Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Q0bqdapowFGs78jmqwWpPRnWv48.roa
File: Q0bqdapowFGs78jmqwWpPRnWv48.roa (raw, json)
Hash identifier: m2FiTh3mH3riRuzQG4/MFJO/L3RtDpsZII9nzBiIjeE=
Subject key identifier: 43:46:EA:75:AA:68:C0:51:AC:EF:C8:E6:AB:05:A9:3D:19:D6:BF:8F
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825896E12B602A476EBE11108AF745
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Q0bqdapowFGs78jmqwWpPRnWv48.roa
Signing time: Tue 25 Aug 2026 15:20:38 +0000
ROA not before: Tue 25 Aug 2026 15:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215645
IP address blocks: 85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:58:96:e1:2b:60:2a:47:6e:be:11:10:8a:f7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4346ea75aa68c051acefc8e6ab05a93d19d6bf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:b7:ea:13:19:78:40:f0:15:d6:c1:00:70:
57:1f:04:25:c7:29:51:a8:d5:15:79:be:c2:1e:ba:
53:66:9f:33:5b:ea:9f:b6:6c:16:8d:dd:c8:3d:2d:
8b:8e:0a:85:0c:a8:25:e0:2c:6e:66:22:f0:8a:c8:
c5:bf:e4:8c:12:67:f7:4b:83:b9:16:87:e5:3b:29:
bb:b1:7b:a2:22:de:39:21:57:a3:cf:e6:cc:b4:37:
dc:95:ec:2a:00:ca:b3:53:9e:2f:7f:19:2b:b1:c4:
f7:30:56:b7:ab:f0:0e:9a:22:54:91:35:d1:df:d1:
03:49:f1:ea:27:0c:36:21:5b:ea:20:7e:ec:80:49:
e3:57:57:09:fb:a3:e1:db:b8:17:d3:aa:ba:a4:9b:
2c:39:14:72:67:3a:23:25:a5:c2:3a:a2:24:94:de:
11:9b:4a:4b:1a:ea:12:a4:ab:c5:26:25:70:94:13:
0a:13:91:24:98:5e:70:a3:e9:0a:e0:1e:99:4e:2b:
f4:e5:e6:07:f2:85:dd:1a:ec:a1:43:a8:c5:73:9a:
a1:38:99:37:89:27:81:af:d7:79:d0:e9:9b:d9:c4:
4d:71:5c:e1:10:a6:f7:0c:a9:23:4d:c1:7f:d1:ad:
91:1b:9f:3c:01:af:a6:30:f6:66:f1:9a:8f:53:86:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:46:EA:75:AA:68:C0:51:AC:EF:C8:E6:AB:05:A9:3D:19:D6:BF:8F
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Q0bqdapowFGs78jmqwWpPRnWv48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.73.0-85.235.74.255
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
64:be:24:a0:76:2d:bf:4f:43:25:07:a6:e9:cc:b2:a0:62:10:
86:98:56:1d:28:74:3a:19:1a:e7:51:e9:1d:66:11:34:3c:a3:
e1:51:67:7a:6c:77:71:5b:59:98:6c:e8:80:5f:7b:8c:4c:3b:
03:5b:31:4a:e8:7a:f7:e1:64:56:84:26:e7:21:84:1b:10:64:
30:5c:3d:a5:f5:c9:e1:95:fa:fb:b1:68:03:1e:04:4d:f7:66:
45:1a:98:fe:2a:1a:3d:7e:66:03:79:0d:7d:e4:0a:07:38:fe:
2b:0b:70:40:76:46:52:ce:24:de:28:91:f2:f1:71:13:05:c3:
7f:c3:36:4d:eb:be:da:d9:f5:07:f0:ce:b4:7d:bb:a7:ac:82:
db:d2:a8:f0:66:bc:f4:bb:ee:17:e7:7d:a8:33:0e:30:77:59:
39:b2:24:1c:ef:dc:47:b1:e0:18:d1:20:0b:f8:63:af:cc:ec:
fb:6e:34:82:dc:77:a2:6e:2c:ec:77:2b:ff:98:2e:16:3d:61:
f6:5f:f2:c2:78:4e:f1:a9:3a:f8:9e:51:57:e1:36:cf:e6:3e:
2b:6a:c1:12:22:b4:56:aa:91:d1:cf:80:f2:4e:0c:32:76:97:
8c:8b:16:5f:b9:94:19:ae:e1:99:09:81:84:20:05:f9:c4:b5:
e3:3b:c9:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:29 2026 by rpki-client