Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/_klIEgNXjNLrjq0AntRvKPJg8cQ.roa
File: _klIEgNXjNLrjq0AntRvKPJg8cQ.roa (raw, json)
Hash identifier: N8TiDW/8kVRpYH8qFr2ikVHK1WBz/CBEaBf5JoLgSGQ=
Subject key identifier: FE:49:48:12:03:57:8C:D2:EB:8E:AD:00:9E:D4:6F:28:F2:60:F1:C4
Certificate issuer: /CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Certificate serial: 019F09114BDDB51F8E90CB69298373DE0F5B
Authority key identifier: B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/_klIEgNXjNLrjq0AntRvKPJg8cQ.roa
Signing time: Sat 27 Jun 2026 12:32:36 +0000
ROA not before: Sat 27 Jun 2026 12:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201760
IP address blocks: 85.8.214.0/24 maxlen: 24
131.222.236.0/24 maxlen: 24
2a14:c780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:11:4b:dd:b5:1f:8e:90:cb:69:29:83:73:de:0f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Validity
Not Before: Jun 27 12:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe49481203578cd2eb8ead009ed46f28f260f1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:63:2c:18:97:a4:a1:0e:8c:57:1b:3f:f9:
69:16:9b:6b:a3:46:a0:46:7f:26:f2:1e:d8:12:91:
87:ca:38:1f:d7:67:6b:f3:93:5a:55:91:0f:53:18:
54:1a:45:17:54:c5:24:3f:67:e1:43:82:59:28:bf:
36:aa:a6:93:a1:7c:83:64:40:81:63:7c:12:cb:6f:
17:bb:85:6a:47:f9:9e:2a:66:cd:fa:be:b4:fa:18:
e0:2a:5f:d2:cf:7c:30:03:95:51:d5:23:fa:1b:4e:
8e:6c:10:48:ea:bd:73:ed:46:a5:27:90:ad:31:c0:
31:c0:27:13:f6:f1:8a:80:cc:c7:b2:0c:ae:ac:70:
0b:9a:fd:e5:f6:a8:25:06:12:c9:07:c2:ea:e6:2b:
a0:21:c8:c1:83:6a:df:27:4f:d9:3a:53:21:13:5a:
27:3b:09:ae:66:5a:d1:f4:9b:22:d2:df:95:b0:5c:
ef:9c:5c:68:5c:a5:15:5b:96:7b:a5:4f:a7:5c:af:
94:25:6a:96:a5:aa:ea:0b:c0:9c:ad:35:b8:05:9b:
18:a6:99:4a:56:f4:5b:8d:9c:ee:28:e5:79:83:a7:
f6:a5:67:21:b1:85:68:17:91:d0:8b:32:00:0b:4a:
35:20:b4:74:94:d1:0b:14:78:4f:dc:73:0a:58:b3:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:48:12:03:57:8C:D2:EB:8E:AD:00:9E:D4:6F:28:F2:60:F1:C4
X509v3 Authority Key Identifier:
keyid:B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/_klIEgNXjNLrjq0AntRvKPJg8cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.214.0/24
131.222.236.0/24
IPv6:
2a14:c780::/29
Signature Algorithm: sha256WithRSAEncryption
79:bb:cf:1b:d3:91:32:cb:06:a6:7d:31:1e:e4:56:72:b3:9a:
e8:96:c3:95:63:89:1d:a2:03:e5:6c:92:07:b8:ed:76:fb:9a:
86:a3:a4:fa:e3:ef:13:b9:b1:b7:7f:79:85:a3:e0:19:70:b3:
df:e1:5e:6f:43:08:8a:ed:73:5e:98:ee:0c:6e:4f:63:d1:c4:
48:dd:4b:cc:68:56:ca:c3:9d:f5:b6:aa:fd:f9:0d:d3:f9:ed:
d7:c9:ee:ea:5e:60:9f:9c:e7:1d:b2:e0:e4:0e:ae:dd:bb:9e:
37:47:7d:a9:6a:b1:be:2b:2a:6e:4a:6a:f2:08:f0:d2:99:1a:
ec:6f:95:f8:06:16:47:18:3c:b7:9a:5d:b4:05:e1:15:1f:e9:
d9:66:28:29:5c:d5:c6:f4:87:79:54:f1:dd:84:5c:dc:16:6e:
7f:be:c1:17:14:ee:fe:82:03:5f:85:fa:67:86:56:ab:71:14:
31:24:12:ad:c5:a3:c2:5a:da:dc:db:b5:af:0a:1c:76:75:cb:
68:5c:5e:7e:0a:f6:68:fa:2d:af:5a:3b:4e:d9:b2:e6:7d:f5:
39:2f:86:c5:5a:9a:db:69:ec:44:4d:ac:05:3b:97:90:81:e9:
27:71:37:03:07:f0:ee:9c:9f:bb:58:28:ab:f4:50:b4:8a:1a:
11:6f:93:a4
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8JEUvdtR+OkMtpKYNz3g9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDQ2NDE5ZjVlNmIxYmVkOTdiOWY2NzE4NjhhMDgyY2I3
MjkwZjAwHhcNMjYwNjI3MTIzMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTQ5NDgxMjAzNTc4Y2QyZWI4ZWFkMDA5ZWQ0NmYyOGYyNjBmMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvShjLBiXpKEOjFcbP/lpFptro0ag
Rn8m8h7YEpGHyjgf12dr85NaVZEPUxhUGkUXVMUkP2fhQ4JZKL82qqaToXyDZECB
Y3wSy28Xu4VqR/meKmbN+r60+hjgKl/Sz3wwA5VR1SP6G06ObBBI6r1z7UalJ5Ct
McAxwCcT9vGKgMzHsgyurHALmv3l9qglBhLJB8Lq5iugIcjBg2rfJ0/ZOlMhE1on
OwmuZlrR9Jsi0t+VsFzvnFxoXKUVW5Z7pU+nXK+UJWqWparqC8CcrTW4BZsYpplK
VvRbjZzuKOV5g6f2pWchsYVoF5HQizIAC0o1ILR0lNELFHhP3HMKWLNnWwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFP5JSBIDV4zS646tAJ7UbyjyYPHEMB8GA1UdIwQY
MBaAFLFEZBn15rG+2XufZxhooILLcpDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VSa0dmWG1zYjdaZTU5bkdHaWdnc3R5a1BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80YTU1OWYtZGQ1Zi00ZDAxLWIwODIt
YjA3ODg5ZWI4ZTkzLzEvX2tsSUVnTlhqTkxyanEwQW50UnZLUEpnOGNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My80YTU1OWYtZGQ1Zi00ZDAxLWIwODItYjA3ODg5ZWI4ZTkz
LzEvc1VSa0dmWG1zYjdaZTU5bkdHaWdnc3R5a1BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAVQjWAwQA
g97sMA0EAgACMAcDBQMqFMeAMA0GCSqGSIb3DQEBCwUAA4IBAQB5u88b05Eyywam
fTEe5FZys5rolsOVY4kdogPlbJIHuO12+5qGo6T64+8TubG3f3mFo+AZcLPf4V5v
QwiK7XNemO4Mbk9j0cRI3UvMaFbKw531tqr9+Q3T+e3Xye7qXmCfnOcdsuDkDq7d
u543R32parG+KypuSmryCPDSmRrsb5X4BhZHGDy3ml20BeEVH+nZZigpXNXG9Id5
VPHdhFzcFm5/vsEXFO7+ggNfhfpnhlarcRQxJBKtxaPCWtrc27WvChx2dctoXF5+
CvZo+i2vWjtO2bLmffU5L4bFWprbaexETawFO5eQgekncTcDB/DunJ+7WCir9FC0
ihoRb5Ok
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:20 2026 by rpki-client