Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/aODoyPRmt8JcVuQjiY5gOaPNlms.roa
File: aODoyPRmt8JcVuQjiY5gOaPNlms.roa (raw, json)
Hash identifier: HPGIEJFG3TeELk+Kqb8GHJ+AFHjRK9+4B5FMIaiouhE=
Subject key identifier: 68:E0:E8:C8:F4:66:B7:C2:5C:56:E4:23:89:8E:60:39:A3:CD:96:6B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 019B7F144C0095C0981DD8921D94605FC278
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/aODoyPRmt8JcVuQjiY5gOaPNlms.roa
Signing time: Fri 02 Jan 2026 14:19:55 +0000
ROA not before: Fri 02 Jan 2026 14:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200547
IP address blocks: 85.136.192.0/22 maxlen: 22
85.136.192.0/24 maxlen: 24
85.136.193.0/24 maxlen: 24
85.136.194.0/24 maxlen: 24
85.136.195.0/24 maxlen: 24
160.238.112.0/22 maxlen: 22
160.238.112.0/24 maxlen: 24
160.238.113.0/24 maxlen: 24
160.238.114.0/24 maxlen: 24
160.238.115.0/24 maxlen: 24
185.95.236.0/22 maxlen: 24
185.95.237.0/24 maxlen: 24
185.95.238.0/24 maxlen: 24
185.95.239.0/24 maxlen: 24
185.236.52.0/24 maxlen: 24
185.238.148.0/22 maxlen: 24
185.238.149.0/24 maxlen: 24
185.238.150.0/24 maxlen: 24
185.238.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:4c:00:95:c0:98:1d:d8:92:1d:94:60:5f:c2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Jan 2 14:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68e0e8c8f466b7c25c56e423898e6039a3cd966b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:20:6f:19:7f:3a:6d:52:ea:5f:b4:64:62:
c6:71:74:09:3c:9d:d6:a5:8d:14:fd:80:f4:38:3e:
32:4a:2e:87:15:1b:34:12:9c:1b:d0:c4:e8:14:06:
de:c4:ce:48:68:11:71:04:a5:fc:4b:b5:85:9d:e0:
45:95:04:68:86:1b:8a:4e:31:be:dd:f2:a0:b2:2a:
e7:c3:4a:c0:ac:95:c9:66:b1:95:86:b4:94:0f:00:
56:e1:60:ac:03:02:98:c6:54:97:f6:c3:7b:91:11:
f4:90:ce:73:84:c0:37:95:08:5e:bd:0a:28:dc:fe:
52:4c:38:f4:72:5d:e1:b9:16:4e:67:02:fd:e4:24:
e3:a7:b5:eb:bc:66:f4:28:2a:9c:10:be:23:d1:c6:
51:2d:dc:1e:d6:44:95:ba:e9:6d:ee:49:b0:60:b9:
e6:31:a7:fb:88:af:1b:80:6a:14:b6:91:67:83:55:
bd:9d:90:ee:22:2f:d4:25:8a:91:13:6c:21:5b:05:
eb:a3:be:74:1c:2a:08:d9:1d:a5:c8:1f:96:87:94:
31:46:f4:ed:6e:d1:5c:d0:18:54:07:ac:f7:80:a9:
e1:90:ea:00:49:b0:df:ac:79:81:e4:b1:7c:96:9f:
7e:96:6d:8d:63:c4:5b:a1:5c:01:5b:e4:0e:43:a9:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E0:E8:C8:F4:66:B7:C2:5C:56:E4:23:89:8E:60:39:A3:CD:96:6B
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/aODoyPRmt8JcVuQjiY5gOaPNlms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.136.192.0/22
160.238.112.0/22
185.95.236.0/22
185.236.52.0/24
185.238.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:64:2c:14:86:89:f6:67:53:8f:4d:fb:13:bb:11:5f:7b:56:
f3:67:b1:77:99:01:22:b0:fa:77:05:10:7f:07:cb:89:a0:d7:
03:63:68:03:39:d2:d5:51:86:e0:68:79:e4:35:41:da:f6:ba:
6f:6c:f1:36:18:ce:18:89:9f:5f:7e:5b:08:f9:35:3f:71:b1:
39:59:0c:65:4d:15:cc:44:df:7b:b7:8a:b6:91:10:fa:0b:d5:
9d:c7:a9:f0:9c:a8:71:b7:91:19:05:87:e2:c7:88:e3:8f:9c:
14:53:c8:1a:a9:ec:fb:aa:c6:00:27:73:f4:aa:be:d4:9e:d6:
57:1b:78:56:0e:5a:ce:85:3a:b6:10:d1:ed:ed:75:4f:1b:c9:
6f:35:dc:4b:d6:39:2f:c6:ee:fc:ea:62:b5:b7:3c:8c:e9:32:
73:ff:ed:f0:e9:d2:e3:b0:98:55:ca:49:a9:f0:0b:9f:06:f2:
d3:e9:cb:b0:ef:92:16:0f:9f:6e:c3:ea:4e:a7:2e:a1:a1:e8:
7b:d5:dc:db:ee:20:21:bb:8b:e8:62:12:b8:f4:72:0e:61:3d:
50:44:18:20:b5:2d:d3:45:2f:65:57:81:a7:65:6f:a4:25:26:
4c:3a:48:bc:1c:91:db:4a:6b:0e:b7:b1:47:0e:4e:f1:4e:d6:
1d:33:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:40 2026 by rpki-client