Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/pXvD79Zml20XD8705pvsmU8J_GQ.roa
File: pXvD79Zml20XD8705pvsmU8J_GQ.roa (raw, json)
Hash identifier: SwtSGe6kdeJc/WuWw1ApFcrI82cgsWeYh2Z9I8ocSMI=
Subject key identifier: A5:7B:C3:EF:D6:66:97:6D:17:0F:CE:F4:E6:9B:EC:99:4F:09:FC:64
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019D8725EC614B884F3C9120F314B64AC07F
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/pXvD79Zml20XD8705pvsmU8J_GQ.roa
Signing time: Mon 13 Apr 2026 14:01:42 +0000
ROA not before: Mon 13 Apr 2026 14:01:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 85.232.178.0/24 maxlen: 24
85.232.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:25:ec:61:4b:88:4f:3c:91:20:f3:14:b6:4a:c0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Apr 13 14:01:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a57bc3efd666976d170fcef4e69bec994f09fc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9a:97:fa:47:de:9e:0d:4e:43:b0:ec:54:d3:
78:c8:d8:c5:8c:d4:b7:93:5e:d9:ff:df:a2:7b:2e:
54:41:2b:c2:bd:bc:dc:18:66:fb:64:17:a1:5c:5b:
c3:80:86:44:b6:c3:f6:88:1d:35:00:be:7b:5e:4b:
01:6e:7a:dc:b7:db:7a:61:8d:82:6a:81:57:5d:74:
dc:0c:8d:05:4d:30:26:d0:13:c7:1c:77:8d:53:2a:
f4:05:4b:5e:67:b8:e2:12:ce:d6:49:10:e3:a0:82:
9d:c1:3a:ba:49:50:f4:00:c2:bc:3f:8d:64:69:7a:
92:9d:a1:e0:0e:b2:1e:ad:e3:b8:c3:b6:69:ff:66:
c8:da:09:73:3e:1d:18:20:65:24:cf:da:ff:b9:b2:
46:25:3d:4a:4a:b6:69:b1:56:96:08:8c:69:31:c3:
86:e0:7b:5e:d3:b4:72:23:c1:f9:4a:5d:ca:39:ca:
03:ab:77:64:2b:4b:5e:88:2e:9f:7e:06:3f:d0:9a:
11:30:cc:35:66:45:48:5d:84:98:b1:ab:9d:63:55:
de:3d:bd:65:02:dd:22:6e:f4:f3:33:ff:05:74:9c:
e0:05:11:ac:61:b9:a0:ad:89:37:ed:e1:22:b0:2a:
43:64:ea:bd:ce:68:c5:23:d6:85:42:d4:96:3c:8d:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:C3:EF:D6:66:97:6D:17:0F:CE:F4:E6:9B:EC:99:4F:09:FC:64
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/pXvD79Zml20XD8705pvsmU8J_GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.178.0/24
85.232.183.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d0:5c:c0:62:f1:15:42:6e:6e:67:55:16:01:05:b2:6f:09:
b7:0c:09:16:43:8e:c9:ba:a1:01:d5:61:4e:e2:39:a3:b3:2a:
1d:e9:de:70:ad:ce:89:48:97:9c:b9:71:c6:e8:db:9a:c4:8d:
5d:f6:e6:93:fc:97:8c:c0:b8:26:f6:60:70:8b:33:86:83:9f:
ec:a1:af:f1:f0:bc:18:47:ab:88:ea:a5:05:31:71:2b:45:2b:
32:20:6a:e4:4c:31:62:c7:71:ea:35:62:a2:78:c9:95:ea:ed:
b5:90:07:3c:ac:09:7a:eb:70:67:76:5b:af:dd:5b:12:de:59:
af:c8:1f:af:65:ad:23:db:d8:c2:3a:df:de:46:c4:92:37:25:
96:fc:c7:cc:66:52:66:9d:c1:c2:d8:b4:7e:25:32:e4:94:4c:
02:15:34:24:11:e3:82:6d:a7:de:99:2f:ac:b2:df:f6:18:c0:
03:67:7e:77:e1:fa:a4:d1:d7:f3:1f:a4:d6:e0:c3:21:d2:5d:
fa:46:fc:71:85:71:fa:3a:17:6f:ca:4f:8f:cc:9c:3d:2e:54:
ab:c6:69:c9:c4:81:6c:70:7a:6f:a7:2e:93:56:80:1e:1e:6f:
d6:c2:c9:e3:ea:8d:17:b0:32:ec:86:ad:9e:2b:7a:1e:9d:bf:
bf:ac:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:05 2026 by rpki-client