Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/FkN5wCpqf47xHpP2qPmsCVpZA5A.roa
File: FkN5wCpqf47xHpP2qPmsCVpZA5A.roa (raw, json)
Hash identifier: 6NsTbMJNSxy3emhsWHcWB2UjLqNQnQDr6NiMOXPxTg4=
Subject key identifier: 16:43:79:C0:2A:6A:7F:8E:F1:1E:93:F6:A8:F9:AC:09:5A:59:03:90
Certificate issuer: /CN=b0570845c239e9991c89bc5c50431e9087860c4d
Certificate serial: 019E591435C41620B4E1C1799FB91400BCA6
Authority key identifier: B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/FkN5wCpqf47xHpP2qPmsCVpZA5A.roa
Signing time: Sun 24 May 2026 08:22:37 +0000
ROA not before: Sun 24 May 2026 08:22:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213680
IP address blocks: 81.85.84.0/22 maxlen: 22
81.85.84.0/23 maxlen: 23
81.85.84.0/24 maxlen: 24
81.85.85.0/24 maxlen: 24
81.85.86.0/23 maxlen: 23
81.85.86.0/24 maxlen: 24
81.85.87.0/24 maxlen: 24
193.168.166.0/24 maxlen: 24
2a14:c600::/32 maxlen: 32
2a14:c600:100::/48 maxlen: 48
2a14:c600:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:14:35:c4:16:20:b4:e1:c1:79:9f:b9:14:00:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0570845c239e9991c89bc5c50431e9087860c4d
Validity
Not Before: May 24 08:22:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=164379c02a6a7f8ef11e93f6a8f9ac095a590390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:8f:fc:32:df:11:a9:c6:f9:bd:2f:7a:a5:
14:68:97:b5:de:64:f4:19:76:0b:d7:3e:33:42:d1:
08:9a:28:87:20:36:0e:95:f7:ff:fa:af:c3:ca:b0:
a8:32:1e:fa:fc:78:52:80:67:1a:e1:96:3c:ca:69:
6a:8d:8b:0f:25:92:21:e4:66:ce:9d:74:52:1a:f7:
62:05:1f:7d:58:c2:d0:0f:b1:28:ea:e4:a1:79:b2:
42:29:45:53:d0:b1:f1:46:f9:68:9a:36:3c:a4:36:
98:87:12:35:65:54:2c:ac:ce:eb:44:d4:9f:56:ae:
15:3b:c1:d6:7e:9b:bf:bb:9a:bb:c0:4d:1f:91:ba:
3f:5c:3e:0f:e2:ac:8a:a7:fb:c8:69:f5:14:2c:c9:
90:99:d8:f9:7e:31:39:c2:df:20:64:2d:b8:70:95:
7b:44:43:77:0d:f2:26:fa:33:94:b2:7a:3d:9c:7a:
c6:d3:18:4e:1d:9c:e0:13:5b:ff:5b:ec:69:2f:6b:
df:44:bb:e4:01:d5:14:1e:95:92:4f:4d:08:69:9b:
c2:97:78:7a:94:ab:99:e8:48:61:4b:e5:03:a0:2a:
6c:ee:47:0f:3c:24:05:be:2a:22:8f:3d:c0:77:dc:
31:82:91:b7:05:e7:6c:c6:c3:7c:18:db:cd:b6:6e:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:43:79:C0:2A:6A:7F:8E:F1:1E:93:F6:A8:F9:AC:09:5A:59:03:90
X509v3 Authority Key Identifier:
keyid:B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/FkN5wCpqf47xHpP2qPmsCVpZA5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.84.0/22
193.168.166.0/24
IPv6:
2a14:c600::/32
Signature Algorithm: sha256WithRSAEncryption
15:e7:52:08:6d:8c:67:5b:84:01:88:88:48:2a:01:25:ad:fc:
b6:96:f0:c0:0d:83:a2:45:4f:6a:3a:72:3a:96:1e:c3:80:ef:
a6:c3:2e:c1:7b:0c:ae:ee:4d:5a:0f:18:23:a4:63:b5:e2:0f:
ac:eb:b5:12:60:84:a2:e4:f3:10:b0:91:23:56:18:20:48:f5:
9c:aa:72:5d:7a:ed:07:5d:bb:dc:93:8b:0e:af:5f:5f:80:71:
f4:84:3c:fb:78:0a:4d:1d:7f:c3:b2:04:39:a8:25:a7:be:0e:
cf:d2:02:f7:3b:6c:bf:e5:b3:d7:33:92:45:7c:34:d6:7f:3f:
22:b7:ae:fa:e3:cc:bc:91:41:13:2b:44:10:06:53:81:14:37:
ab:7d:08:88:71:d9:ba:92:d5:d2:d4:e1:78:f6:b0:28:02:8e:
95:ea:02:70:89:33:8f:5d:dc:11:ba:07:c3:9d:f9:6e:34:aa:
65:ef:d7:59:40:f1:7e:76:7d:92:26:66:66:89:9a:0e:cd:ef:
6b:80:a7:d8:ac:71:36:43:45:70:72:c6:c1:b8:4b:34:d1:48:
00:39:28:f4:d7:3e:a1:f6:f3:06:00:9b:3c:82:dd:cd:d7:2d:
f9:22:49:d8:46:0a:98:69:2c:e6:87:69:3b:2c:a4:8f:e1:fe:
f3:17:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:21:21 2026 by rpki-client