Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/H_aIB34XXRbiPvATUkCbAHJuZks.roa
File: H_aIB34XXRbiPvATUkCbAHJuZks.roa (raw, json)
Hash identifier: GmWrAgdFKtzaI9LiJNA5YbFMAcvIbrgKGLYesLFjTmw=
Subject key identifier: 1F:F6:88:07:7E:17:5D:16:E2:3E:F0:13:52:40:9B:00:72:6E:66:4B
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 019DBA051004E9777DA9496F3EA1D2F36318
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/H_aIB34XXRbiPvATUkCbAHJuZks.roa
Signing time: Thu 23 Apr 2026 11:06:27 +0000
ROA not before: Thu 23 Apr 2026 11:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206610
IP address blocks: 85.208.4.0/22 maxlen: 24
2a09:8840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:05:10:04:e9:77:7d:a9:49:6f:3e:a1:d2:f3:63:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Apr 23 11:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ff688077e175d16e23ef01352409b00726e664b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:56:ec:89:66:1b:a7:c4:02:ff:45:e2:0e:
31:c4:4b:aa:ab:12:57:08:89:a9:e7:c6:8f:33:d1:
13:3d:f4:6b:99:b0:66:ee:c4:3e:9f:77:28:8f:27:
d5:5b:0a:dd:1e:ff:57:ec:2b:fa:68:35:0a:35:28:
39:fa:d5:32:98:ee:e8:b2:fd:23:a9:8b:34:45:67:
92:09:b1:f0:1b:7c:5d:61:92:50:a1:5b:66:73:7d:
50:c8:c2:b5:57:ff:dc:c2:73:ce:63:bc:54:5f:e4:
6a:3b:b0:1d:7a:fb:c3:97:f5:8f:f6:e8:ef:7b:0e:
2e:1c:5a:c4:67:99:f8:13:a0:2c:ab:47:45:4c:ae:
1b:a3:0c:1a:34:c4:7b:54:9a:d4:fa:36:08:44:cf:
0b:16:0d:14:8a:a0:e1:f5:0a:31:a7:7d:04:4e:a8:
23:be:75:1f:59:9c:85:f5:a3:20:0f:72:e2:f6:23:
94:b7:56:11:e8:1e:58:c7:05:67:06:55:96:cd:be:
d8:5e:2e:a3:c3:e8:e2:72:1d:b0:e1:5e:cd:b8:c6:
1b:83:3c:06:46:54:b5:c7:36:75:9c:af:ae:6c:77:
04:66:9c:e6:50:c6:d9:13:ee:ca:fb:77:70:3c:f2:
5b:95:a0:a8:bf:2b:2d:ac:41:c7:f6:92:84:ef:0d:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:88:07:7E:17:5D:16:E2:3E:F0:13:52:40:9B:00:72:6E:66:4B
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/H_aIB34XXRbiPvATUkCbAHJuZks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.4.0/22
IPv6:
2a09:8840::/29
Signature Algorithm: sha256WithRSAEncryption
42:4e:45:3e:4a:56:c0:b2:bc:f3:bc:18:2b:b7:e7:63:66:d1:
98:d7:6e:42:d4:7c:57:a7:66:bd:04:e8:b8:43:88:1b:08:48:
d3:d7:c0:f6:33:6e:69:09:28:e6:a7:94:1c:8c:ac:83:cf:39:
cb:d0:aa:5b:88:72:cc:eb:67:5d:ef:0d:f7:04:80:cf:dd:5b:
05:46:37:61:c6:84:ad:1c:f7:02:f9:7b:39:2a:da:86:63:5a:
42:a8:b6:13:34:dc:8b:16:20:ee:e4:64:c9:91:60:80:b7:ea:
9b:2f:1d:4f:5c:4a:d4:1d:b1:0b:dd:55:58:39:46:cf:43:fa:
1a:66:ea:39:99:77:e7:3f:fc:d1:6d:99:41:98:56:50:3d:a4:
54:a0:4f:2b:1a:5e:44:60:b0:b9:27:79:75:a1:42:b8:8a:f8:
8b:04:69:4a:95:8a:79:c4:47:3b:21:2d:4d:89:06:09:1e:0f:
a3:03:6c:25:15:9b:fb:f1:92:00:89:77:4b:57:bb:23:58:e8:
db:a1:ba:c9:1d:e5:cb:33:b1:ff:ab:46:ab:f1:88:43:76:1f:
06:f2:83:19:2e:93:e4:a0:5c:89:67:03:1c:2d:54:1f:d7:67:
c0:63:68:3e:72:c4:1a:6f:44:2e:e3:2e:f5:c1:f1:15:17:e8:
e7:c5:8e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:59:27 2026 by rpki-client