Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/5rZNQw3Y1ZhxZKMPAmtjaCixm_g.roa
File: 5rZNQw3Y1ZhxZKMPAmtjaCixm_g.roa (raw, json)
Hash identifier: TmqekP7F7ZDPZHLRcYPGim3dxcRWSK+j9ne0V/17RGo=
Subject key identifier: E6:B6:4D:43:0D:D8:D5:98:71:64:A3:0F:02:6B:63:68:28:B1:9B:F8
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019F1DABC405354811D8AAADF624AC62586E
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/5rZNQw3Y1ZhxZKMPAmtjaCixm_g.roa
Signing time: Wed 01 Jul 2026 12:33:43 +0000
ROA not before: Wed 01 Jul 2026 12:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56534
IP address blocks: 82.179.248.0/22 maxlen: 22
85.142.82.0/24 maxlen: 24
85.142.84.0/24 maxlen: 24
85.142.88.0/22 maxlen: 24
85.142.92.0/22 maxlen: 24
85.142.136.0/24 maxlen: 24
85.142.147.0/24 maxlen: 24
85.142.164.0/22 maxlen: 22
85.142.168.0/21 maxlen: 21
85.142.176.0/22 maxlen: 22
85.142.192.0/22 maxlen: 24
85.142.208.0/22 maxlen: 22
85.142.231.0/24 maxlen: 24
85.142.236.0/22 maxlen: 24
85.142.244.0/24 maxlen: 24
85.142.252.0/24 maxlen: 24
85.143.144.0/22 maxlen: 22
85.143.160.0/21 maxlen: 21
85.143.176.0/22 maxlen: 22
85.143.184.0/22 maxlen: 22
85.143.203.0/24 maxlen: 24
85.143.204.0/22 maxlen: 22
85.143.250.0/24 maxlen: 24
85.143.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:ab:c4:05:35:48:11:d8:aa:ad:f6:24:ac:62:58:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jul 1 12:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6b64d430dd8d5987164a30f026b636828b19bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:52:76:e4:b7:e9:88:3e:00:58:25:4e:28:
0f:7c:b4:1b:68:37:f7:7c:3c:63:8b:cc:b8:88:be:
99:d9:06:eb:13:2f:11:f5:42:ab:5f:64:d7:cd:a7:
26:54:73:66:ec:bf:10:c4:d9:ad:d6:1f:75:d0:f1:
6c:71:04:17:05:5f:67:b1:3c:0e:d7:20:8f:cb:2d:
6f:f9:9f:41:a1:44:37:bb:b4:ad:b4:d3:61:03:c5:
67:22:aa:eb:6f:c9:5f:7c:f9:77:11:10:3d:9b:23:
84:76:2d:9f:8d:46:91:a6:6f:0d:9e:9c:95:d7:f2:
bb:84:f9:6b:9e:be:f0:a2:93:79:a6:6c:27:0e:c9:
c2:76:48:54:de:76:14:e9:11:55:62:6b:48:94:b6:
ae:18:ed:f4:62:82:87:bb:fd:81:1a:11:48:de:38:
dc:4e:33:5b:97:08:2f:04:ad:66:2a:9a:e5:f4:6e:
73:3d:32:f5:75:d7:84:b3:8a:a6:24:1c:45:41:18:
ed:98:be:ba:71:77:6b:41:54:c9:82:94:9c:f2:e1:
0f:5e:53:03:0f:69:7b:3b:64:78:9c:2b:66:e1:3f:
ee:41:f9:52:6f:61:dd:1a:42:4a:b7:66:44:a1:42:
c3:56:00:30:21:e5:63:c1:ed:98:55:10:35:f7:ea:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B6:4D:43:0D:D8:D5:98:71:64:A3:0F:02:6B:63:68:28:B1:9B:F8
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/5rZNQw3Y1ZhxZKMPAmtjaCixm_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.248.0/22
85.142.82.0/24
85.142.84.0/24
85.142.88.0/21
85.142.136.0/24
85.142.147.0/24
85.142.164.0-85.142.179.255
85.142.192.0/22
85.142.208.0/22
85.142.231.0/24
85.142.236.0/22
85.142.244.0/24
85.142.252.0/24
85.143.144.0/22
85.143.160.0/21
85.143.176.0/22
85.143.184.0/22
85.143.203.0-85.143.207.255
85.143.250.0/24
85.143.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:6e:bf:98:9a:ed:31:0b:95:8f:97:11:3c:78:18:25:e1:10:
d6:c8:35:0e:99:57:31:09:51:2c:a9:c5:8e:fe:f5:ae:02:35:
67:26:fb:a5:6b:7d:8d:f4:7b:b7:8f:c2:cd:51:7f:bd:c2:85:
ee:a5:31:a4:52:24:9a:af:8a:c5:06:a6:8d:a4:21:92:a6:29:
f4:b3:15:b9:8f:06:53:da:95:89:ca:af:c8:62:67:3e:fb:80:
8d:6b:03:69:64:9c:16:c3:c1:9d:12:dc:4b:18:15:d3:ab:de:
4d:b8:aa:69:66:55:2a:33:f6:90:7c:00:ca:42:97:22:12:ba:
b7:ae:9d:71:69:d2:50:d1:35:ec:29:dd:53:c2:7c:3d:9b:53:
33:f7:91:4a:3f:99:3f:8d:67:7b:3f:06:32:ec:5d:ac:96:9e:
22:0a:c2:01:d5:3b:fe:4b:dc:17:9d:c8:81:64:e7:30:83:a5:
9c:90:d8:d1:34:a4:73:80:24:7d:21:22:00:a0:a5:e0:5c:7c:
1c:2a:b3:b8:45:30:de:eb:95:52:c0:a4:2d:4b:c2:5c:f0:fb:
14:e0:6d:38:cc:f1:cf:da:ae:83:dc:53:45:c1:39:87:38:80:
90:44:9f:22:32:c7:c5:54:0f:96:5b:88:e5:4a:c1:b6:dd:2a:
14:ed:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:49 2026 by rpki-client