Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/iJNQovLoRefx5Mm_3avyRPpMJMc.roa
File: iJNQovLoRefx5Mm_3avyRPpMJMc.roa (raw, json)
Hash identifier: 5MZjWRkfQWgenp7qvcN7k+A/OGLfbaaZJl0BI/15bB8=
Subject key identifier: 88:93:50:A2:F2:E8:45:E7:F1:E4:C9:BF:DD:AB:F2:44:FA:4C:24:C7
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A0B370C501BBAC75FEAACBB9823C799978
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/iJNQovLoRefx5Mm_3avyRPpMJMc.roa
Signing time: Fri 18 Sep 2026 07:35:07 +0000
ROA not before: Fri 18 Sep 2026 07:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
85.115.210.0/24 maxlen: 24
85.115.211.0/24 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.70.0/24 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.72.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:70:c5:01:bb:ac:75:fe:aa:cb:b9:82:3c:79:99:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 18 07:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=889350a2f2e845e7f1e4c9bfddabf244fa4c24c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:9f:58:11:c5:e2:f3:bd:d3:79:be:8f:c4:
ec:1c:06:29:09:08:75:52:36:f1:2c:a1:9b:81:54:
a5:58:a0:0c:f0:59:84:21:3a:b2:02:2d:d7:c8:c8:
7e:9d:02:12:42:7d:31:67:54:c3:45:36:e4:1e:75:
79:d8:59:3c:31:ed:72:89:6a:a3:8e:20:52:11:32:
b6:4a:f2:37:3e:99:aa:11:33:ce:c4:ed:ea:9e:76:
3c:f5:80:9e:ed:45:99:72:ce:78:ee:0b:ec:83:e1:
7b:cc:bc:61:df:32:62:ed:52:ac:00:c5:0f:f5:ca:
a4:24:ab:8a:96:61:88:8a:a9:f9:25:42:0f:44:a8:
54:d4:a8:c2:47:63:6a:92:4a:50:57:9f:13:a5:01:
18:91:40:10:b8:55:a1:6d:80:b5:a3:fd:ff:e9:05:
83:dd:be:f0:98:e8:8f:15:ff:de:4f:22:94:d3:6b:
1c:5a:f9:b9:30:c2:a9:fa:df:2a:bd:3a:1e:bb:b1:
92:79:6d:07:3e:c5:ee:9e:df:42:fa:cd:1e:24:bd:
ad:ee:b3:d2:9f:76:e5:0d:c1:51:f8:ec:de:34:9d:
ad:4f:43:a0:8e:f2:b2:71:9b:9a:fa:f8:0c:0b:09:
e0:ef:2a:2e:6f:14:28:55:9f:4d:2d:f4:26:ec:91:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:93:50:A2:F2:E8:45:E7:F1:E4:C9:BF:DD:AB:F2:44:FA:4C:24:C7
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/iJNQovLoRefx5Mm_3avyRPpMJMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.84.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
a8:37:44:16:80:b2:3f:01:db:29:3b:34:1e:d0:ef:fc:99:7b:
1a:01:55:c9:bb:6f:de:8c:3f:39:11:b2:fd:7a:25:d4:0b:a7:
84:5d:20:0f:42:7e:85:26:8a:73:ff:73:41:e0:73:38:44:9b:
3c:ab:96:3e:98:30:7e:da:72:ca:03:be:a4:16:a4:6d:0e:55:
87:09:c6:28:84:0e:05:d4:3d:6d:c3:45:74:df:e5:c5:9b:da:
07:bc:b2:20:1f:4a:99:64:ba:fb:96:ff:01:3e:55:f9:0b:91:
fa:06:de:0b:17:ff:52:94:83:e1:61:c9:4a:d1:db:ee:4b:00:
e3:50:2d:02:d3:d3:d3:d5:53:4c:01:55:5c:28:2e:39:bc:cc:
73:80:a4:25:21:e0:42:42:bd:35:05:cd:da:39:ae:66:bd:e9:
39:6f:5a:f5:df:81:e5:90:ff:f5:fa:b9:6f:df:18:b0:4a:2d:
ac:1b:06:ce:1d:00:79:19:d3:90:e4:56:06:5a:48:e9:98:45:
a2:03:c8:9b:2c:ec:64:f4:0a:64:f0:25:d9:0d:ed:e8:d4:19:
1d:9f:da:82:07:a6:0e:30:79:f8:a4:4d:55:c9:ba:30:7e:72:
14:af:8c:58:73:8c:37:28:07:80:95:e4:b5:da:af:5b:7d:4c:
80:33:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:27:52 2026 by rpki-client