Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/2DbjHSUwlXHwshGkPAwHYUTqrd4.roa
File: 2DbjHSUwlXHwshGkPAwHYUTqrd4.roa (raw, json)
Hash identifier: X0omfDVbDnARiB6xE7Kw8fWfa+19rzpEcOQw7IbiZEU=
Subject key identifier: D8:36:E3:1D:25:30:95:71:F0:B2:11:A4:3C:0C:07:61:44:EA:AD:DE
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398248A215A3CE40C66CA16CFD7AF022
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/2DbjHSUwlXHwshGkPAwHYUTqrd4.roa
Signing time: Tue 25 Aug 2026 15:20:34 +0000
ROA not before: Tue 25 Aug 2026 15:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 85.8.144.0/23 maxlen: 24
85.8.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:48:a2:15:a3:ce:40:c6:6c:a1:6c:fd:7a:f0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d836e31d25309571f0b211a43c0c076144eaadde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:01:bf:5d:9f:df:88:27:c0:c5:7c:62:0c:
f6:e1:7e:e9:98:18:fe:85:70:aa:ff:0e:89:7f:9e:
00:bf:04:a6:85:56:bd:45:f3:40:09:16:ab:0a:d2:
ad:f8:02:9d:03:47:ed:64:82:a2:c5:d8:cc:6b:6a:
52:d4:16:49:91:75:97:3d:0d:e9:1d:56:1e:61:e0:
33:06:42:a4:cf:50:9c:70:4d:42:5e:24:91:49:f6:
6a:13:fd:06:6d:1e:fb:c5:f5:38:b2:86:72:4b:c8:
a0:b5:a7:f1:92:60:6a:65:ee:2a:64:6a:5d:5e:5a:
1a:01:87:42:3e:c7:eb:61:2b:02:6a:ec:40:a9:0b:
6b:a8:e2:5e:7d:de:9a:2b:39:b6:5a:8c:48:1e:ed:
b8:3d:f1:18:f1:30:27:56:44:30:0a:9c:12:1b:a2:
cb:fb:5b:f6:c3:8a:5c:31:c0:9b:f2:c5:7c:7e:a4:
85:10:59:3a:f4:81:48:a4:08:68:1f:93:30:ae:f3:
e0:e4:79:c3:b7:02:50:62:76:e1:28:5d:41:ac:c0:
4d:3c:93:f5:9a:0d:09:b1:ca:7f:66:4a:f5:5f:9e:
43:19:20:71:bc:e2:a1:2b:d2:b1:81:a4:d9:ba:8c:
8e:54:fc:91:03:83:ad:91:ab:56:34:2e:34:16:da:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:36:E3:1D:25:30:95:71:F0:B2:11:A4:3C:0C:07:61:44:EA:AD:DE
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/2DbjHSUwlXHwshGkPAwHYUTqrd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
55:20:92:f3:c7:7a:89:ab:eb:cf:59:8a:d0:a0:f7:31:6b:81:
0c:91:ad:e5:65:96:26:a2:72:66:dd:3e:f9:eb:7e:1b:95:30:
fc:42:ae:12:62:7a:7e:79:91:af:d2:db:e9:d8:1d:20:6f:4f:
36:3d:50:30:8e:74:b4:b9:d5:cf:ce:b1:c8:d7:43:21:4a:39:
04:98:9b:ab:6a:8b:5a:b9:f2:17:0d:80:52:4f:10:ce:2d:b4:
90:22:2e:25:a0:72:67:d2:be:54:2b:89:02:6b:0b:30:8a:44:
a5:2d:ea:1d:05:aa:42:c7:e4:a3:b6:f6:a4:51:84:85:44:90:
d0:59:c2:e8:e5:f0:4c:ea:38:80:42:4d:3b:e9:73:76:24:07:
b7:78:99:66:76:14:fc:44:e6:58:f8:27:62:b8:ba:ea:d1:04:
11:35:9c:12:95:61:47:57:0f:b4:a5:3a:a9:1c:c9:19:8a:1d:
ff:56:22:32:55:f1:61:fc:22:77:88:9f:3f:2f:39:63:d8:a6:
fc:3f:53:1a:04:f1:fa:69:1d:75:08:eb:96:06:cb:90:85:81:
62:31:68:94:cf:56:2a:97:71:d4:5f:7c:3a:1f:a9:c6:0a:cb:
dd:4d:c0:2a:fc:52:e5:fc:a4:24:1a:4f:c3:aa:83:d2:3d:04:
40:08:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:27 2026 by rpki-client