Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/fEX8gqUG1LVB_0Itz6jjy8BylCM.roa
File: fEX8gqUG1LVB_0Itz6jjy8BylCM.roa (raw, json)
Hash identifier: bClbr4BM1B8au7SouGGHSbu2r3IvtTxx8cZlmVhtATA=
Subject key identifier: 7C:45:FC:82:A5:06:D4:B5:41:FF:42:2D:CF:A8:E3:CB:C0:72:94:23
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 01A0673DA33EB50B93C802467D643532409A
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/fEX8gqUG1LVB_0Itz6jjy8BylCM.roa
Signing time: Thu 03 Sep 2026 12:28:07 +0000
ROA not before: Thu 03 Sep 2026 12:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29555
IP address blocks: 85.117.96.0/24 maxlen: 24
85.117.97.0/24 maxlen: 24
85.117.98.0/24 maxlen: 24
85.117.99.0/24 maxlen: 24
85.117.100.0/24 maxlen: 24
85.117.101.0/24 maxlen: 24
85.117.102.0/24 maxlen: 24
85.117.103.0/24 maxlen: 24
85.117.104.0/24 maxlen: 24
85.117.105.0/24 maxlen: 24
85.117.106.0/24 maxlen: 24
85.117.107.0/24 maxlen: 24
85.117.108.0/24 maxlen: 24
85.117.109.0/24 maxlen: 24
85.117.110.0/24 maxlen: 24
85.117.111.0/24 maxlen: 24
85.117.112.0/24 maxlen: 24
85.117.113.0/24 maxlen: 24
85.117.114.0/24 maxlen: 24
85.117.115.0/24 maxlen: 24
85.117.116.0/24 maxlen: 24
85.117.117.0/24 maxlen: 24
85.117.118.0/24 maxlen: 24
85.117.119.0/24 maxlen: 24
85.117.120.0/24 maxlen: 24
85.117.121.0/24 maxlen: 24
85.117.122.0/24 maxlen: 24
85.117.123.0/24 maxlen: 24
85.117.124.0/24 maxlen: 24
85.117.125.0/24 maxlen: 24
85.117.126.0/24 maxlen: 24
85.117.127.0/24 maxlen: 24
185.57.72.0/24 maxlen: 24
185.57.73.0/24 maxlen: 24
185.57.74.0/24 maxlen: 24
185.57.75.0/24 maxlen: 24
217.76.64.0/24 maxlen: 24
217.76.65.0/24 maxlen: 24
217.76.68.0/24 maxlen: 24
217.76.69.0/24 maxlen: 24
217.76.71.0/24 maxlen: 24
217.76.72.0/24 maxlen: 24
217.76.73.0/24 maxlen: 24
217.76.74.0/24 maxlen: 24
217.76.75.0/24 maxlen: 24
217.76.76.0/24 maxlen: 24
217.76.77.0/24 maxlen: 24
217.76.78.0/24 maxlen: 24
217.76.79.0/24 maxlen: 24
2a03:32c0::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:a::/48 maxlen: 48
2a03:32c0:b::/48 maxlen: 48
2a03:32c0:c::/48 maxlen: 48
2a03:32c0:d::/48 maxlen: 48
2a03:32c0:16::/48 maxlen: 48
2a03:32c0:17::/48 maxlen: 48
2a03:32c0:18::/48 maxlen: 48
2a03:32c0:27::/48 maxlen: 48
2a03:32c0:28::/48 maxlen: 48
2a03:32c0:29::/48 maxlen: 48
2a03:32c0:2a::/48 maxlen: 48
2a03:32c0:2b::/48 maxlen: 48
2a03:32c0:2c::/48 maxlen: 48
2a03:32c0:2d::/48 maxlen: 48
2a03:32c0:2e::/48 maxlen: 48
2a03:32c0:2f::/48 maxlen: 48
2a03:32c0:30::/48 maxlen: 48
2a03:32c0:31::/48 maxlen: 48
2a03:32c0:32::/48 maxlen: 48
2a03:32c0:33::/48 maxlen: 48
2a03:32c0:34::/48 maxlen: 48
2a03:32c0:35::/48 maxlen: 48
2a03:32c0:36::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:3006::/48 maxlen: 48
2a03:32c0:3007::/48 maxlen: 48
2a03:32c0:300a::/48 maxlen: 48
2a03:32c0:300b::/48 maxlen: 48
2a03:32c0:300c::/48 maxlen: 48
2a03:32c0:300d::/48 maxlen: 48
2a03:32c0:300e::/48 maxlen: 48
2a03:32c0:300f::/48 maxlen: 48
2a03:32c0:3010::/48 maxlen: 48
2a03:32c0:3011::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:3d:a3:3e:b5:0b:93:c8:02:46:7d:64:35:32:40:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Sep 3 12:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c45fc82a506d4b541ff422dcfa8e3cbc0729423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:5c:9d:cb:a4:03:75:b0:5a:48:98:46:93:
15:30:cd:17:11:c4:98:84:b5:b1:18:ca:a0:25:a3:
2a:02:62:ee:5c:60:16:b2:0f:9a:ae:d1:82:fc:e7:
09:ef:10:0c:26:e6:45:b2:87:df:57:d2:87:05:a8:
96:3d:a4:02:38:68:c8:1a:2e:04:75:3c:86:c8:c2:
af:b4:2e:93:6e:82:89:0d:60:28:b5:67:4a:8a:7c:
a6:a9:d3:32:dc:ca:99:2f:7c:c4:b6:20:34:26:c0:
5d:43:3e:27:19:74:7c:34:6a:2a:26:55:1e:39:7b:
07:87:7d:56:e7:a9:68:59:1f:35:23:f6:02:2b:84:
11:0c:22:df:c4:46:c1:ce:5b:45:74:e8:c6:ac:7a:
3a:80:6c:1f:e5:ff:67:b0:7a:3a:ac:ec:65:3a:42:
6b:7c:f9:c2:51:3f:6c:87:1d:67:ba:ee:3a:cf:d4:
a6:7a:0d:83:51:61:96:89:6b:9e:27:b8:65:e8:b8:
96:c3:e1:00:46:8a:4f:be:d6:9f:71:d5:bb:ce:dd:
b5:a5:64:ee:18:14:be:66:d9:d1:16:98:9d:b5:67:
2c:a7:30:93:57:ac:6d:cd:f7:50:c7:65:07:6d:46:
77:71:d6:74:7f:11:4c:6e:65:1e:fc:8e:49:06:4c:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:45:FC:82:A5:06:D4:B5:41:FF:42:2D:CF:A8:E3:CB:C0:72:94:23
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/fEX8gqUG1LVB_0Itz6jjy8BylCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.96.0/19
185.57.72.0/22
217.76.64.0/23
217.76.68.0/23
217.76.71.0-217.76.79.255
IPv6:
2a03:32c0::/45
2a03:32c0:a::-2a03:32c0:d:ffff:ffff:ffff:ffff:ffff
2a03:32c0:16::-2a03:32c0:18:ffff:ffff:ffff:ffff:ffff
2a03:32c0:27::-2a03:32c0:36:ffff:ffff:ffff:ffff:ffff
2a03:32c0:3000::/45
2a03:32c0:300a::-2a03:32c0:3011:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
e2:9e:e8:bb:a1:26:27:1f:c6:ce:45:55:d8:97:2e:fd:c4:f9:
30:88:e0:0d:78:7e:6a:0a:4b:20:b2:bd:74:d3:49:26:7c:87:
19:d9:60:53:b7:fe:ef:ec:78:f5:71:fd:53:e5:13:31:c6:cd:
46:90:99:79:9e:38:bb:bb:e6:04:99:f8:94:b9:6b:de:55:c3:
04:0c:46:89:61:22:41:16:c6:8c:9f:d3:5d:0a:be:2c:66:82:
a7:f1:c0:8e:79:c5:29:c6:e9:8f:0a:fa:60:a5:d8:c5:9d:e8:
a7:91:79:92:b0:82:f7:41:8d:ac:f7:d6:17:58:a5:8d:55:94:
f5:91:62:20:04:ec:87:fa:e0:fb:73:5a:ca:b0:32:b6:43:6a:
ae:75:e4:8e:85:42:a2:d0:f7:7f:a2:b6:b6:90:33:8e:cf:9c:
7b:4d:8e:8c:50:4d:18:37:cf:e1:ca:a3:39:5d:20:75:99:45:
1c:1e:a9:bc:af:82:88:50:18:0d:48:5b:4c:f8:99:19:c3:34:
f2:23:1f:b8:63:ba:f7:6b:8b:b7:81:c9:a2:68:a1:d4:81:f9:
7b:cb:26:8e:48:d1:1d:88:44:7b:06:be:c5:a3:93:f7:76:d5:
e2:13:6f:01:4f:86:f0:48:d7:ac:f9:39:fa:1e:2e:62:68:b8:
cf:34:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:51:03 2026 by rpki-client