Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/L7hpljAI-BD6RQglBxJN53ZSkJA.roa
File: L7hpljAI-BD6RQglBxJN53ZSkJA.roa (raw, json)
Hash identifier: aUWoxgkewLvHtazXsD7I7FmmJBiMyOWODsbaRgt5zPM=
Subject key identifier: 2F:B8:69:96:30:08:F8:10:FA:45:08:25:07:12:4D:E7:76:52:90:90
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019F4C1923A8F9186A1304840E2CAC2F5DAE
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/L7hpljAI-BD6RQglBxJN53ZSkJA.roa
Signing time: Fri 10 Jul 2026 12:55:43 +0000
ROA not before: Fri 10 Jul 2026 12:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47764
IP address blocks: 85.142.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:19:23:a8:f9:18:6a:13:04:84:0e:2c:ac:2f:5d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jul 10 12:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fb869963008f810fa45082507124de776529090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:0c:4b:f1:c7:45:25:47:f7:79:66:e7:7f:
54:fd:a9:33:65:1e:2d:df:c0:d7:bb:e6:15:3b:47:
c7:8b:29:dc:5e:b5:03:5c:65:cc:f5:8d:c6:df:3c:
64:f4:84:48:92:92:2f:ee:00:cb:70:74:53:3a:4f:
12:da:cb:dd:19:f9:96:ff:fd:48:8d:08:33:38:b4:
77:e6:f6:99:cb:c7:79:7c:c0:fe:d7:01:54:d5:3a:
43:5a:45:6a:57:0f:ad:39:87:e2:74:90:92:c1:7d:
78:4f:44:ad:8a:7d:db:f5:a5:82:a3:ba:91:64:13:
bb:81:de:d7:61:a1:59:13:37:0f:67:6e:a1:5e:01:
6a:1c:ff:9a:ff:df:af:5e:88:89:33:b8:8b:4c:73:
c8:30:85:70:86:e3:65:b4:7a:ce:9f:8b:a6:c8:f1:
6a:50:47:d6:bb:6e:2f:72:d8:52:81:f1:38:7d:bf:
80:c2:a9:ed:be:8d:b2:32:8f:a7:5f:a1:37:33:82:
a7:92:3e:9d:3d:45:14:32:a0:ae:63:44:65:17:f6:
86:74:5b:22:1d:46:3d:ad:e5:ca:8f:51:3f:a2:98:
49:4c:92:06:01:26:c0:3e:44:2d:d8:af:52:a4:73:
af:87:8a:6a:15:d0:a7:16:bb:98:7c:dc:3a:f9:08:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B8:69:96:30:08:F8:10:FA:45:08:25:07:12:4D:E7:76:52:90:90
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/L7hpljAI-BD6RQglBxJN53ZSkJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.115.0/24
Signature Algorithm: sha256WithRSAEncryption
15:63:44:c4:8a:5c:5d:cd:1b:6b:f8:c7:d4:bb:9d:88:2d:46:
37:40:38:34:83:a6:7e:6f:94:44:ec:9a:d1:ad:ce:b7:26:03:
19:cf:7b:bf:a4:e1:c1:e2:bf:87:71:21:2a:84:7a:76:9e:10:
a6:32:34:b3:62:cf:65:03:86:c2:8c:80:36:a8:6f:18:8b:31:
0f:f4:1a:ee:ef:fe:5c:79:77:88:f5:d2:94:fe:ce:be:6d:f4:
88:01:7d:47:c1:5d:23:b0:71:29:b2:da:71:18:22:ef:aa:cc:
b9:79:0f:ba:7f:17:5c:b4:91:86:64:3b:91:6d:a1:9e:0a:f9:
c5:3f:e9:c9:dd:8b:f5:89:c4:61:94:51:66:dd:9a:a7:bc:7a:
ac:dc:1b:43:7b:df:57:b6:21:57:2d:ff:a6:ae:48:73:15:21:
6f:f0:c1:43:41:5a:d9:71:d9:33:67:a7:3f:3f:c6:0d:f0:e9:
d7:54:6e:65:c1:1f:8e:22:9b:03:a0:8a:85:73:b9:f6:fa:81:
ff:f9:84:66:d0:18:1b:67:b2:22:5c:84:18:dc:53:9d:07:46:
b8:6e:38:f4:b0:c5:7d:7a:da:a2:60:04:c4:fc:69:8a:ae:24:
21:c1:20:71:de:b3:f6:6c:9a:6c:ac:c4:74:ee:34:13:16:95:
17:73:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:03 2026 by rpki-client