Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LndD0IQoR1YOcLMayXJhJjNl8yo.roa
File: LndD0IQoR1YOcLMayXJhJjNl8yo.roa (raw, json)
Hash identifier: A18rcAXQPXdZmHyb9IWtES7ntCK+gXzUIO1KBgDXUz8=
Subject key identifier: 2E:77:43:D0:84:28:47:56:0E:70:B3:1A:C9:72:61:26:33:65:F3:2A
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01A0D318D3862BF5536FA35B7C8EF83CD8F5
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LndD0IQoR1YOcLMayXJhJjNl8yo.roa
Signing time: Thu 24 Sep 2026 11:06:54 +0000
ROA not before: Thu 24 Sep 2026 11:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.76.0/24 maxlen: 24
85.142.100.0/24 maxlen: 24
85.142.101.0/24 maxlen: 24
85.142.113.0/24 maxlen: 24
85.142.212.0/23 maxlen: 24
85.142.215.0/24 maxlen: 24
85.142.240.0/24 maxlen: 24
85.142.242.0/24 maxlen: 24
85.142.250.0/24 maxlen: 24
85.143.41.0/24 maxlen: 24
85.143.42.0/23 maxlen: 24
85.143.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:18:d3:86:2b:f5:53:6f:a3:5b:7c:8e:f8:3c:d8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Sep 24 11:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e7743d0842847560e70b31ac97261263365f32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:3c:c6:7f:64:b2:ae:af:7f:82:6e:c0:89:
cc:88:7f:b8:8e:38:61:83:72:37:63:f2:5b:0c:2d:
93:60:e3:5b:f4:d0:d3:0c:ca:ec:19:b1:76:1c:0a:
7b:71:5b:1b:33:c7:ae:9b:54:69:30:e1:3c:40:79:
fa:11:23:27:7c:8d:57:1e:53:b0:49:f1:ef:07:60:
7c:99:a8:8c:6b:ae:25:c7:ac:61:43:e7:2a:08:95:
fa:06:dc:94:61:18:74:49:b2:8a:14:db:c5:8a:80:
44:ea:cd:11:70:44:b0:07:1b:33:a7:52:2b:41:93:
73:a3:a0:f9:96:8e:fa:75:96:4a:da:09:78:ab:c5:
50:2b:f4:58:08:ec:48:a8:77:4b:81:93:3b:5b:e1:
ab:53:a2:ed:0a:d1:7c:5c:b4:95:fa:2b:60:94:12:
bf:97:9a:b7:3e:be:32:10:b5:95:d9:03:94:b6:7a:
4f:ff:19:01:fe:df:b3:06:dc:cf:bb:0b:3c:4e:08:
3b:dc:fc:1e:a9:c6:22:8a:05:6b:17:cc:d3:46:f6:
ea:92:fc:04:cb:38:ba:47:e0:88:29:97:bb:9a:c1:
c3:b2:3a:22:61:f1:2d:9d:4c:15:dc:3e:e2:7b:36:
85:da:03:cb:fc:34:c8:34:47:5e:be:2f:4c:03:10:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:77:43:D0:84:28:47:56:0E:70:B3:1A:C9:72:61:26:33:65:F3:2A
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LndD0IQoR1YOcLMayXJhJjNl8yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.76.0/24
85.142.100.0/23
85.142.113.0/24
85.142.212.0/23
85.142.215.0/24
85.142.240.0/24
85.142.242.0/24
85.142.250.0/24
85.143.41.0-85.143.44.255
Signature Algorithm: sha256WithRSAEncryption
4d:4b:4b:d7:80:b7:d8:8e:02:c6:ff:5c:49:89:e2:9b:be:c5:
65:27:1f:30:29:d3:75:92:61:ef:6a:49:53:41:4a:a7:da:52:
36:11:69:ff:19:5e:b2:08:f4:bf:b5:eb:cc:a5:ac:7d:09:0c:
f8:0c:c8:79:18:1f:3b:fb:2e:81:5c:7a:63:d1:b3:8d:33:40:
e1:47:f9:fc:ac:f4:16:cc:02:89:d2:1c:33:75:8a:48:e6:fa:
77:72:f8:11:35:11:2a:60:78:33:b5:60:33:24:57:a3:fa:f7:
0d:8f:07:23:86:85:39:fe:94:9e:bc:cc:63:5c:fc:9a:61:ff:
46:d3:cc:d4:29:e7:f2:cc:ba:a0:47:49:58:ab:8c:d1:91:51:
ac:e8:72:10:ff:d7:27:87:c7:ab:73:e8:31:b1:93:9f:47:f5:
c6:8b:9a:6b:0b:c9:a2:7c:30:90:f3:5e:15:70:52:9f:34:d4:
80:05:37:87:bb:0c:17:81:73:9c:14:bd:36:39:58:c7:c2:a8:
ba:2b:7a:a4:90:28:c5:03:44:81:d7:2e:57:39:bd:18:6b:de:
aa:e5:58:e3:ba:83:e7:6e:92:f5:99:25:72:59:0b:84:0c:59:
7f:9f:7f:69:ef:21:25:0e:60:62:32:86:4c:c2:61:98:f4:ee:
d3:da:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:31:02 2026 by rpki-client