Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/pv6RIhVrb9slOb5yx5NX9pOoqAU.roa
File: pv6RIhVrb9slOb5yx5NX9pOoqAU.roa (raw, json)
Hash identifier: VOe8XWfqrZJxOzH5X+PtxdPVADeLuvevrOSH7WCINKg=
Subject key identifier: A6:FE:91:22:15:6B:6F:DB:25:39:BE:72:C7:93:57:F6:93:A8:A8:05
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019F4C19247DA91FECFDC2A4E00196DC0B01
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/pv6RIhVrb9slOb5yx5NX9pOoqAU.roa
Signing time: Fri 10 Jul 2026 12:55:43 +0000
ROA not before: Fri 10 Jul 2026 12:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.0.0/21 maxlen: 24
85.142.40.0/21 maxlen: 24
85.142.48.0/22 maxlen: 24
85.142.64.0/22 maxlen: 24
85.142.72.0/24 maxlen: 24
85.142.76.0/24 maxlen: 24
85.142.81.0/24 maxlen: 24
85.142.85.0/24 maxlen: 24
85.142.87.0/24 maxlen: 24
85.142.99.0/24 maxlen: 24
85.142.100.0/24 maxlen: 24
85.142.101.0/24 maxlen: 24
85.142.113.0/24 maxlen: 24
85.142.128.0/21 maxlen: 24
85.142.137.0/24 maxlen: 24
85.142.138.0/23 maxlen: 24
85.142.140.0/22 maxlen: 24
85.142.212.0/23 maxlen: 24
85.142.215.0/24 maxlen: 24
85.142.240.0/24 maxlen: 24
85.142.242.0/24 maxlen: 24
85.142.250.0/24 maxlen: 24
85.142.253.0/24 maxlen: 24
85.142.254.0/23 maxlen: 24
85.143.41.0/24 maxlen: 24
85.143.42.0/23 maxlen: 24
85.143.44.0/24 maxlen: 24
85.143.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:19:24:7d:a9:1f:ec:fd:c2:a4:e0:01:96:dc:0b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jul 10 12:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6fe9122156b6fdb2539be72c79357f693a8a805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:f8:dd:bf:0d:74:0a:f2:b8:cc:fa:36:8f:
03:1a:6a:29:f7:e4:be:fc:19:ef:67:52:32:54:ac:
31:9e:75:c1:4a:76:d2:a5:4e:b3:06:22:47:a2:98:
03:37:a8:77:19:be:43:70:d2:65:68:08:42:dc:8f:
fa:f7:bb:5d:5f:7a:da:8d:b1:7b:cb:80:cf:db:72:
bb:5e:86:7c:60:35:9e:17:da:ca:e5:5d:a9:49:93:
25:9c:c9:f6:bc:9a:b9:c1:40:af:00:f1:a5:7b:6f:
e9:6c:5a:46:6b:f5:19:ef:13:73:af:47:54:fd:a6:
c5:86:3c:c4:d0:3f:40:51:4e:36:27:01:8d:36:72:
73:7e:50:6c:2c:3b:d6:7c:b6:0e:9a:e5:c5:79:3c:
de:cc:0c:13:a1:fd:2e:c9:55:1c:66:b4:0c:b6:50:
8e:bc:a5:f6:55:a1:1f:b5:4c:75:85:f6:e8:e6:15:
7a:a4:09:3a:ed:56:69:0c:41:49:34:9d:bc:68:4a:
8f:43:c1:7b:59:9c:e2:54:50:4a:89:21:04:9e:ba:
9b:8a:29:2c:ec:13:17:a7:e0:a5:67:c3:ff:fb:b2:
40:78:77:ab:84:20:c0:a7:91:0e:57:c8:9a:12:dd:
7a:0a:56:d6:85:1b:05:f6:a6:c1:0a:73:4b:ce:41:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:91:22:15:6B:6F:DB:25:39:BE:72:C7:93:57:F6:93:A8:A8:05
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/pv6RIhVrb9slOb5yx5NX9pOoqAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.0.0/21
85.142.40.0-85.142.51.255
85.142.64.0/22
85.142.72.0/24
85.142.76.0/24
85.142.81.0/24
85.142.85.0/24
85.142.87.0/24
85.142.99.0-85.142.101.255
85.142.113.0/24
85.142.128.0/21
85.142.137.0-85.142.143.255
85.142.212.0/23
85.142.215.0/24
85.142.240.0/24
85.142.242.0/24
85.142.250.0/24
85.142.253.0-85.142.255.255
85.143.41.0-85.143.44.255
85.143.48.0/22
Signature Algorithm: sha256WithRSAEncryption
85:98:ee:ef:fa:d9:50:d1:e5:26:f9:0b:6d:9d:fb:57:b6:1a:
b4:04:6d:0c:77:69:8a:8d:b9:3f:14:43:47:35:bd:4e:44:5f:
ce:fc:13:87:d7:8e:3a:6b:19:56:43:13:27:ad:d1:2a:7d:70:
4c:a1:af:e3:45:8d:29:4a:e3:a1:f9:99:c5:55:b0:7f:59:86:
ee:d7:ed:f4:cc:db:2d:7e:2d:57:d7:67:e4:cd:5c:80:f4:1c:
c2:ac:c7:af:1b:9c:6b:b6:69:af:f8:54:18:59:41:70:bf:3b:
2a:59:e4:7f:b3:7e:60:2d:26:40:a2:c9:02:10:b0:a8:d4:c7:
7e:f4:58:b1:45:d5:9d:6a:94:fa:8a:13:85:fd:05:8c:b7:09:
2f:46:41:c9:7f:a7:aa:11:57:cd:59:c2:38:39:4d:be:f8:57:
57:00:18:fa:b1:14:07:0c:e9:b0:bb:f9:45:27:3e:dd:c6:76:
53:18:b4:0f:ed:81:68:e0:56:60:cc:bb:5d:aa:ea:eb:09:d7:
ed:a3:4b:03:ef:5e:f9:7d:71:f9:ca:70:bc:17:6b:69:d5:5e:
bb:5d:6d:5a:d5:62:71:07:33:bb:dd:3e:85:cc:98:22:e2:f6:
1e:f9:c5:e8:4a:1c:e0:c5:8f:e6:7e:1e:5d:fd:e9:c5:e7:e8:
7f:18:f8:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:57 2026 by rpki-client