Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/k1V-jLyYwFzcxqE9I8WnGFlRhik.roa
File: k1V-jLyYwFzcxqE9I8WnGFlRhik.roa (raw, json)
Hash identifier: B+Azgi2OMdz2mz2h3m03oc7pj8d8tKJCBST0XGF9S4g=
Subject key identifier: 93:55:7E:8C:BC:98:C0:5C:DC:C6:A1:3D:23:C5:A7:18:59:51:86:29
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 01A019F64FEF83D785F0EEF61182C91763F3
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/k1V-jLyYwFzcxqE9I8WnGFlRhik.roa
Signing time: Wed 19 Aug 2026 12:19:27 +0000
ROA not before: Wed 19 Aug 2026 12:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213176
IP address blocks: 85.155.128.0/24 maxlen: 24
85.155.129.0/24 maxlen: 24
209.35.224.0/24 maxlen: 24
209.35.225.0/24 maxlen: 24
209.35.226.0/24 maxlen: 24
209.35.227.0/24 maxlen: 24
209.35.228.0/24 maxlen: 24
209.35.229.0/24 maxlen: 24
209.35.230.0/24 maxlen: 24
209.35.231.0/24 maxlen: 24
209.35.233.0/24 maxlen: 24
209.35.234.0/24 maxlen: 24
209.35.235.0/24 maxlen: 24
209.35.236.0/24 maxlen: 24
209.35.237.0/24 maxlen: 24
209.35.238.0/24 maxlen: 24
209.35.239.0/24 maxlen: 24
209.35.240.0/24 maxlen: 24
209.35.241.0/24 maxlen: 24
209.35.242.0/24 maxlen: 24
209.35.243.0/24 maxlen: 24
209.35.244.0/24 maxlen: 24
209.35.245.0/24 maxlen: 24
209.35.246.0/24 maxlen: 24
209.35.247.0/24 maxlen: 24
209.35.248.0/24 maxlen: 24
209.35.249.0/24 maxlen: 24
209.35.250.0/24 maxlen: 24
209.35.251.0/24 maxlen: 24
209.35.252.0/24 maxlen: 24
209.35.253.0/24 maxlen: 24
209.35.254.0/24 maxlen: 24
209.35.255.0/24 maxlen: 24
212.59.64.0/24 maxlen: 24
212.59.65.0/24 maxlen: 24
212.59.66.0/24 maxlen: 24
212.59.67.0/24 maxlen: 24
212.59.68.0/24 maxlen: 24
212.59.69.0/24 maxlen: 24
212.59.70.0/24 maxlen: 24
212.59.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:f6:4f:ef:83:d7:85:f0:ee:f6:11:82:c9:17:63:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Aug 19 12:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93557e8cbc98c05cdcc6a13d23c5a71859518629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:2d:cd:63:4c:54:b6:82:82:87:cd:69:8f:
bd:79:54:98:3c:55:93:ba:88:40:e0:91:7f:05:e0:
1b:9f:f3:80:85:39:e1:9c:aa:c5:db:cd:1b:0e:19:
b2:6f:d2:99:30:39:0d:29:ba:b3:00:6e:01:fe:73:
32:3a:f7:bd:54:41:7a:16:2f:e5:c6:34:9f:c8:69:
05:e1:e5:a8:35:1d:0b:06:5c:02:e8:f7:c8:00:fe:
80:fa:72:5c:b4:86:62:cf:6c:61:eb:a6:f4:2f:8c:
a5:02:d2:2d:04:0c:9f:55:2e:d2:58:28:69:a6:49:
15:86:f3:27:af:b6:26:b7:70:c3:a8:1e:36:90:85:
0f:09:ff:67:a9:60:a6:dc:f3:17:21:63:d0:a2:52:
97:e9:19:32:e5:7d:4d:2b:ec:c0:a4:f6:00:a4:19:
d1:de:b6:ba:b1:a7:65:43:e0:14:00:cf:da:78:8a:
8f:d8:4a:07:79:25:58:4a:93:4d:1d:fd:fb:78:c1:
91:6c:99:c9:44:53:4c:c3:97:43:f6:db:3a:a6:be:
2c:d3:d5:95:41:3f:f2:77:f8:6f:a5:2b:08:ae:95:
1d:e5:4a:af:f3:c2:63:73:9b:98:51:5e:bd:91:6e:
f0:4f:f5:85:ed:23:2b:eb:73:26:d4:75:3f:d7:aa:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:55:7E:8C:BC:98:C0:5C:DC:C6:A1:3D:23:C5:A7:18:59:51:86:29
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/k1V-jLyYwFzcxqE9I8WnGFlRhik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.128.0/23
209.35.224.0/21
209.35.233.0-209.35.255.255
212.59.64.0/21
Signature Algorithm: sha256WithRSAEncryption
96:a4:3b:3b:0c:eb:79:25:36:eb:44:6d:71:09:9b:16:82:3e:
ef:a3:bb:83:ad:2b:e3:b3:79:e0:16:1f:7c:fc:12:33:b4:0a:
af:23:fe:c0:c8:d5:6c:99:ca:d8:c0:37:bd:26:dc:30:66:45:
68:d8:fb:04:6d:9e:4d:c2:0f:ac:bd:ca:3c:e8:f2:26:8b:5d:
49:f2:96:ab:f2:8b:97:ca:2a:ed:95:2c:bf:36:85:3c:30:b4:
64:21:07:5a:3f:d4:cc:a4:5e:46:f5:27:18:97:83:0c:d6:b5:
7f:3d:c8:44:bc:fb:34:26:96:8a:d5:81:11:02:2f:7c:f5:37:
6e:da:22:05:88:ea:d2:bf:20:e8:3e:7d:2a:48:c7:38:31:bc:
69:fd:fb:f4:6d:61:a5:d3:9e:b2:d1:f1:f4:9e:cf:2a:c1:c0:
3b:06:33:39:61:c2:ed:aa:20:b8:01:34:ff:7c:24:01:d2:01:
fd:e6:d1:c0:a8:a8:83:2f:55:b1:f9:22:cd:f0:a6:c0:6d:68:
44:8d:2b:d7:32:89:f0:9f:f8:e6:e8:84:e8:dd:82:bc:f2:e5:
b3:ab:ab:32:9b:21:50:89:6e:15:a3:b8:66:d0:d4:0e:8c:7c:
65:d3:2b:7e:73:ec:4e:df:37:82:7d:a7:29:56:42:ae:77:9b:
77:7b:7c:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAZ9k/vg9eF8O72EYLJF2PzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw
MzIyZjkwHhcNMjYwODE5MTIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzU1N2U4Y2JjOThjMDVjZGNjNmExM2QyM2M1YTcxODU5NTE4NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5AtzWNMVLaCgofNaY+9eVSYPFWT
uohA4JF/BeAbn/OAhTnhnKrF280bDhmyb9KZMDkNKbqzAG4B/nMyOve9VEF6Fi/l
xjSfyGkF4eWoNR0LBlwC6PfIAP6A+nJctIZiz2xh66b0L4ylAtItBAyfVS7SWChp
pkkVhvMnr7Ymt3DDqB42kIUPCf9nqWCm3PMXIWPQolKX6Rky5X1NK+zApPYApBnR
3ra6sadlQ+AUAM/aeIqP2EoHeSVYSpNNHf37eMGRbJnJRFNMw5dD9ts6pr4s09WV
QT/yd/hvpSsIrpUd5Uqv88Jjc5uYUV69kW7wT/WF7SMr63Mm1HU/16qD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNVfoy8mMBc3MahPSPFpxhZUYYpMB8GA1UdIwQY
MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt
ZmU0NWQ1MTYwYzM5LzEvazFWLWpMeVl3RnpjeHFFOUk4V25HRmxSaGlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5
LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfAwQBVZuAAwQD
0SPgMAsDBADRI+kDAwLRIAMEA9Q7QDANBgkqhkiG9w0BAQsFAAOCAQEAlqQ7Owzr
eSU260RtcQmbFoI+76O7g60r47N54BYffPwSM7QKryP+wMjVbJnK2MA3vSbcMGZF
aNj7BG2eTcIPrL3KPOjyJotdSfKWq/KLl8oq7ZUsvzaFPDC0ZCEHWj/UzKReRvUn
GJeDDNa1fz3IRLz7NCaWitWBEQIvfPU3btoiBYjq0r8g6D59KkjHODG8af379G1h
pdOestHx9J7PKsHAOwYzOWHC7aoguAE0/3wkAdIB/ebRwKiogy9VsfkizfCmwG1o
RI0r1zKJ8J/45uiE6N2CvPLls6urMpshUIluFaO4ZtDUDox8ZdMrfnPsTt83gn2n
KVZCrnebd3t83Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:12:44 2026 by rpki-client