Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/yD8rwCazGURL-qhAc90jhAEwq9o.roa
File: yD8rwCazGURL-qhAc90jhAEwq9o.roa (raw, json)
Hash identifier: LHXN8XxzRdzCYAz40QAs++VkNLHiQdmdvZb4XlWWfGw=
Subject key identifier: C8:3F:2B:C0:26:B3:19:44:4B:FA:A8:40:73:DD:23:84:01:30:AB:DA
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019C93E72E07F8DED9ACB42CF5C395906976
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/yD8rwCazGURL-qhAc90jhAEwq9o.roa
Signing time: Wed 25 Feb 2026 08:25:27 +0000
ROA not before: Wed 25 Feb 2026 08:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
85.115.210.0/24 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:e7:2e:07:f8:de:d9:ac:b4:2c:f5:c3:95:90:69:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Feb 25 08:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c83f2bc026b319444bfaa84073dd23840130abda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:24:8b:db:61:fb:07:ea:57:87:23:64:3e:
c9:96:c8:38:3c:7b:39:cd:51:bf:98:f8:79:63:f0:
9a:4e:40:57:e7:eb:32:25:75:c9:33:bf:22:fd:8a:
84:89:00:f3:d6:fa:f2:dd:a1:15:b8:d1:4f:62:b4:
b2:29:0a:3d:a5:47:c0:1c:93:12:27:68:44:b0:fd:
e9:21:15:65:cc:af:a1:78:fa:fa:6a:bb:61:1e:af:
c4:f7:75:46:4f:b5:6f:78:bc:32:3b:79:95:a3:4c:
ec:79:b7:d4:cf:95:99:2e:1c:04:32:2f:76:9b:a8:
82:3f:5d:1e:61:55:5c:80:54:70:db:2f:7d:0b:81:
5c:19:63:28:87:dc:a9:6a:02:d8:d1:69:92:dd:c0:
c2:5c:b8:ae:ae:8e:a3:0c:1d:47:53:36:7c:4a:bf:
ea:99:ea:7f:10:5e:39:a7:74:f3:1d:87:cf:02:aa:
79:c4:01:76:d9:21:ff:d9:65:d5:68:cd:0a:45:aa:
5c:67:58:4e:c1:c5:89:d7:27:36:e0:6e:ee:93:25:
c5:f2:f8:56:55:b8:e9:01:63:cf:dd:29:89:16:1a:
18:8b:02:ea:f7:f5:13:00:d2:3d:0b:78:a5:36:59:
08:40:2c:84:0d:3f:d4:36:30:44:d9:e3:98:29:d6:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3F:2B:C0:26:B3:19:44:4B:FA:A8:40:73:DD:23:84:01:30:AB:DA
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/yD8rwCazGURL-qhAc90jhAEwq9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.84.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
a2:19:02:83:03:3c:22:0a:fb:d7:34:d4:6b:d4:2a:40:9f:e2:
fe:7a:b7:dc:d0:ed:bd:1f:8b:ab:d2:6e:e2:f7:cb:2c:09:30:
56:4c:5c:3f:11:c8:9b:20:1d:15:0d:9f:f0:89:a8:a9:f0:59:
68:fc:6a:5f:05:2f:85:2b:11:e9:9e:09:c7:76:64:20:13:0c:
f9:97:c4:97:6a:cc:7c:99:78:d9:d1:e3:94:47:1e:54:6f:5d:
53:9d:9e:7c:25:b3:5d:5b:1c:8f:ab:91:8a:62:10:2c:e9:76:
1d:12:90:c6:7e:63:ec:06:0a:bf:7a:27:eb:e3:8a:79:c4:5e:
fc:31:06:7a:10:3d:94:24:a1:74:5e:82:7f:ac:cd:a2:e3:ae:
fd:69:6b:3a:40:a9:a2:d6:a4:ef:86:09:8a:e9:5f:36:e5:ef:
7a:d7:0d:8c:c0:a4:3d:32:dd:8f:43:8c:58:ad:12:44:bb:6e:
e0:18:3e:0c:1f:37:63:10:54:d5:81:8e:64:92:e9:5f:59:5d:
bf:b7:ee:f2:10:f4:e6:83:f2:01:07:97:e1:54:66:1f:1d:89:
65:e1:38:5d:77:97:8e:d5:0e:38:31:cd:dc:c3:31:52:4c:fb:
3f:f1:00:96:19:bc:11:fd:20:de:be:6d:dc:11:41:b2:f5:e0:
4c:36:e0:d8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyT5y4H+N7ZrLQs9cOVkGl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjYwMjI1MDgyNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODNmMmJjMDI2YjMxOTQ0NGJmYWE4NDA3M2RkMjM4NDAxMzBhYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDoki9th+wfqV4cjZD7Jlsg4PHs5
zVG/mPh5Y/CaTkBX5+syJXXJM78i/YqEiQDz1vry3aEVuNFPYrSyKQo9pUfAHJMS
J2hEsP3pIRVlzK+hePr6arthHq/E93VGT7VveLwyO3mVo0zsebfUz5WZLhwEMi92
m6iCP10eYVVcgFRw2y99C4FcGWMoh9ypagLY0WmS3cDCXLiuro6jDB1HUzZ8Sr/q
mep/EF45p3TzHYfPAqp5xAF22SH/2WXVaM0KRapcZ1hOwcWJ1yc24G7ukyXF8vhW
VbjpAWPP3SmJFhoYiwLq9/UTANI9C3ilNlkIQCyEDT/UNjBE2eOYKdbwbQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMg/K8AmsxlES/qoQHPdI4QBMKvaMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEveUQ4cndDYXpHVVJMLXFoQWM5MGpoQUV3cTlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQCVXPQMAwD
BALVkUQDBATVkUAwDAMEAtWRVAMEAdWRWDANBgkqhkiG9w0BAQsFAAOCAQEAohkC
gwM8Igr71zTUa9QqQJ/i/nq33NDtvR+Lq9Ju4vfLLAkwVkxcPxHImyAdFQ2f8Imo
qfBZaPxqXwUvhSsR6Z4Jx3ZkIBMM+ZfEl2rMfJl42dHjlEceVG9dU52efCWzXVsc
j6uRimIQLOl2HRKQxn5j7AYKv3on6+OKecRe/DEGehA9lCShdF6Cf6zNouOu/Wlr
OkCpotak74YJiulfNuXvetcNjMCkPTLdj0OMWK0SRLtu4Bg+DB83YxBU1YGOZJLp
X1ldv7fu8hD05oPyAQeX4VRmHx2JZeE4XXeXjtUOODHN3MMxUkz7P/EAlhm8Ef0g
3r5t3BFBsvXgTDbg2A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:03 2026 by rpki-client