Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa
File: 7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa (raw, json)
Hash identifier: dRjz/HPxAbIEZD8TfYo3oBDmUxS8I/PLZra+7sLx66k=
Subject key identifier: ED:72:AB:63:AB:11:8B:44:CE:A5:85:48:0B:BD:8B:E1:E4:76:40:C4
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019C6B91A55CA4E6898BD21641118B32FC59
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa
Signing time: Tue 17 Feb 2026 12:27:13 +0000
ROA not before: Tue 17 Feb 2026 12:27:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212810
IP address blocks: 85.115.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:91:a5:5c:a4:e6:89:8b:d2:16:41:11:8b:32:fc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Feb 17 12:27:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed72ab63ab118b44cea585480bbd8be1e47640c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:81:70:3d:bb:02:49:2f:7d:d8:99:d5:34:
06:8c:e7:de:17:77:d0:f0:b8:bf:5f:91:7d:b9:f0:
4c:f4:d1:2b:62:bd:61:78:ec:33:69:95:36:d5:af:
40:05:95:12:fb:47:f3:be:fe:dc:fd:de:5c:ca:2e:
e4:f1:d8:3a:93:27:10:05:d0:25:cf:14:f4:2b:b0:
51:93:70:20:4e:b5:89:74:09:2e:f5:fa:17:d3:2f:
dd:8c:ee:3a:87:dd:4e:c3:55:8f:a3:39:b2:0d:d2:
9b:a4:24:e2:ce:68:78:bd:65:db:39:2f:c9:06:af:
e5:2b:ff:d6:3b:9b:b7:17:9b:d4:a7:b5:5e:9e:0a:
f0:11:94:63:6d:c6:ca:98:f4:b9:97:f2:43:7a:f0:
8d:3f:66:17:54:ea:4c:23:db:55:38:5f:60:14:b3:
65:ee:c3:3a:0c:33:97:d5:c5:50:9e:d5:0a:88:37:
d9:3e:f8:aa:83:2f:d4:d9:ec:90:d4:14:51:ad:c4:
66:14:7e:87:11:c9:d4:39:a0:e0:14:c1:72:6f:cb:
cf:87:e6:98:04:2c:0b:a8:0b:ba:3b:d9:df:f1:3e:
27:53:a2:bb:c4:e3:6b:59:50:45:0d:ae:17:84:fe:
c5:9a:a5:9b:f1:d9:b4:25:2f:37:e2:05:57:35:21:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:72:AB:63:AB:11:8B:44:CE:A5:85:48:0B:BD:8B:E1:E4:76:40:C4
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b3:b8:14:e5:f6:41:43:39:87:2d:32:82:9a:06:64:ee:b7:
1d:2e:7a:09:60:2d:1a:b5:69:54:87:3a:10:f9:11:bc:db:84:
c9:c4:f4:17:ed:fc:09:ca:17:67:b8:5c:fd:a4:0c:19:18:27:
e4:4c:af:ab:ad:cb:f8:49:f0:44:2d:22:8e:b8:75:6a:26:ff:
7d:31:b7:cb:07:ae:de:c9:cb:74:79:28:41:57:e2:df:74:c2:
1b:2b:8f:28:4d:7b:51:4f:55:11:b7:39:d3:4c:a2:e6:a9:b3:
da:62:39:f6:fc:d3:d9:01:11:7a:22:bf:b7:d2:3e:65:ee:39:
40:32:42:c9:0b:27:e9:f5:d9:45:d1:f7:02:1a:fc:a5:04:c2:
46:eb:40:7d:82:69:70:13:e4:5a:d9:6f:dd:2c:43:2e:7c:12:
ce:a6:d2:53:25:7e:1e:f4:a5:05:a2:3f:e7:e0:2d:7f:a9:27:
c8:7a:b4:a1:53:f7:df:1a:6b:c6:db:61:a1:ef:89:a4:b9:c7:
76:a7:68:9d:3a:d6:ff:60:55:7a:80:73:7b:a0:8e:de:a3:83:
3c:f3:bf:7b:bb:2e:50:94:ae:63:78:fe:48:46:e9:40:eb:56:
2b:23:2b:bc:85:6a:08:2a:57:0b:e8:99:f6:00:2e:11:e3:f1:
14:80:bb:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxrkaVcpOaJi9IWQRGLMvxZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjYwMjE3MTIyNzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDcyYWI2M2FiMTE4YjQ0Y2VhNTg1NDgwYmJkOGJlMWU0NzY0MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTOBcD27AkkvfdiZ1TQGjOfeF3fQ
8Li/X5F9ufBM9NErYr1heOwzaZU21a9ABZUS+0fzvv7c/d5cyi7k8dg6kycQBdAl
zxT0K7BRk3AgTrWJdAku9foX0y/djO46h91Ow1WPozmyDdKbpCTizmh4vWXbOS/J
Bq/lK//WO5u3F5vUp7VengrwEZRjbcbKmPS5l/JDevCNP2YXVOpMI9tVOF9gFLNl
7sM6DDOX1cVQntUKiDfZPviqgy/U2eyQ1BRRrcRmFH6HEcnUOaDgFMFyb8vPh+aY
BCwLqAu6O9nf8T4nU6K7xONrWVBFDa4XhP7FmqWb8dm0JS834gVXNSF4rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO1yq2OrEYtEzqWFSAu9i+HkdkDEMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvN1hLclk2c1JpMFRPcFlWSUM3Mkw0ZVIyUU1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXPRMA0G
CSqGSIb3DQEBCwUAA4IBAQCzs7gU5fZBQzmHLTKCmgZk7rcdLnoJYC0atWlUhzoQ
+RG824TJxPQX7fwJyhdnuFz9pAwZGCfkTK+rrcv4SfBELSKOuHVqJv99MbfLB67e
yct0eShBV+LfdMIbK48oTXtRT1URtznTTKLmqbPaYjn2/NPZARF6Ir+30j5l7jlA
MkLJCyfp9dlF0fcCGvylBMJG60B9gmlwE+Ra2W/dLEMufBLOptJTJX4e9KUFoj/n
4C1/qSfIerShU/ffGmvG22Gh74mkucd2p2idOtb/YFV6gHN7oI7eo4M88797uy5Q
lK5jeP5IRulA61YrIyu8hWoIKlcL6Jn2AC4R4/EUgLu0
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:57:18 2026 by rpki-client