Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ba1yC487a0-2iQU2P-u67aInxKg.roa
File: ba1yC487a0-2iQU2P-u67aInxKg.roa (raw, json)
Hash identifier: r8Nb6q0OdOtEUcAC1eUd3+eDmgv4U/8gloxRzpiL0jU=
Subject key identifier: 6D:AD:72:0B:8F:3B:6B:4F:B6:89:05:36:3F:EB:BA:ED:A2:27:C4:A8
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019C93FA68720850B759F33A682FAA9A5FF1
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ba1yC487a0-2iQU2P-u67aInxKg.roa
Signing time: Wed 25 Feb 2026 08:46:27 +0000
ROA not before: Wed 25 Feb 2026 08:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.0.0/21 maxlen: 24
85.142.40.0/21 maxlen: 24
85.142.48.0/22 maxlen: 24
85.142.64.0/22 maxlen: 24
85.142.72.0/24 maxlen: 24
85.142.76.0/24 maxlen: 24
85.142.81.0/24 maxlen: 24
85.142.85.0/24 maxlen: 24
85.142.87.0/24 maxlen: 24
85.142.99.0/24 maxlen: 24
85.142.100.0/24 maxlen: 24
85.142.101.0/24 maxlen: 24
85.142.113.0/24 maxlen: 24
85.142.115.0/24 maxlen: 24
85.142.128.0/21 maxlen: 24
85.142.137.0/24 maxlen: 24
85.142.138.0/23 maxlen: 24
85.142.140.0/22 maxlen: 24
85.142.212.0/23 maxlen: 24
85.142.215.0/24 maxlen: 24
85.142.240.0/24 maxlen: 24
85.142.242.0/24 maxlen: 24
85.142.246.0/24 maxlen: 24
85.142.250.0/24 maxlen: 24
85.142.253.0/24 maxlen: 24
85.142.254.0/23 maxlen: 24
85.143.41.0/24 maxlen: 24
85.143.42.0/23 maxlen: 24
85.143.44.0/24 maxlen: 24
85.143.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:fa:68:72:08:50:b7:59:f3:3a:68:2f:aa:9a:5f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Feb 25 08:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dad720b8f3b6b4fb68905363febbaeda227c4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:30:2f:be:ef:7d:eb:21:d2:3d:21:78:59:
97:0c:9a:6f:b1:33:53:2c:8f:2f:7a:c5:fa:74:08:
71:77:84:b9:14:60:65:19:70:57:9b:7f:1b:1f:b9:
06:80:2e:b3:05:aa:e0:72:be:bf:f0:1e:d0:15:15:
a2:68:21:a9:2d:45:e4:c6:6c:8d:ab:7f:a8:e2:c4:
79:02:d3:a0:59:85:14:43:3d:44:e9:9f:6b:5a:b4:
92:ee:ac:2c:2a:6b:88:c6:19:e2:65:ae:c5:83:dd:
b0:1b:58:d1:2a:ca:25:01:e1:0e:ed:ec:7d:6d:f2:
2d:46:4c:18:f6:13:f8:7f:8e:22:75:57:96:ee:52:
f5:79:28:52:e4:69:f9:3b:9b:52:9a:55:7c:71:fd:
f8:b2:81:a8:af:ea:0c:90:37:6f:c0:be:83:22:f8:
4d:6b:32:d9:c9:ce:f3:99:30:f0:50:1c:85:18:23:
7a:7e:71:2f:c6:cd:29:37:15:5e:bb:6b:1e:1d:41:
d9:c6:84:f2:f2:f3:c3:67:dd:67:7c:82:15:83:f8:
f2:64:34:40:7d:95:8d:9b:1a:ec:cb:e0:26:0b:be:
1d:e6:39:0a:3b:62:79:db:80:8b:e7:cb:ec:48:e2:
6c:33:86:b9:35:b7:c4:60:08:14:d6:61:15:13:6f:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AD:72:0B:8F:3B:6B:4F:B6:89:05:36:3F:EB:BA:ED:A2:27:C4:A8
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ba1yC487a0-2iQU2P-u67aInxKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.0.0/21
85.142.40.0-85.142.51.255
85.142.64.0/22
85.142.72.0/24
85.142.76.0/24
85.142.81.0/24
85.142.85.0/24
85.142.87.0/24
85.142.99.0-85.142.101.255
85.142.113.0/24
85.142.115.0/24
85.142.128.0/21
85.142.137.0-85.142.143.255
85.142.212.0/23
85.142.215.0/24
85.142.240.0/24
85.142.242.0/24
85.142.246.0/24
85.142.250.0/24
85.142.253.0-85.142.255.255
85.143.41.0-85.143.44.255
85.143.48.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:61:85:d5:89:b2:b3:0e:47:2c:8d:aa:4e:31:cb:d0:75:97:
46:d8:da:e9:7f:c6:43:db:52:b3:ba:94:b1:42:7d:93:7c:a6:
ef:fb:02:93:c9:55:ed:5b:b3:8a:fc:82:63:7e:51:a4:4c:f7:
b4:81:d7:ff:e3:81:77:65:33:a6:b0:14:e8:52:61:52:91:7b:
6b:aa:02:88:89:b4:52:c6:f4:69:1d:cd:33:1a:b6:95:0d:46:
ae:b8:c3:50:ad:c5:ef:c7:da:0c:83:97:90:a3:97:15:51:e3:
f9:c6:56:9a:92:6a:82:0d:03:cb:f1:a6:5b:d7:74:55:63:71:
c2:aa:e8:53:71:7a:9d:6f:61:19:71:ce:fb:88:21:c1:e8:aa:
2e:33:95:db:9b:56:f1:68:e6:c5:04:47:97:ff:e8:00:40:e9:
a1:75:70:6d:0d:69:fc:ee:9b:db:bd:c7:cd:85:ca:3f:f3:17:
5b:e1:ad:e9:15:be:4c:60:d9:28:71:2e:cc:b7:a6:c5:4a:9c:
0a:c5:7a:95:aa:25:d6:9e:78:b2:11:d5:b5:e5:18:ff:bc:2c:
0b:e6:12:75:0f:af:d2:2a:07:79:7a:fa:ab:51:eb:ad:bb:17:
1b:3a:bc:88:73:d2:4c:3e:14:95:59:4c:32:c5:ea:2a:4f:74:
04:32:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:45 2026 by rpki-client