Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/_og34UxL66HAf1x6tJdapHB1KD4.roa
File: _og34UxL66HAf1x6tJdapHB1KD4.roa (raw, json)
Hash identifier: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=
Subject key identifier: FE:88:37:E1:4C:4B:EB:A1:C0:7F:5C:7A:B4:97:5A:A4:70:75:28:3E
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 019C65C5939E0F8E93B75ECA3E8519A3C051
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/_og34UxL66HAf1x6tJdapHB1KD4.roa
Signing time: Mon 16 Feb 2026 09:26:13 +0000
ROA not before: Mon 16 Feb 2026 09:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31643
IP address blocks: 85.28.0.0/20 maxlen: 20
85.28.0.0/21 maxlen: 21
85.28.8.0/21 maxlen: 21
85.28.16.0/20 maxlen: 20
85.28.16.0/21 maxlen: 21
85.28.24.0/21 maxlen: 21
217.151.16.0/20 maxlen: 20
217.151.16.0/21 maxlen: 21
217.151.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:c5:93:9e:0f:8e:93:b7:5e:ca:3e:85:19:a3:c0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Feb 16 09:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe8837e14c4beba1c07f5c7ab4975aa47075283e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:fe:87:f7:2a:f2:4d:2f:4a:9e:67:90:c9:
08:d3:60:50:ec:f1:f6:6a:10:43:19:f3:de:4c:46:
b0:77:36:ae:bf:66:02:61:47:c5:1b:20:89:19:7e:
86:5c:34:40:5f:9b:7c:96:6f:de:35:c5:52:ff:79:
71:eb:0f:1d:e6:d3:16:74:fa:f5:ad:07:48:a7:49:
d2:d6:1c:3c:58:4c:cc:11:d2:09:45:ac:88:bd:cc:
24:0b:33:8d:b4:86:b6:72:b0:b6:0c:f0:11:2a:83:
c6:50:9c:d5:30:ac:5c:0e:48:33:94:1d:28:71:58:
2f:6d:ec:f5:9b:5e:e3:6d:6d:bd:3c:a6:01:ad:9b:
f0:e3:9d:f7:8b:bf:92:63:fb:82:db:4c:10:11:e8:
06:2d:f0:43:a1:dd:cb:82:0f:95:a9:3e:70:bb:8b:
1b:5c:57:3b:20:fd:d5:ad:92:99:e1:f5:79:42:3c:
84:bd:0d:b6:5f:f9:5d:62:5a:0f:d0:d4:2e:20:6b:
15:e4:42:47:8c:68:f8:d3:a1:52:f1:25:92:a8:78:
8c:26:15:dc:15:79:af:4a:f0:58:69:7d:df:2a:a1:
83:86:bf:c4:1f:d0:e1:f3:1f:cb:fa:ef:3c:7f:8a:
f0:57:e4:93:2c:79:12:bc:52:38:6b:33:fc:c9:4a:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:37:E1:4C:4B:EB:A1:C0:7F:5C:7A:B4:97:5A:A4:70:75:28:3E
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/_og34UxL66HAf1x6tJdapHB1KD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.0.0/19
217.151.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:e0:d6:f8:7c:b6:bf:b6:ab:3a:d8:c9:a2:e8:4f:00:dd:40:
f5:f3:c8:46:8e:8d:ca:36:6f:8a:f8:36:c9:55:b8:96:2b:0b:
c8:6f:62:6d:cf:81:5f:ac:da:3e:ee:68:e0:bf:19:99:9f:24:
a5:13:8b:96:7f:22:38:be:c7:ab:c0:40:17:f2:ad:01:ab:52:
99:92:8e:f8:e0:60:07:af:45:93:50:98:5e:c1:c8:e6:fe:d7:
16:72:a6:0b:43:6b:5e:71:e3:22:74:3e:50:d1:90:9a:1d:ba:
fb:94:8b:88:6c:99:6a:f1:7c:b9:f0:19:db:6f:46:87:48:57:
d2:b8:62:8e:04:8c:bf:7a:8a:ea:1a:a7:50:ff:ca:24:c8:39:
60:20:17:af:33:e7:3e:7e:af:f3:3c:a3:37:14:1a:d0:45:32:
97:67:17:af:1b:1c:2c:03:eb:d4:8c:21:b7:f8:5f:39:4a:ec:
48:4c:ee:8f:05:eb:18:a7:7b:69:51:76:c7:27:34:87:a9:b9:
b3:e6:41:f8:03:06:40:2d:7a:f2:0b:35:02:9f:7b:ec:e8:e6:
7d:84:03:1c:c4:9e:f0:d0:d6:4b:5f:7b:3f:b6:25:49:e5:84:
6c:e3:1b:27:7c:5f:f0:5c:a8:4c:ff:28:27:dd:64:0b:ee:fc:
61:6b:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:27:09 2026 by rpki-client