Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/1NQ1vDHA-Dj-tFLeM4ghDiF2gS8.roa
File: 1NQ1vDHA-Dj-tFLeM4ghDiF2gS8.roa (raw, json)
Hash identifier: 8J+fGJClUURpb3X5AszbRYb5RhbTQGSY5pBawZudSVE=
Subject key identifier: D4:D4:35:BC:31:C0:F8:38:FE:B4:52:DE:33:88:21:0E:21:76:81:2F
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 01A15E650F1A702EE30E99070B89CADBEC9A
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/1NQ1vDHA-Dj-tFLeM4ghDiF2gS8.roa
Signing time: Wed 21 Oct 2026 12:17:23 +0000
ROA not before: Wed 21 Oct 2026 12:17:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 85.208.97.0/24 maxlen: 24
85.208.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:65:0f:1a:70:2e:e3:0e:99:07:0b:89:ca:db:ec:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Oct 21 12:17:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4d435bc31c0f838feb452de3388210e2176812f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:5b:ea:ef:71:55:98:02:96:6d:1f:c9:b8:
0b:e9:29:8c:d3:f2:c6:27:73:9e:aa:3c:28:84:54:
d2:73:ad:b3:f0:37:13:33:49:1d:b6:22:4f:90:3b:
83:85:c1:b6:69:35:b6:92:b3:97:40:ed:9c:e4:5b:
6b:1b:99:20:68:af:87:81:94:6d:f0:95:b1:9c:43:
6c:3c:94:d4:6e:55:58:3e:cc:57:11:2b:b2:e3:7d:
00:29:81:3e:e3:33:04:06:cb:29:b7:5e:cc:58:b6:
0c:c2:0e:ef:95:af:4a:b2:2a:ee:ee:de:2c:49:14:
a3:14:ed:bc:72:85:01:f3:4d:3f:29:0e:c9:5c:8c:
1a:34:cd:a8:a7:f4:d9:8e:82:6f:87:0f:9a:60:27:
e7:11:07:2c:76:1b:dc:f9:82:f3:38:86:d6:3a:17:
9e:51:fb:73:df:e0:42:8d:23:43:98:cb:37:73:33:
e5:67:59:35:7c:27:65:50:41:83:ce:7e:b6:c5:31:
0c:12:36:00:0c:b7:14:92:e6:c0:94:af:4c:57:97:
86:5e:66:d6:af:25:59:0a:c8:51:3f:be:16:30:e9:
df:f4:4f:50:93:09:1c:3e:03:03:48:e9:af:40:15:
b0:6c:c1:10:d3:e1:f3:0d:52:89:90:82:52:52:a7:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D4:35:BC:31:C0:F8:38:FE:B4:52:DE:33:88:21:0E:21:76:81:2F
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/1NQ1vDHA-Dj-tFLeM4ghDiF2gS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.97.0-85.208.98.255
Signature Algorithm: sha256WithRSAEncryption
54:70:0c:04:40:1f:57:2e:06:0e:08:ff:1d:ff:de:5a:6d:52:
e9:b3:f0:0e:74:2a:a5:db:46:5c:03:38:61:c7:30:95:d6:58:
da:8e:70:54:5a:0a:72:92:90:23:b1:2d:4b:2c:18:f4:be:8c:
29:40:d9:80:8b:7d:83:36:34:97:a2:30:f6:51:a8:cd:01:73:
cd:01:50:b9:23:da:ca:e1:58:ad:e1:71:04:ff:e9:8e:33:88:
c2:1a:94:88:cc:67:f6:50:b7:c7:8d:84:6f:10:f6:83:2e:d6:
77:ec:de:78:92:d6:89:7a:76:58:19:31:ff:21:11:8a:ba:5f:
82:ac:e5:b4:f1:0e:66:c5:fe:1f:29:8b:c9:5e:71:63:51:ff:
0b:f2:62:d7:aa:a4:24:95:31:5e:c0:1c:e5:53:ea:13:de:eb:
87:81:01:ff:c7:27:50:1f:5a:84:fd:91:de:db:d9:0f:04:5a:
27:0f:5e:10:01:af:a1:c4:9b:e3:d1:64:a4:3e:19:8c:15:a2:
8b:6c:2c:bf:5c:fe:1f:23:f6:10:12:a6:4a:40:00:b9:95:f6:
ee:6e:fb:28:b4:6e:2f:fe:4b:8d:cc:c1:a8:41:81:5c:ba:18:
94:21:97:45:22:fd:76:a1:d4:45:34:5e:02:db:81:e6:e1:a7:
48:fb:b8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:36:17 2026 by rpki-client