Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/DNO1I-TkpArSeHYJmcY4l5DFhts.roa
File: DNO1I-TkpArSeHYJmcY4l5DFhts.roa (raw, json)
Hash identifier: cJ58Vzw7QL+cL/8OgW9JpclMRUS3i5GfX5DaYn+9oUA=
Subject key identifier: 0C:D3:B5:23:E4:E4:A4:0A:D2:78:76:09:99:C6:38:97:90:C5:86:DB
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019EB199DE33BB30239C5DB53B0552DFFD27
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/DNO1I-TkpArSeHYJmcY4l5DFhts.roa
Signing time: Wed 10 Jun 2026 12:55:11 +0000
ROA not before: Wed 10 Jun 2026 12:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29555
IP address blocks: 85.117.96.0/24 maxlen: 24
85.117.97.0/24 maxlen: 24
85.117.98.0/24 maxlen: 24
85.117.99.0/24 maxlen: 24
85.117.100.0/24 maxlen: 24
85.117.101.0/24 maxlen: 24
85.117.102.0/24 maxlen: 24
85.117.103.0/24 maxlen: 24
85.117.104.0/24 maxlen: 24
85.117.105.0/24 maxlen: 24
85.117.106.0/24 maxlen: 24
85.117.107.0/24 maxlen: 24
85.117.108.0/24 maxlen: 24
85.117.109.0/24 maxlen: 24
85.117.110.0/24 maxlen: 24
85.117.111.0/24 maxlen: 24
85.117.112.0/24 maxlen: 24
85.117.113.0/24 maxlen: 24
85.117.114.0/24 maxlen: 24
85.117.115.0/24 maxlen: 24
85.117.116.0/24 maxlen: 24
85.117.117.0/24 maxlen: 24
85.117.118.0/24 maxlen: 24
85.117.119.0/24 maxlen: 24
85.117.120.0/24 maxlen: 24
85.117.121.0/24 maxlen: 24
85.117.122.0/24 maxlen: 24
85.117.123.0/24 maxlen: 24
85.117.124.0/24 maxlen: 24
85.117.125.0/24 maxlen: 24
85.117.126.0/24 maxlen: 24
85.117.127.0/24 maxlen: 24
185.57.72.0/24 maxlen: 24
185.57.73.0/24 maxlen: 24
185.57.74.0/24 maxlen: 24
185.57.75.0/24 maxlen: 24
217.76.64.0/24 maxlen: 24
217.76.65.0/24 maxlen: 24
217.76.68.0/24 maxlen: 24
217.76.69.0/24 maxlen: 24
217.76.71.0/24 maxlen: 24
217.76.72.0/24 maxlen: 24
217.76.73.0/24 maxlen: 24
217.76.74.0/24 maxlen: 24
217.76.75.0/24 maxlen: 24
217.76.76.0/24 maxlen: 24
217.76.77.0/24 maxlen: 24
217.76.78.0/24 maxlen: 24
217.76.79.0/24 maxlen: 24
2a03:32c0::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:a::/48 maxlen: 48
2a03:32c0:b::/48 maxlen: 48
2a03:32c0:c::/48 maxlen: 48
2a03:32c0:d::/48 maxlen: 48
2a03:32c0:16::/48 maxlen: 48
2a03:32c0:17::/48 maxlen: 48
2a03:32c0:18::/48 maxlen: 48
2a03:32c0:27::/48 maxlen: 48
2a03:32c0:28::/48 maxlen: 48
2a03:32c0:29::/48 maxlen: 48
2a03:32c0:2a::/48 maxlen: 48
2a03:32c0:2b::/48 maxlen: 48
2a03:32c0:2c::/48 maxlen: 48
2a03:32c0:2d::/48 maxlen: 48
2a03:32c0:2e::/48 maxlen: 48
2a03:32c0:2f::/48 maxlen: 48
2a03:32c0:30::/48 maxlen: 48
2a03:32c0:31::/48 maxlen: 48
2a03:32c0:32::/48 maxlen: 48
2a03:32c0:33::/48 maxlen: 48
2a03:32c0:34::/48 maxlen: 48
2a03:32c0:35::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:3006::/48 maxlen: 48
2a03:32c0:3007::/48 maxlen: 48
2a03:32c0:300a::/48 maxlen: 48
2a03:32c0:300b::/48 maxlen: 48
2a03:32c0:300c::/48 maxlen: 48
2a03:32c0:300d::/48 maxlen: 48
2a03:32c0:300e::/48 maxlen: 48
2a03:32c0:300f::/48 maxlen: 48
2a03:32c0:3010::/48 maxlen: 48
2a03:32c0:3011::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:99:de:33:bb:30:23:9c:5d:b5:3b:05:52:df:fd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jun 10 12:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cd3b523e4e4a40ad278760999c6389790c586db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:72:a2:e6:86:58:db:79:07:f9:07:a0:0c:
48:d7:fd:f0:ce:35:ae:75:5f:40:95:6d:b7:62:61:
22:94:89:c5:3c:1d:c5:ab:93:5f:5d:0c:77:d2:22:
41:eb:f7:3b:4d:46:17:71:73:37:38:7b:18:1c:7c:
b3:d7:97:71:09:a5:0d:bf:d3:ab:1a:15:d9:aa:7a:
29:4d:94:d6:6f:5e:cb:84:49:a2:1b:6c:77:cf:01:
12:aa:29:08:01:c7:43:e0:74:46:39:15:18:12:ea:
f8:8c:9b:b4:c1:af:7c:c1:17:87:c1:b7:00:fe:45:
05:4f:e3:02:f0:a9:51:d6:35:92:44:ac:90:d3:ba:
cd:0d:fb:fd:37:af:bc:e6:eb:79:2c:0d:9e:68:c6:
24:22:3a:b5:8b:f4:75:a7:99:0d:2e:f1:f8:d6:1b:
6b:67:78:33:b3:da:00:2e:fb:d6:be:47:4a:57:0a:
3c:cc:36:2c:f4:14:ea:3c:91:b7:ee:94:4d:09:e0:
78:04:08:8a:1c:db:7b:b9:f7:fc:ae:f7:2d:9f:fc:
19:65:56:ea:3e:2e:7e:4f:3c:b4:be:91:57:52:a1:
d3:de:4b:37:bd:41:21:16:03:66:01:d7:dd:fe:74:
49:9a:fb:6f:07:da:5e:4b:14:74:6d:11:e5:15:21:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D3:B5:23:E4:E4:A4:0A:D2:78:76:09:99:C6:38:97:90:C5:86:DB
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/DNO1I-TkpArSeHYJmcY4l5DFhts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.96.0/19
185.57.72.0/22
217.76.64.0/23
217.76.68.0/23
217.76.71.0-217.76.79.255
IPv6:
2a03:32c0::/45
2a03:32c0:a::-2a03:32c0:d:ffff:ffff:ffff:ffff:ffff
2a03:32c0:16::-2a03:32c0:18:ffff:ffff:ffff:ffff:ffff
2a03:32c0:27::-2a03:32c0:35:ffff:ffff:ffff:ffff:ffff
2a03:32c0:3000::/45
2a03:32c0:300a::-2a03:32c0:3011:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
da:92:c3:18:d1:a7:9c:dc:e0:79:09:67:f5:b9:38:57:f5:a8:
9a:de:ae:3b:36:b3:fb:f4:10:36:30:34:6f:5d:30:ea:57:b3:
55:ab:90:a7:43:ac:8e:a6:8a:67:aa:9c:dd:0c:46:0b:d5:b6:
40:18:a7:eb:d0:cc:22:17:7f:c9:b2:0e:40:18:bd:3a:c9:30:
47:cd:b3:15:d4:df:c8:6e:59:9b:02:cf:fa:8a:f2:e4:13:88:
e2:a6:48:4d:bf:68:2a:fe:2b:7e:46:3f:b2:96:08:8a:d8:52:
73:21:54:d2:c9:50:34:3d:28:4a:47:75:e8:c4:f9:f1:d9:72:
11:cd:86:b9:ad:49:d7:f8:a0:b2:50:b7:ab:5f:50:80:94:57:
72:89:a6:e1:a1:f9:13:a4:f5:8a:32:66:72:d6:98:ae:91:c1:
eb:4f:80:59:62:a1:47:fe:d8:19:ca:b1:cc:9c:f8:d0:c7:51:
7a:6a:f2:a5:a8:4d:65:00:c5:f8:57:6e:b8:2a:38:11:dd:a9:
ff:e1:a8:43:82:77:d6:00:23:1c:e0:29:b5:09:4e:fb:06:bb:
11:82:65:93:ff:2e:cb:72:9b:13:44:1e:33:d3:fb:46:98:21:
82:7f:37:3f:b7:90:95:6f:31:42:0f:d8:ac:f7:6e:ec:05:5a:
af:e2:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:16:51 2026 by rpki-client