Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2K1Zo9XSDJorbw4gcc1Z1nJ7grg.roa
File: 2K1Zo9XSDJorbw4gcc1Z1nJ7grg.roa (raw, json)
Hash identifier: seStWhyqRANO97c6aLeho09nwoRQVDtckAWNiOvWCPE=
Subject key identifier: D8:AD:59:A3:D5:D2:0C:9A:2B:6F:0E:20:71:CD:59:D6:72:7B:82:B8
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019D623D31D9170925A6810C296560C217CF
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2K1Zo9XSDJorbw4gcc1Z1nJ7grg.roa
Signing time: Mon 06 Apr 2026 10:01:10 +0000
ROA not before: Mon 06 Apr 2026 10:01:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50340
IP address blocks: 85.142.144.0/23 maxlen: 24
85.143.52.0/23 maxlen: 24
85.143.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:3d:31:d9:17:09:25:a6:81:0c:29:65:60:c2:17:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 6 10:01:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8ad59a3d5d20c9a2b6f0e2071cd59d6727b82b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:a7:ac:3d:85:6f:4b:b1:57:5c:3e:ee:c1:
62:0e:2c:83:fe:21:48:38:22:f7:44:83:0d:02:7c:
58:5a:1d:73:60:2d:1e:c5:4a:70:1b:7a:77:01:30:
9b:72:86:24:3d:f2:0c:16:bf:ba:05:61:27:4e:35:
2f:f7:b0:3d:50:45:c9:1a:f2:3d:b3:c7:e8:3e:5a:
3a:58:4c:6b:97:43:1b:40:83:be:62:92:d9:e6:84:
30:08:36:f6:40:9a:c9:16:b1:9a:ed:36:38:f9:20:
5a:1b:52:6b:82:76:8c:5d:2a:e1:71:45:ed:b9:4d:
d2:7b:8e:0c:ce:28:e9:88:0b:1f:c2:eb:87:1c:6b:
08:bf:42:ce:16:72:25:41:04:c5:cb:39:27:f1:84:
61:52:75:57:0d:a8:0f:8d:f0:91:3a:5c:6d:ac:bf:
b7:cd:e8:7f:5b:71:e0:af:4e:a5:68:dc:50:68:aa:
61:54:1f:ac:ba:f5:60:1f:37:b4:36:bc:d6:4f:15:
ab:69:74:c1:21:1b:f5:74:f4:96:14:c1:cc:d5:ef:
d7:77:40:81:6c:8e:2b:92:2b:62:0a:f5:21:1c:59:
d9:16:52:f7:ab:7f:e6:d5:b7:89:b7:96:91:07:47:
8a:b3:03:d7:d0:59:48:2d:15:ff:7b:6d:ff:b5:9f:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AD:59:A3:D5:D2:0C:9A:2B:6F:0E:20:71:CD:59:D6:72:7B:82:B8
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2K1Zo9XSDJorbw4gcc1Z1nJ7grg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.144.0/23
85.143.52.0-85.143.54.255
Signature Algorithm: sha256WithRSAEncryption
02:fc:76:c5:94:46:bc:99:12:17:eb:40:7a:07:a0:ce:35:e4:
82:dd:ec:90:e5:1b:df:9a:30:b5:1c:96:46:7c:51:ec:4a:c0:
f1:2b:bf:ae:7c:0c:1e:0b:17:7b:1e:7c:43:ef:9c:56:52:99:
43:64:e9:ee:bf:36:a1:0e:d5:51:09:f2:f3:6a:fe:28:40:dd:
2b:f1:e9:80:20:73:c1:05:e9:e7:e5:77:7f:e7:6b:6e:62:49:
c9:bc:a8:fe:8a:be:50:bf:3f:e5:f2:0e:db:b4:2e:b7:23:8d:
6a:f8:69:e8:45:86:cf:ad:63:a2:da:be:c1:0d:29:86:9b:45:
f8:bd:f6:9a:c5:ac:e4:f3:cd:9c:1a:f2:66:03:d1:b4:57:05:
ca:08:32:df:55:3c:fc:d8:c8:88:31:6c:5c:4a:35:9a:f5:9c:
d7:7a:87:6e:54:f1:8b:8d:b2:58:88:c6:09:44:d5:ab:55:aa:
3a:45:56:e0:a3:db:59:ea:fd:93:18:25:15:f8:45:62:c9:84:
36:82:75:4a:b2:6f:ff:b6:d7:d5:1c:fa:54:d2:2d:ac:b3:8d:
53:5f:53:4a:26:19:f4:e8:01:84:30:c0:27:63:a0:b0:01:fe:
82:91:1d:06:fd:22:42:bf:1a:4b:32:86:31:48:f6:11:6d:ee:
05:a1:6b:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:33 2026 by rpki-client