Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/014SaU3DVf2xBCHtYh3_vzWaeAE.roa
File: 014SaU3DVf2xBCHtYh3_vzWaeAE.roa (raw, json)
Hash identifier: zD8MxGjYqDBSlLxMSSZZzoVx8V+QFVLFxa0Ij62DJw0=
Subject key identifier: D3:5E:12:69:4D:C3:55:FD:B1:04:21:ED:62:1D:FF:BF:35:9A:78:01
Certificate issuer: /CN=2df8e4f4df76585130bec21ff0acbc26d77dd0aa
Certificate serial: 01A1890B6E2955CB394E896A24BA75E34B4E
Authority key identifier: 2D:F8:E4:F4:DF:76:58:51:30:BE:C2:1F:F0:AC:BC:26:D7:7D:D0:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/014SaU3DVf2xBCHtYh3_vzWaeAE.roa
Signing time: Thu 29 Oct 2026 19:03:09 +0000
ROA not before: Thu 29 Oct 2026 19:03:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 85.155.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:0b:6e:29:55:cb:39:4e:89:6a:24:ba:75:e3:4b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8e4f4df76585130bec21ff0acbc26d77dd0aa
Validity
Not Before: Oct 29 19:03:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d35e12694dc355fdb10421ed621dffbf359a7801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6d:b9:18:62:2c:96:9b:ee:b5:8f:5e:c7:bf:
fb:34:1d:a8:e2:96:3b:b6:3b:e2:24:1b:6c:fb:c7:
77:5d:c1:fa:ce:3f:b8:8c:a3:8b:e8:6d:3b:c0:a4:
1e:27:b6:3e:a8:24:55:05:3a:07:cd:9c:0b:60:8c:
f2:16:b3:29:e9:b2:f2:ef:60:c2:aa:48:69:53:19:
4f:61:c0:fc:21:13:e5:43:68:81:1b:02:fe:fa:23:
f4:aa:d0:2d:86:77:f4:58:f8:8f:56:66:4d:3b:c7:
94:35:7d:c8:9b:09:30:7a:3e:86:15:42:9b:03:b9:
cc:a7:ac:38:59:67:b3:c9:23:b9:e7:e2:99:ce:6e:
28:f0:e2:1a:fd:bf:53:28:82:fa:37:5f:31:1b:b9:
4e:ce:96:6a:d7:a9:bc:1a:fa:27:4a:0e:b8:fb:26:
bc:ec:0a:4e:68:48:f1:ef:6f:bb:24:bd:be:36:ea:
81:6e:2e:83:e1:6e:3f:1e:26:fa:f4:64:49:c2:db:
7e:9d:84:f5:70:33:8f:3b:37:43:bf:b1:91:ab:bb:
ad:b0:1d:4d:b8:58:1c:a3:23:7d:61:a2:8d:c4:73:
d6:42:ac:97:21:10:66:12:f1:a3:f3:9f:67:ec:53:
03:71:52:0e:66:7e:43:e7:30:b3:4c:c7:1c:73:92:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:12:69:4D:C3:55:FD:B1:04:21:ED:62:1D:FF:BF:35:9A:78:01
X509v3 Authority Key Identifier:
keyid:2D:F8:E4:F4:DF:76:58:51:30:BE:C2:1F:F0:AC:BC:26:D7:7D:D0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/014SaU3DVf2xBCHtYh3_vzWaeAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.2.0/23
Signature Algorithm: sha256WithRSAEncryption
05:52:1a:33:0a:4a:b4:6e:e9:2b:08:1f:ac:10:14:b5:76:bd:
0f:91:ab:9f:00:ec:a8:88:b4:a5:2c:94:d5:8c:12:de:c9:9f:
55:87:5d:c0:1f:22:96:d3:82:81:cf:36:46:e9:9a:3f:8d:ad:
f4:57:4e:55:46:28:98:82:08:34:34:f1:9c:b5:f6:21:1b:e3:
a7:db:b0:ab:1e:17:9c:fa:e2:36:d0:dd:47:68:21:01:d9:d3:
fc:d9:16:ff:2d:a3:72:d3:52:1d:b8:2b:27:17:06:22:78:32:
b1:c7:b9:aa:fb:c6:cc:6e:c9:72:23:c2:54:53:66:a4:34:8b:
00:af:27:ea:7f:d5:e9:6d:b1:f5:29:bf:53:2c:77:43:12:f7:
02:75:7f:28:72:4c:da:c0:40:db:ba:6f:e8:d1:b4:56:05:c3:
0c:f8:04:e6:c0:0d:d7:9c:07:d6:fd:42:73:6b:37:a7:fb:ff:
c0:2f:82:31:c7:36:fe:9c:df:be:8d:b8:49:41:3f:7e:29:01:
8e:b6:24:87:08:aa:9a:d2:58:dc:70:eb:cb:24:b8:36:74:08:
3c:52:49:5b:e8:74:c7:a8:dd:6b:b2:23:9f:3a:2b:af:90:3b:
08:18:2b:9b:6a:9f:c7:10:3f:4e:65:64:46:21:b9:08:8b:7c:
09:a6:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:26:44 2026 by rpki-client