Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/6-jA23JEZnyW7JD7dh5Cr3I7YdI.roa
File: 6-jA23JEZnyW7JD7dh5Cr3I7YdI.roa (raw, json)
Hash identifier: 6Ll9lIKrH1VWC3Mj4sic280zbKj3rFV9ip4lmMDykt4=
Subject key identifier: EB:E8:C0:DB:72:44:66:7C:96:EC:90:FB:76:1E:42:AF:72:3B:61:D2
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823284E71904A9F142561CC5A0D5C2
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/6-jA23JEZnyW7JD7dh5Cr3I7YdI.roa
Signing time: Tue 25 Aug 2026 15:20:28 +0000
ROA not before: Tue 25 Aug 2026 15:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 85.8.144.0/23 maxlen: 24
85.8.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:32:84:e7:19:04:a9:f1:42:56:1c:c5:a0:d5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebe8c0db7244667c96ec90fb761e42af723b61d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:8a:8e:01:4f:cc:e5:cd:a2:9b:af:bd:97:
2a:a0:2c:bd:f2:7c:d0:4d:0e:4c:90:df:a5:30:f9:
3c:62:8c:45:54:d7:91:b8:3d:96:af:81:19:07:aa:
fe:83:f5:47:b0:cb:04:92:1d:9a:5e:cb:6d:9a:19:
70:be:52:3b:37:84:7a:f4:b6:61:b3:91:16:ef:0c:
20:08:0f:1a:97:85:69:ee:88:e2:29:86:5b:82:4b:
31:01:6c:8e:63:86:fb:82:52:ee:e5:4f:46:ba:f0:
59:66:c7:98:98:98:c5:59:8d:15:0b:28:73:d2:3d:
3e:25:c7:f9:60:0d:ff:a3:33:f5:99:ed:b6:e4:be:
70:42:7c:58:44:a4:69:21:8f:53:bc:e7:ef:ea:c6:
42:52:97:69:51:ca:a0:2d:af:27:b2:87:18:8b:80:
ac:35:74:77:3a:7f:3e:8e:42:77:4f:f5:ab:a8:12:
13:09:e1:10:be:75:c9:d2:16:0b:c4:49:ff:80:c4:
9d:d9:f3:80:02:4f:5d:6e:54:00:1a:aa:3b:4f:e1:
49:f3:4f:4a:51:1b:3d:f9:25:98:f9:17:40:b5:0a:
61:b8:8c:fc:87:f5:8b:43:0c:fa:e6:de:1a:8b:98:
bc:2c:f4:ca:02:b7:e3:d7:b4:fe:c9:cd:05:80:5d:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E8:C0:DB:72:44:66:7C:96:EC:90:FB:76:1E:42:AF:72:3B:61:D2
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/6-jA23JEZnyW7JD7dh5Cr3I7YdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:53:3f:a0:7f:f8:d4:90:2f:cf:b1:76:e3:44:5b:1f:5e:72:
10:fc:91:36:d0:a1:2b:de:69:c7:e1:bc:d6:5e:78:f8:c7:73:
42:a8:41:4b:79:09:7e:ee:09:c5:85:15:6b:49:79:24:97:4a:
6e:32:e4:5c:1f:24:54:b7:1c:ea:24:e7:0c:c3:50:21:95:d4:
73:ca:bb:5b:18:80:98:e2:df:c0:d6:b6:01:74:f4:4a:2d:d6:
9c:16:91:02:a9:24:e6:2e:17:c7:b7:12:cb:6e:cb:04:27:e9:
e1:e5:37:da:66:f2:8e:fc:60:ba:bd:7e:8a:e7:b3:05:c4:5b:
b3:56:2a:97:05:05:68:51:f0:16:23:0c:6d:1a:70:0c:9a:b1:
15:06:5f:16:5c:f6:81:05:6b:e0:87:cf:3d:44:55:f1:31:d8:
d2:fa:64:f3:e0:1f:ed:cf:c3:37:7f:f3:50:bc:d9:73:8b:5d:
c2:ed:43:4f:96:ef:dc:60:74:a7:43:78:a2:34:43:ea:ea:7d:
39:2e:3c:12:57:bc:e8:b1:7f:03:d7:fd:4b:79:14:73:37:50:
0f:05:30:90:92:fd:98:2b:ad:76:3b:33:ca:8b:72:a7:91:b7:
b7:53:10:e4:0c:28:64:45:be:d9:5d:8a:f7:5e:45:89:58:7c:
57:fa:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:46 2026 by rpki-client