Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/bkF7LDUvGnMPLYn5VfgWsZvPR1A.roa
File: bkF7LDUvGnMPLYn5VfgWsZvPR1A.roa (raw, json)
Hash identifier: 1F0EI57KDpsfQACebgklMwY0f4qAVIx2tWFDGKAsZz4=
Subject key identifier: 6E:41:7B:2C:35:2F:1A:73:0F:2D:89:F9:55:F8:16:B1:9B:CF:47:50
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824BCCC4F7C2290F1C1FE5D5BBFC51
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/bkF7LDUvGnMPLYn5VfgWsZvPR1A.roa
Signing time: Tue 25 Aug 2026 15:20:35 +0000
ROA not before: Tue 25 Aug 2026 15:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206592
IP address blocks: 85.235.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:4b:cc:c4:f7:c2:29:0f:1c:1f:e5:d5:bb:fc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e417b2c352f1a730f2d89f955f816b19bcf4750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:af:aa:54:e7:2c:01:c2:26:e6:a8:1e:45:
2c:ef:6e:4a:e5:b2:d0:fc:2d:c5:18:77:a3:e2:4f:
4c:50:4d:22:64:12:ae:55:0b:13:42:d0:f0:91:9e:
80:36:44:dd:0d:9f:0e:42:fd:a1:09:8d:0f:44:2c:
2d:35:5c:ba:1a:97:6c:16:bc:80:d4:60:28:9a:38:
8c:4f:79:ef:1e:9a:41:4a:7a:0a:cc:0a:b4:0c:92:
cc:32:5a:63:06:ab:68:63:04:93:be:42:d9:11:f1:
3e:f4:f7:d1:ad:1e:35:d0:6f:0e:97:47:82:1a:2c:
3c:79:25:3b:f7:22:9e:88:75:3a:58:aa:dc:ef:12:
14:b6:13:7b:f2:84:05:83:dc:04:c4:79:01:7b:00:
fd:fd:ca:9c:65:82:85:f2:33:1f:3c:3d:33:3a:3c:
83:e6:22:27:ee:13:83:1b:87:97:0c:32:82:5f:f9:
eb:0d:db:43:08:a1:c4:4d:51:ed:62:f2:6b:23:f0:
29:55:c6:35:7c:3b:f4:36:3c:21:85:3b:48:3d:95:
01:2f:bd:7e:8d:e0:69:64:89:8e:1b:29:48:b5:a0:
66:0a:02:16:01:5d:3f:0f:b6:da:e6:6b:c2:60:d7:
32:8d:47:39:15:40:c7:54:08:91:cd:6f:2c:8c:c3:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:41:7B:2C:35:2F:1A:73:0F:2D:89:F9:55:F8:16:B1:9B:CF:47:50
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/bkF7LDUvGnMPLYn5VfgWsZvPR1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.72.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c1:d7:cb:40:2e:70:b9:c2:53:7d:1c:c5:34:05:a8:97:45:
40:30:6a:ee:34:46:65:32:56:f7:f2:e0:3b:44:44:9f:3d:82:
e0:44:ea:53:69:04:31:04:9e:eb:63:e7:4c:73:1a:13:ec:86:
fc:b6:2c:a1:f4:9d:fd:3d:ee:0a:eb:bc:dd:78:ad:9d:ad:e3:
b7:f2:d0:dc:8d:2d:3f:19:eb:56:ee:00:4b:7a:dd:5c:40:cc:
da:b4:40:e8:5b:67:1b:7a:e4:22:2b:92:d7:28:c1:70:10:aa:
b6:fd:0d:91:b3:5a:e5:ab:85:48:b8:9c:f4:3c:dc:f3:13:8e:
ef:82:75:9e:e7:17:aa:f0:3c:18:a7:cb:fb:b1:db:86:da:85:
ef:7b:8f:a3:fa:8c:f5:9c:93:a3:50:30:b5:09:90:86:af:66:
07:de:7f:94:db:e0:a0:5a:e4:f9:51:6f:61:65:d3:28:17:32:
ed:45:9e:1d:e7:1e:4a:48:5d:80:31:e4:2a:1d:bd:ec:79:6d:
d2:84:14:c0:f5:c0:76:c6:9a:cd:40:e8:dd:0c:84:01:28:12:
c6:fd:62:a3:a8:32:18:0d:47:e6:47:46:46:bb:5b:1c:be:59:
27:e8:75:e4:8f:83:f0:6f:13:93:70:42:b8:12:6b:06:ef:7d:
aa:b9:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:57:59 2026 by rpki-client