Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/IrvASVsBJz4xhhT59oKUJ0-oOHo.roa
File: IrvASVsBJz4xhhT59oKUJ0-oOHo.roa (raw, json)
Hash identifier: yn6z2qBGLxX9Xz9Act+bJX5WP1lQd47I1nVzhmBW1Gk=
Subject key identifier: 22:BB:C0:49:5B:01:27:3E:31:86:14:F9:F6:82:94:27:4F:A8:38:7A
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019DDAED2AFFC35FFEEE45B25FEBD821DE6D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/IrvASVsBJz4xhhT59oKUJ0-oOHo.roa
Signing time: Wed 29 Apr 2026 20:27:49 +0000
ROA not before: Wed 29 Apr 2026 20:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 85.115.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:ed:2a:ff:c3:5f:fe:ee:45:b2:5f:eb:d8:21:de:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Apr 29 20:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22bbc0495b01273e318614f9f68294274fa8387a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:22:cc:49:fb:6c:45:cf:61:fd:fd:4a:8a:d8:
97:96:83:f8:51:70:b5:10:d6:b3:08:0e:29:78:8c:
0c:9e:04:33:92:a3:33:b3:7c:c7:60:ed:4f:1d:e8:
f4:be:e4:ad:b5:28:69:df:93:8f:7c:d6:07:31:da:
75:c1:92:29:e4:e8:6e:ed:82:23:df:8b:9f:c2:53:
9e:b8:c5:da:57:87:0b:1f:56:81:20:f6:03:eb:7c:
6f:39:59:f3:f1:e7:ed:c9:8f:83:af:f1:dc:01:81:
79:50:3b:54:68:f2:2e:dd:57:ab:d8:99:78:b4:01:
52:b5:cf:08:d9:01:4b:18:3e:21:21:41:f3:e8:67:
1e:e9:37:d9:3a:13:e5:23:96:b6:19:57:d4:80:24:
37:ea:8e:d0:f7:c6:f9:6a:9a:05:11:94:30:fa:5d:
53:0e:c1:1e:2d:1d:09:81:9f:c7:d8:51:45:1e:b9:
d1:d5:c3:b9:17:7d:c9:ff:fd:f3:8d:9f:f0:45:15:
a7:0d:2f:18:b9:53:c7:aa:49:cd:7a:27:2f:a9:02:
60:01:8f:ab:cf:a8:13:c3:58:2d:07:22:52:a3:d8:
b0:7c:2b:5b:94:a1:49:60:37:5e:d2:09:f9:ae:e0:
37:46:1c:50:eb:fd:08:5b:1a:4d:72:1f:78:87:62:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BB:C0:49:5B:01:27:3E:31:86:14:F9:F6:82:94:27:4F:A8:38:7A
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/IrvASVsBJz4xhhT59oKUJ0-oOHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.210.0/24
Signature Algorithm: sha256WithRSAEncryption
90:06:d2:4c:aa:63:54:40:75:3b:03:58:d7:73:d5:b2:c4:4c:
43:93:a2:9c:35:24:89:47:44:2d:95:16:a2:16:45:d8:75:e1:
67:a0:e9:5b:0d:07:f6:4f:05:43:12:d7:24:2e:9e:fd:d1:b5:
48:98:7c:e7:d4:20:7f:b8:ea:85:9e:f4:be:eb:a8:5b:64:be:
62:31:4c:2e:5c:41:ce:be:73:59:e0:39:01:33:60:68:a2:3a:
12:12:fa:0f:e6:f5:87:1f:35:ed:e6:67:5d:9a:87:a3:09:3c:
0c:86:7c:56:19:e4:70:f5:f2:1e:89:31:e1:57:07:00:ad:62:
c3:92:8b:f2:6a:96:a0:d0:ee:41:4c:22:fe:25:47:45:c9:35:
ec:ac:62:fa:99:6e:26:08:0c:1b:73:78:51:af:2c:5c:b2:8e:
b9:1e:61:60:21:22:3f:f3:e6:ec:55:01:21:17:ba:b5:fb:d9:
3e:53:0a:69:e2:47:90:46:3e:a0:fd:95:65:47:f3:d3:30:f5:
3f:b6:34:aa:04:ca:87:6d:7b:25:0a:d8:05:4e:d8:d6:72:ea:
89:fa:34:3e:a5:8f:d6:30:c2:bb:62:56:ef:ee:2a:16:1a:eb:
b9:d8:3d:92:8e:b0:38:7e:60:83:b3:9a:bb:e5:c6:af:c1:16:
39:06:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:29 2026 by rpki-client