Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/E7dX5V4ZZyskIK6Sp-YQmDZAzFk.roa
File: E7dX5V4ZZyskIK6Sp-YQmDZAzFk.roa (raw, json)
Hash identifier: 8IC9Nubg/5Jpt50f9l4q2zuXWjF7ZZkCNpKaDWsctR0=
Subject key identifier: 13:B7:57:E5:5E:19:67:2B:24:20:AE:92:A7:E6:10:98:36:40:CC:59
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019CAE05456EFF2CB18B08F5A41F404A28D7
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/E7dX5V4ZZyskIK6Sp-YQmDZAzFk.roa
Signing time: Mon 02 Mar 2026 10:08:26 +0000
ROA not before: Mon 02 Mar 2026 10:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 85.203.13.0/24 maxlen: 24
85.203.21.0/24 maxlen: 24
85.203.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:05:45:6e:ff:2c:b1:8b:08:f5:a4:1f:40:4a:28:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Mar 2 10:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13b757e55e19672b2420ae92a7e610983640cc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:88:f6:dc:42:33:b9:71:f8:36:30:ff:a7:2b:
3c:9d:a5:79:b7:cb:d0:8c:34:22:a6:ca:e1:d8:da:
55:df:28:ad:1a:ed:a3:c5:cf:89:d6:6d:51:b5:f2:
91:2b:bf:d9:ef:7f:4c:20:80:14:7b:15:27:ae:bf:
96:c6:b7:63:9b:f5:f6:a9:83:21:3a:80:6f:14:b5:
d9:73:a3:ae:93:1c:e3:06:12:ed:07:6d:04:cf:39:
f8:54:38:59:2a:c7:15:7c:cc:fc:78:66:a5:5f:f5:
5a:da:27:2e:d2:c9:3b:9a:16:01:4e:06:81:17:6c:
98:13:00:fe:0f:a2:59:00:c9:1d:64:94:f9:5f:d1:
9c:7e:c0:1d:c8:34:aa:26:b3:55:50:fa:41:23:da:
d9:98:db:18:ca:65:55:fa:23:0f:82:e9:b5:46:33:
00:9e:f8:2a:1c:e3:a9:f4:89:a2:e7:c5:e9:25:4a:
43:f1:14:06:fd:86:e9:c1:20:98:5d:17:3c:21:be:
94:02:03:24:02:96:40:9b:0f:34:f6:7b:5e:0b:6b:
68:69:30:c2:c4:21:08:ea:e0:74:2e:0d:47:6c:ec:
93:bd:23:40:10:66:1d:14:8f:99:82:64:ea:61:80:
47:db:61:42:ba:4a:be:27:16:ed:50:df:3c:3e:ce:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:57:E5:5E:19:67:2B:24:20:AE:92:A7:E6:10:98:36:40:CC:59
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/E7dX5V4ZZyskIK6Sp-YQmDZAzFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.13.0/24
85.203.21.0/24
85.203.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b6:1b:f1:cd:42:03:53:35:fc:e6:cf:66:83:8a:e2:33:c6:
df:5f:d6:84:3c:5d:ee:6c:18:8e:9a:3e:2c:d2:64:67:26:25:
ec:2c:29:f6:87:21:3b:98:13:dc:91:24:6c:fb:42:29:51:d6:
6e:d5:c7:93:1b:1c:dc:06:96:94:26:46:7a:c4:7c:e3:fc:65:
2f:ff:c9:0e:1c:2e:42:8b:02:74:f1:07:68:d3:a1:99:3b:3b:
71:ca:d3:43:81:41:3e:00:10:89:49:0c:47:21:6f:e1:e7:aa:
75:8a:72:ff:e2:a1:98:1a:87:40:c2:4a:60:d0:e2:e3:6f:36:
ea:33:1f:f8:9e:8e:65:68:53:00:0a:cb:d7:9b:26:53:44:20:
a0:12:eb:13:55:25:c1:ce:38:8b:8c:d2:86:9a:1c:64:de:1d:
ac:80:97:50:28:a7:2c:f9:dd:92:53:95:f7:da:01:52:ed:7f:
77:e9:12:9a:66:00:2c:f5:16:1f:75:7b:65:35:47:84:66:d3:
0c:46:1a:be:1f:b5:98:7b:dd:a5:12:f6:51:01:81:99:9e:50:
c2:d9:52:65:78:80:ee:6d:79:27:1a:fd:4c:21:4b:3b:91:f6:
12:6f:ea:83:4c:12:1f:6c:67:ad:7b:c8:56:f1:17:68:13:25:
f7:ab:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:05:18 2026 by rpki-client