Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/28g9nXSe3fufos3ZUxqrlnIFYeU.roa
File: 28g9nXSe3fufos3ZUxqrlnIFYeU.roa (raw, json)
Hash identifier: ZO7dnI46uSopd92fY8fDfvWj2+EVVO1sfN1+TTTD7z4=
Subject key identifier: DB:C8:3D:9D:74:9E:DD:FB:9F:A2:CD:D9:53:1A:AB:96:72:05:61:E5
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823CC9A451101D7CC1069ADBD4DED6
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/28g9nXSe3fufos3ZUxqrlnIFYeU.roa
Signing time: Tue 25 Aug 2026 15:20:31 +0000
ROA not before: Tue 25 Aug 2026 15:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51559
IP address blocks: 85.235.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3c:c9:a4:51:10:1d:7c:c1:06:9a:db:d4:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbc83d9d749eddfb9fa2cdd9531aab96720561e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:f3:44:3f:ed:1e:29:78:67:85:cb:b3:3f:
65:ce:04:5b:6c:34:07:10:fc:94:74:25:b4:7c:8d:
7b:18:07:ef:80:37:b1:24:45:70:7b:6a:f0:3f:e0:
fd:06:69:f9:91:86:b1:be:1a:0d:fc:b6:f9:93:ba:
2b:24:73:38:bf:25:76:7f:42:21:f2:a6:d1:18:34:
32:9f:82:24:60:30:33:fe:0e:d0:de:bb:e3:3e:55:
7f:f9:59:53:9f:70:93:75:a1:6d:5b:8f:37:38:18:
6c:17:60:19:65:c4:fa:61:24:f4:26:76:f5:78:b7:
98:b6:84:45:17:c4:15:24:94:d9:4c:ea:e5:e7:da:
3f:f5:17:2e:59:22:51:6e:bf:47:63:66:ea:1c:fa:
9b:54:a5:27:62:de:8c:2f:c0:4f:5f:30:ca:98:82:
89:0e:ed:b5:69:39:2d:00:3c:c7:bd:03:54:85:a6:
69:74:c0:89:36:ab:41:de:a2:d8:66:5f:35:8f:72:
65:b9:4a:e8:c2:13:ea:3c:f3:ad:1e:51:5e:ec:d3:
89:39:a6:72:55:49:2b:b9:c0:07:1c:02:4e:91:c0:
3d:e0:93:1e:42:65:54:4c:25:1a:e4:fa:c4:33:76:
cd:b6:6c:c4:f0:9c:b2:b5:65:a6:d2:05:4a:8f:6b:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C8:3D:9D:74:9E:DD:FB:9F:A2:CD:D9:53:1A:AB:96:72:05:61:E5
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/28g9nXSe3fufos3ZUxqrlnIFYeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.72.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7a:aa:c3:db:a3:9a:3b:34:e1:ae:ea:ed:aa:f0:59:eb:3c:
b0:05:87:29:41:4b:46:8b:39:af:f9:3b:30:91:d2:da:79:4e:
f0:38:bd:2a:06:ce:87:15:04:9d:54:f2:92:ca:44:04:2c:75:
f2:65:39:ae:44:ab:79:1d:de:c9:96:d1:58:5c:5c:8d:08:33:
ee:1c:dc:d1:d2:fa:74:c3:95:c9:ab:4a:cf:25:d8:6c:d3:fb:
68:49:06:0c:6a:8e:bb:bb:18:aa:cf:c5:b1:b7:4e:a0:c2:8b:
7e:8d:be:b6:16:bb:75:e8:a4:87:d5:e2:18:e4:cb:ec:25:29:
f2:48:c4:b4:41:b9:6b:77:d8:28:a6:7a:f4:e3:de:45:26:cd:
c1:36:4e:12:45:2c:eb:12:d4:22:e7:83:8f:1f:a7:a4:57:d0:
6d:81:57:99:95:68:85:7e:15:47:82:8e:57:8c:06:8c:27:f2:
5b:c9:95:a4:c4:ea:b5:38:da:cf:15:db:d2:26:e1:1f:85:44:
00:ca:20:41:d1:69:ca:7f:52:10:c1:ed:8a:ec:07:71:2a:e3:
5c:d5:fc:59:cc:e0:94:5a:64:8c:1a:c5:94:42:57:47:3e:a7:
ac:88:98:12:76:c4:57:3b:4a:96:de:12:1d:31:5e:0b:d5:e9:
8b:b6:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:11 2026 by rpki-client