Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D7qk7fJ33_dBH8jwfzHtTsZWTPg.roa
File: D7qk7fJ33_dBH8jwfzHtTsZWTPg.roa (raw, json)
Hash identifier: 95BWP7HgdcKzdLO1UN5K5STJKdqE7sZjZ2kFqCEF6xw=
Subject key identifier: 0F:BA:A4:ED:F2:77:DF:F7:41:1F:C8:F0:7F:31:ED:4E:C6:56:4C:F8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C68D9DA2C2612AFCB443A4E1B05DB5CCD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D7qk7fJ33_dBH8jwfzHtTsZWTPg.roa
Signing time: Mon 16 Feb 2026 23:47:13 +0000
ROA not before: Mon 16 Feb 2026 23:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202147
IP address blocks: 85.93.1.0/24 maxlen: 24
85.118.165.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:68:d9:da:2c:26:12:af:cb:44:3a:4e:1b:05:db:5c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 16 23:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fbaa4edf277dff7411fc8f07f31ed4ec6564cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:59:ad:3b:9e:77:c2:74:3b:cc:96:0c:88:
d5:4f:80:19:12:6f:e1:4e:ae:a0:1e:6c:c6:64:65:
2b:a5:87:c8:45:14:b1:79:b8:b3:57:e6:96:4e:99:
9c:62:be:1c:0f:67:7e:ca:81:77:60:7c:4d:a1:63:
26:02:70:5e:94:c1:65:80:59:d9:a6:d4:9a:c1:46:
65:da:f3:68:75:1a:c6:6f:fb:8d:d2:9c:9e:e6:5b:
db:57:a5:8f:ba:47:16:d3:1e:7a:79:6b:54:af:02:
e5:df:f3:32:89:38:85:91:b7:44:c8:94:5c:7d:be:
38:ac:56:0c:62:91:92:36:81:10:3d:7e:b8:7e:58:
37:dd:17:44:d1:87:87:b4:68:1d:ad:91:16:03:a3:
26:4f:67:4b:6d:99:ba:16:10:62:3f:2a:37:c3:a6:
8e:d5:2f:d6:67:70:f0:bf:23:ba:a9:c3:a2:76:7b:
7c:58:17:97:13:6a:14:a7:3c:0c:bb:40:eb:f2:c2:
e4:70:c1:12:0b:75:84:48:18:a0:49:4c:c1:5e:ad:
20:a3:81:36:e1:5d:47:23:1a:1f:29:f5:5a:cb:7c:
04:65:a3:ce:78:94:79:eb:ae:db:56:ac:c2:65:e5:
14:02:0b:eb:f3:55:26:30:cb:6f:64:ea:c3:a7:47:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:A4:ED:F2:77:DF:F7:41:1F:C8:F0:7F:31:ED:4E:C6:56:4C:F8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D7qk7fJ33_dBH8jwfzHtTsZWTPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.1.0/24
85.118.165.0/24
94.249.205.0/24
Signature Algorithm: sha256WithRSAEncryption
87:99:85:75:67:6d:14:a4:fb:55:53:a0:46:44:9f:0e:95:e6:
60:1b:5f:cb:c6:bd:8a:27:30:3d:88:ea:3a:85:39:d6:cf:ec:
22:c2:dc:ac:5f:0c:56:8c:4f:6d:93:41:a9:dc:96:90:d4:f4:
80:f2:d3:f9:64:90:78:6d:f3:43:f4:77:f9:7e:d3:bf:07:cd:
a4:db:1c:6b:4f:06:6d:92:32:9a:42:a9:58:37:ec:84:b1:bb:
69:fc:17:fd:c9:77:01:e2:c9:3f:5d:08:de:fa:b2:d4:7e:0e:
2f:3b:d5:16:f5:78:4a:b5:c5:aa:59:4e:35:f3:7d:c1:9d:97:
e4:6f:fc:d2:e1:45:13:a2:ea:c0:fa:5f:16:d5:d7:7d:6f:a5:
e2:7a:cb:2b:16:9b:cf:25:8c:4b:c6:f2:be:11:85:34:ec:b6:
d2:7c:6c:28:9e:04:ab:80:56:69:6b:3e:d3:56:49:f5:1f:5f:
77:e8:85:9e:51:69:4e:1c:c1:b7:f7:9d:b1:6d:b3:72:3d:ab:
09:42:ea:85:ec:76:88:47:13:84:44:1f:8d:e4:d8:b0:23:3b:
9c:42:2e:99:5a:ef:4e:4d:63:c2:8c:5f:c1:36:1b:ee:27:41:
ca:04:6c:33:02:31:61:8e:2a:47:bd:fd:31:58:0c:54:b8:bb:
1e:bb:11:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:31:25 2026 by rpki-client