Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa
File: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (raw, json)
Hash identifier: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=
Subject key identifier: 81:91:37:4D:EE:05:67:BF:8B:A7:81:84:25:0B:D0:12:4C:2A:88:30
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 019C5FAD845D96CDB446BCD82CF88E46247A
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa
Signing time: Sun 15 Feb 2026 05:02:13 +0000
ROA not before: Sun 15 Feb 2026 05:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 85.28.32.0/20 maxlen: 24
85.28.32.0/23 maxlen: 23
85.28.32.0/24 maxlen: 24
85.28.33.0/24 maxlen: 24
85.28.34.0/24 maxlen: 24
85.28.35.0/24 maxlen: 24
85.28.36.0/22 maxlen: 22
85.28.40.0/23 maxlen: 23
85.28.42.0/24 maxlen: 24
85.28.43.0/24 maxlen: 24
85.28.44.0/23 maxlen: 23
85.28.48.0/20 maxlen: 24
85.28.48.0/22 maxlen: 22
85.28.52.0/23 maxlen: 23
85.28.54.0/23 maxlen: 23
85.28.56.0/24 maxlen: 24
85.28.57.0/24 maxlen: 24
85.28.58.0/24 maxlen: 24
85.28.59.0/24 maxlen: 24
85.28.60.0/22 maxlen: 22
85.28.60.0/24 maxlen: 24
85.28.62.0/24 maxlen: 24
109.238.192.0/20 maxlen: 24
109.238.192.0/22 maxlen: 24
109.238.200.0/24 maxlen: 24
109.238.203.0/24 maxlen: 24
109.238.205.0/24 maxlen: 24
109.238.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5f:ad:84:5d:96:cd:b4:46:bc:d8:2c:f8:8e:46:24:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Feb 15 05:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8191374dee0567bf8ba78184250bd0124c2a8830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:6a:00:f4:61:ac:c0:1b:87:41:39:e2:a6:
5b:66:77:d1:fe:de:af:0d:9a:74:fd:fa:3e:ec:d3:
1b:36:b4:6d:33:ac:48:f6:7e:86:74:28:5d:8e:28:
99:7a:a0:ca:92:07:20:d4:98:12:68:c3:71:f6:d9:
07:dc:69:e7:7f:67:16:c5:ba:f1:7f:c4:8f:8a:fe:
78:75:08:27:28:29:90:0c:28:5f:43:4c:e7:96:5a:
59:ee:32:d5:05:85:0a:1a:9b:a4:7e:7e:76:bc:5d:
05:cf:7d:17:5f:9c:22:44:a2:57:ca:2d:7d:26:05:
21:0a:43:b5:08:e6:22:1a:72:60:eb:4c:7c:89:43:
f0:4f:7a:73:52:5c:15:06:f8:d7:6e:35:d3:eb:18:
a6:d8:9d:a1:2e:f8:35:e7:08:2a:1d:29:9b:de:bf:
2e:79:ca:3e:e3:54:75:6b:cb:88:dc:92:57:06:f3:
2e:96:04:7d:16:76:75:9f:d6:1e:2d:90:93:b2:03:
9f:a7:37:eb:a8:5f:db:70:94:0a:4c:12:30:95:55:
6b:f0:25:6a:63:eb:9d:d4:ce:9a:91:4c:e5:a1:80:
e3:07:db:73:c9:a7:66:7f:c9:e9:36:d5:62:93:e6:
2d:a8:d1:7b:bc:de:58:e8:0b:0a:80:84:26:1b:72:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:37:4D:EE:05:67:BF:8B:A7:81:84:25:0B:D0:12:4C:2A:88:30
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.32.0/19
109.238.192.0/20
Signature Algorithm: sha256WithRSAEncryption
77:d8:73:e0:91:03:05:b8:76:ec:7f:d9:a7:50:f2:06:5c:ab:
cb:be:7f:81:4a:ad:0c:ea:ab:61:8e:9b:c6:2c:ec:6f:4c:af:
35:e0:ee:71:08:9a:3e:1b:77:87:98:67:e5:af:49:74:23:2a:
de:96:bf:a9:42:fd:37:58:95:06:d2:a0:b3:4e:21:79:54:89:
88:6e:6f:06:8c:dd:18:96:a1:fd:a4:58:b1:f6:c4:5b:dc:cf:
c1:25:58:f5:f6:7e:42:38:53:f7:41:9f:d5:50:80:ba:5a:02:
02:31:2b:05:af:9a:3e:59:3d:10:bd:c2:b4:89:e2:4b:11:93:
ac:4c:00:6a:6b:64:cb:ec:3e:89:17:a9:87:e3:a6:b2:48:66:
57:5e:21:db:4a:89:d7:8a:cb:fa:29:4a:86:a1:b8:72:36:26:
c4:e0:ef:08:16:34:88:a2:11:15:0d:21:4f:ed:67:21:2a:ba:
62:f3:39:75:83:c9:ec:00:f9:35:27:09:6a:46:c1:1e:e2:bb:
5a:9c:9b:9a:26:45:ee:7e:d2:1c:e2:68:4e:22:20:32:12:12:
04:bf:a9:a2:5d:fc:f1:39:c1:81:b9:22:b5:c5:65:4d:60:5f:
f8:90:87:76:f1:62:e0:5d:e2:23:b2:04:eb:03:06:3c:d1:0e:
5b:d4:10:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:40:40 2026 by rpki-client