Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/zLHzXTmsOdWIiNNcNhYfjrrAn7Q.roa
File: zLHzXTmsOdWIiNNcNhYfjrrAn7Q.roa (raw, json)
Hash identifier: ggswSkv68Z8Lx2gMtv6MLjMCj8qEpMP5obeHBJ2FZEc=
Subject key identifier: CC:B1:F3:5D:39:AC:39:D5:88:88:D3:5C:36:16:1F:8E:BA:C0:9F:B4
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 01A13EC1EF0FB7200249AE277BBBEA04075E
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/zLHzXTmsOdWIiNNcNhYfjrrAn7Q.roa
Signing time: Thu 15 Oct 2026 08:50:59 +0000
ROA not before: Thu 15 Oct 2026 08:50:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57008
IP address blocks: 85.198.88.0/22 maxlen: 22
85.198.88.0/24 maxlen: 24
85.198.89.0/24 maxlen: 24
85.198.90.0/24 maxlen: 24
85.198.91.0/24 maxlen: 24
90.156.222.0/23 maxlen: 23
90.156.222.0/24 maxlen: 24
90.156.223.0/24 maxlen: 24
176.123.180.0/22 maxlen: 22
176.123.180.0/24 maxlen: 24
176.123.182.0/24 maxlen: 24
176.123.183.0/24 maxlen: 24
185.36.144.0/24 maxlen: 24
185.200.84.0/22 maxlen: 22
185.200.84.0/24 maxlen: 24
185.200.85.0/24 maxlen: 24
185.200.86.0/24 maxlen: 24
185.200.87.0/24 maxlen: 24
217.180.0.0/22 maxlen: 22
217.180.0.0/24 maxlen: 24
217.180.1.0/24 maxlen: 24
217.180.2.0/24 maxlen: 24
217.180.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:c1:ef:0f:b7:20:02:49:ae:27:7b:bb:ea:04:07:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Oct 15 08:50:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccb1f35d39ac39d58888d35c36161f8ebac09fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:6a:ab:09:7f:e9:92:19:47:60:32:72:6c:
a5:a7:2c:8f:52:1b:82:43:2d:52:e3:f5:27:a1:33:
6d:28:ff:5d:f5:ca:1c:5d:58:50:0d:f5:cd:3f:31:
ba:68:ba:bf:0a:a0:29:b0:b1:ce:85:93:da:99:32:
16:61:ac:a6:9d:0b:fb:14:2f:47:39:fb:f6:c0:f1:
f1:88:e0:db:fc:36:da:04:98:07:44:1e:37:b4:46:
1d:50:72:3c:25:af:a5:4e:cb:80:ea:8f:32:70:dc:
f2:28:70:d6:70:8b:8c:2a:7b:50:b7:5c:92:b6:32:
17:dc:8c:4b:19:dd:ad:d7:0a:9d:4a:fa:16:8d:33:
cb:04:0c:7f:23:ce:43:9a:97:9a:49:d5:b7:a5:95:
7b:9a:e6:23:9d:85:ea:e7:90:b5:8e:0b:74:60:eb:
7a:de:e3:8c:ac:31:12:92:fb:98:1b:70:44:7d:72:
de:e4:ed:7c:f8:33:46:01:5a:6e:08:23:1a:80:93:
fa:93:35:52:65:f1:59:2d:c3:c6:9d:3f:8b:05:74:
32:d3:1c:d7:d4:a0:1f:d9:fe:79:82:0d:a4:55:a5:
33:39:30:d3:fa:76:54:2e:e1:4c:6f:d5:ea:41:54:
9a:7c:a9:49:c8:f9:4d:8c:d1:66:bb:89:85:04:06:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B1:F3:5D:39:AC:39:D5:88:88:D3:5C:36:16:1F:8E:BA:C0:9F:B4
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/zLHzXTmsOdWIiNNcNhYfjrrAn7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.88.0/22
90.156.222.0/23
176.123.180.0/22
185.36.144.0/24
185.200.84.0/22
217.180.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:df:0b:e0:56:2a:ef:2b:8c:cf:f2:8e:78:ee:64:ea:1d:59:
7a:c8:2e:39:9f:a2:d3:05:dc:8c:e4:89:8f:3e:3e:8b:85:a8:
5a:f6:c4:a7:99:05:03:44:1e:30:09:91:ab:ba:c4:ca:c9:bc:
01:99:91:08:15:94:ad:69:87:d7:6e:4a:dd:aa:ea:0a:d3:80:
9d:81:ef:99:27:32:fd:8f:6c:d2:7b:29:d8:98:9f:d6:5d:7b:
04:6d:f8:c7:9e:cb:f7:08:0c:c5:37:e5:e0:0d:3d:88:f4:c0:
32:a5:3f:2e:19:c7:7f:f0:29:70:10:f9:3c:4e:01:8f:1d:aa:
b4:9d:8d:03:cf:c5:3a:4a:c6:38:ef:b9:0b:98:90:02:e7:81:
44:14:1c:11:ee:4d:18:e5:e0:9c:88:27:63:65:13:f9:b7:f4:
11:c9:c0:39:65:f2:18:65:7b:18:44:04:84:b3:1e:f6:be:73:
1d:6c:b1:8f:82:a0:03:00:84:56:45:e4:3b:c9:6d:2d:94:e3:
54:f7:39:97:0e:56:a0:56:66:5a:9e:97:bb:16:54:86:d0:c7:
ed:76:4a:01:ac:71:4b:4f:f1:e3:d0:65:24:91:4b:e2:c8:7a:
ca:ad:fd:48:0f:b0:cf:69:c9:77:d1:8c:8f:09:99:b8:f7:8a:
2a:7f:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:07:51 2026 by rpki-client