0:e6:bf:7e:94:24:e3:4e:32:2c:bd:0e:1e:af:e2:
c5:fe:41:a9:db:1c:10:26:4a:c4:eb:4d:0c:61:dd:18:2e:da:
27:0b:3d:9e:f4:e5:c5:76:6f:26:3e:5f:83:9c:a9:6a:64:23:
ad:6d:f0:fd:74:3a:f6:de:88:1b:ef:2f:65:ad:55:ec:8c:c2:
e9:63:b2:5e:52:da:86:d5:da:2c:53:ad:c2:57:9d:38:f2:c8:
02:d9:f3:0a:b1:00:b3:a9:30:7c:7d:45:b8:84:5a:71:ba:4f:
eb:b5:fc:e1:cf:05:fe:7b:b4:9a:b9:36:db:8f:b6:f6:81:68:
8d:8b:cc:7c:2b:90:25:f2:f9:25:ea:70:81:df:57:ef:e3:88:
aa:09:92:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:29 2026 by rpki-client