Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/0Y-adAthoRCHBpsD3PTgtFCfBYE.roa
File: 0Y-adAthoRCHBpsD3PTgtFCfBYE.roa (raw, json)
Hash identifier: 7ju+r46H+wkjrS5g6l2Lfp6fQB9dUwNW9hbl01BlT0Y=
Subject key identifier: D1:8F:9A:74:0B:61:A1:10:87:06:9B:03:DC:F4:E0:B4:50:9F:05:81
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 01A0D7F8AF88F4A7B5E876259612492570AB
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/0Y-adAthoRCHBpsD3PTgtFCfBYE.roa
Signing time: Fri 25 Sep 2026 09:49:54 +0000
ROA not before: Fri 25 Sep 2026 09:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58172
IP address blocks: 85.116.176.0/24 maxlen: 24
85.116.177.0/24 maxlen: 24
85.116.178.0/24 maxlen: 24
85.116.179.0/24 maxlen: 24
85.116.180.0/24 maxlen: 24
85.116.181.0/24 maxlen: 24
85.116.183.0/24 maxlen: 24
85.116.184.0/24 maxlen: 24
85.116.185.0/24 maxlen: 24
85.116.186.0/23 maxlen: 23
85.116.188.0/23 maxlen: 23
85.116.188.0/24 maxlen: 24
85.116.189.0/24 maxlen: 24
85.116.190.0/24 maxlen: 24
85.116.191.0/24 maxlen: 24
91.132.148.0/24 maxlen: 24
91.132.149.0/24 maxlen: 24
91.132.150.0/24 maxlen: 24
91.132.151.0/24 maxlen: 24
91.239.101.0/24 maxlen: 24
128.127.96.0/24 maxlen: 24
128.127.97.0/24 maxlen: 24
128.127.98.0/24 maxlen: 24
128.127.99.0/24 maxlen: 24
128.127.100.0/24 maxlen: 24
128.127.101.0/24 maxlen: 24
128.127.102.0/24 maxlen: 24
128.127.103.0/24 maxlen: 24
178.20.176.0/24 maxlen: 24
178.20.177.0/24 maxlen: 24
178.20.178.0/24 maxlen: 24
178.20.179.0/24 maxlen: 24
178.20.180.0/24 maxlen: 24
178.20.181.0/24 maxlen: 24
178.20.182.0/24 maxlen: 24
178.20.183.0/24 maxlen: 24
2a04:3b00::/36 maxlen: 36
2a04:3b00:100::/48 maxlen: 48
2a04:3b00:1000::/37 maxlen: 37
2a04:3b00:1800::/37 maxlen: 37
2a04:3b00:2000::/37 maxlen: 37
2a04:3b00:2800::/37 maxlen: 37
2a04:3b00:3000::/37 maxlen: 37
2a04:3b00:3800::/37 maxlen: 37
2a04:3b00:4000::/37 maxlen: 37
2a04:3b00:4800::/37 maxlen: 37
2a04:3b00:5000::/37 maxlen: 37
2a04:3b00:5800::/37 maxlen: 37
2a04:3b00:6000::/37 maxlen: 37
2a04:3b00:6800::/37 maxlen: 37
2a04:3b00:7000::/37 maxlen: 37
2a04:3b00:7800::/37 maxlen: 37
2a04:3b00:8000::/37 maxlen: 37
2a04:3b00:8800::/37 maxlen: 37
2a04:3b00:9000::/37 maxlen: 37
2a04:3b00:9800::/37 maxlen: 37
2a04:3b00:a000::/37 maxlen: 37
2a04:3b01::/44 maxlen: 44
2a04:3b01:800::/44 maxlen: 44
2a04:3b01:810::/44 maxlen: 44
2a04:3b01:1800::/44 maxlen: 44
2a04:3b01:2800::/44 maxlen: 44
2a04:3b01:3800::/44 maxlen: 44
2a04:3b01:4800::/44 maxlen: 44
2a04:3b01:5800::/44 maxlen: 44
2a04:3b01:6000::/44 maxlen: 44
2a04:3b01:8000::/44 maxlen: 44
2a04:3b02:420::/44 maxlen: 44
2a04:3b02:c20::/44 maxlen: 44
2a04:3b02:1c20::/44 maxlen: 44
2a04:3b02:2c20::/44 maxlen: 44
2a04:3b02:3c20::/44 maxlen: 44
2a04:3b02:5c20::/44 maxlen: 44
2a04:3b02:6420::/44 maxlen: 44
2a04:3b02:8420::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:f8:af:88:f4:a7:b5:e8:76:25:96:12:49:25:70:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Sep 25 09:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d18f9a740b61a11087069b03dcf4e0b4509f0581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:80:cd:96:af:1c:c4:fd:c2:e0:02:1e:d7:
25:8e:89:b6:de:33:7a:62:f9:fb:11:ca:74:f6:f5:
17:4a:20:70:f1:f1:e0:2f:6f:fd:9d:22:b4:0e:78:
1a:a9:be:e7:0b:66:8b:c2:15:c6:0a:af:2e:14:ff:
08:0a:75:12:71:d9:f0:92:04:c0:cb:34:31:58:0f:
3d:45:2b:67:1d:35:83:4a:b3:0d:58:8f:f4:a8:6d:
2b:92:b5:93:33:30:24:e6:92:ef:c7:de:bc:74:77:
ca:17:1d:b4:36:04:37:12:23:f7:99:44:73:70:ee:
0a:1a:be:d6:5d:bb:6b:e7:f9:10:60:49:9b:4e:4a:
48:57:2e:15:a9:c7:0a:6d:34:e0:98:bb:67:c8:6d:
3f:d6:3d:de:7e:08:2f:b0:ab:c9:da:6a:4d:93:64:
0e:ee:e5:af:25:63:d9:ab:0f:59:65:1f:05:71:f7:
41:d8:d7:9b:5f:d3:9a:a9:ca:21:5f:d0:3a:96:c6:
62:87:cb:75:b5:7c:20:b4:46:67:e8:3b:ee:ae:93:
f5:60:00:b7:ff:8c:ed:ba:8f:4b:78:35:4a:db:cf:
fb:d6:e9:c3:12:7b:f7:cb:6e:87:04:3f:ea:e0:00:
02:f7:09:d2:1b:31:11:71:65:62:77:58:aa:97:91:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8F:9A:74:0B:61:A1:10:87:06:9B:03:DC:F4:E0:B4:50:9F:05:81
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/0Y-adAthoRCHBpsD3PTgtFCfBYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.176.0-85.116.181.255
85.116.183.0-85.116.191.255
91.132.148.0/22
91.239.101.0/24
128.127.96.0/21
178.20.176.0/21
IPv6:
2a04:3b00::-2a04:3b00:a7ff:ffff:ffff:ffff:ffff:ffff
2a04:3b01::/44
2a04:3b01:800::/43
2a04:3b01:1800::/44
2a04:3b01:2800::/44
2a04:3b01:3800::/44
2a04:3b01:4800::/44
2a04:3b01:5800::/44
2a04:3b01:6000::/44
2a04:3b01:8000::/44
2a04:3b02:420::/44
2a04:3b02:c20::/44
2a04:3b02:1c20::/44
2a04:3b02:2c20::/44
2a04:3b02:3c20::/44
2a04:3b02:5c20::/44
2a04:3b02:6420::/44
2a04:3b02:8420::/44
Signature Algorithm: sha256WithRSAEncryption
71:8b:7a:85:13:18:1b:c6:2b:a4:49:38:fd:c6:83:1b:50:11:
43:92:75:aa:7a:90:51:cf:3a:d5:8b:9a:e8:42:50:10:27:9c:
2c:c2:48:a4:98:ad:49:16:3e:0d:6d:c2:d5:cd:36:36:f1:eb:
18:6e:c7:8f:b5:3b:54:b9:3c:e4:06:cb:2d:f9:1d:42:63:65:
83:fb:73:05:e4:fc:e4:e4:97:37:ab:96:ac:1c:fb:80:07:60:
09:cd:b9:11:fd:5b:f6:3b:70:0e:b8:f8:64:7b:73:08:1d:cb:
bd:d4:52:cb:21:42:d9:0a:87:ad:4a:79:03:96:47:cf:65:77:
5e:85:21:c2:df:38:c3:34:11:5d:d6:8c:cb:8c:ae:c2:3b:b0:
de:d7:61:14:85:a4:b5:40:ba:16:ce:74:1f:f9:ea:ee:33:3c:
01:d3:b7:7a:1f:bd:c4:28:6a:92:a9:9e:d9:5e:e0:c2:7b:a3:
8c:8c:d6:78:d6:a1:b3:65:7d:51:cc:08:3e:ce:54:14:51:3d:
9f:a2:72:20:56:36:94:b4:0c:5a:6c:88:51:b0:24:b2:63:c3:
50:e7:5f:a8:c3:e5:56:16:97:8c:26:2b:58:f3:c2:eb:d7:b0:
ab:8b:d8:58:bb:4a:69:60:7a:eb:30:46:4e:e6:67:af:93:32:
74:e5:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 20:54:04 2026 by rpki-client