Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/flu3QW9DBvTDBhNAEH1FH4WgjsQ.roa
File: flu3QW9DBvTDBhNAEH1FH4WgjsQ.roa (raw, json)
Hash identifier: q+ogc0pCXBYBwy6MWjGpQfjevOefojB3cww9FbvaZGE=
Subject key identifier: 7E:5B:B7:41:6F:43:06:F4:C3:06:13:40:10:7D:45:1F:85:A0:8E:C4
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982331C7D52C4512AE9D8E9932E923A
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/flu3QW9DBvTDBhNAEH1FH4WgjsQ.roa
Signing time: Tue 25 Aug 2026 15:20:29 +0000
ROA not before: Tue 25 Aug 2026 15:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 85.8.144.0/23 maxlen: 24
85.8.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:33:1c:7d:52:c4:51:2a:e9:d8:e9:93:2e:92:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e5bb7416f4306f4c3061340107d451f85a08ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:d5:a9:3d:00:b5:7a:0d:00:2e:2e:96:7d:
76:03:ce:47:fe:77:ff:6a:ab:ca:ca:02:54:ba:1e:
c1:4d:00:6e:e2:2e:7d:70:4f:6b:f6:9d:0c:5c:d0:
b7:03:8e:99:90:92:c4:99:83:9e:46:11:95:83:dc:
4e:d8:49:de:e3:87:6c:45:7c:f6:bc:ae:06:90:7e:
22:96:07:c8:cc:19:86:e9:76:71:8e:f3:bb:81:25:
9b:95:5e:7d:73:45:0e:d5:d9:ba:9c:79:d0:28:e9:
be:2a:99:1d:82:ca:1f:c8:cc:20:73:87:50:bd:59:
28:80:2b:e2:18:11:24:4d:bc:a8:aa:77:04:a9:25:
85:04:d8:68:a1:55:a9:31:37:d2:20:36:54:1f:cc:
07:00:75:62:c1:83:66:f2:f6:b6:f8:9a:fe:c0:78:
2b:ee:40:34:f1:b2:65:df:a8:8f:f0:4a:41:93:f2:
9a:ca:ff:c2:53:d2:b8:2f:a0:2b:29:16:1a:86:64:
2b:ca:c3:7b:25:84:80:db:fb:bf:8b:65:3e:4d:a0:
b6:5f:cd:c1:cd:e4:99:23:fc:5c:fb:93:5b:52:ea:
95:36:02:4c:26:3d:ec:64:04:38:2e:c4:c2:f1:96:
d9:dd:0a:28:b5:e0:0e:5b:ae:db:fe:f6:8b:ed:84:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:B7:41:6F:43:06:F4:C3:06:13:40:10:7D:45:1F:85:A0:8E:C4
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/flu3QW9DBvTDBhNAEH1FH4WgjsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
04:de:12:c6:cf:fd:63:50:3f:b3:ae:93:cf:91:fc:73:39:51:
9c:c8:e6:8f:05:bb:ff:a0:3d:51:50:62:fa:52:e5:aa:40:36:
8e:cc:a5:d8:43:fb:ba:1e:89:47:81:fd:6f:7e:45:43:8c:83:
0a:61:6b:d1:a2:82:f5:92:41:de:b6:59:ab:9b:26:3c:fa:eb:
d5:48:c9:1f:80:84:49:95:e9:41:9f:74:24:89:f8:93:0d:08:
62:6a:68:bb:d3:36:b9:e8:f5:8d:a4:bc:8f:2d:d5:57:22:5f:
83:20:ce:06:65:c4:ff:ac:7a:ff:97:f1:d9:c1:6b:87:d1:66:
49:84:96:52:e6:d5:ee:7f:15:1b:cf:37:97:0b:eb:df:80:98:
82:7d:a2:52:a3:79:7c:5e:6a:e3:4e:1e:c1:72:d9:a1:4c:d9:
6e:d4:2a:6f:ec:89:5d:96:1c:5e:35:aa:4d:50:5b:c3:03:ec:
2d:29:14:00:0c:12:f5:e9:41:bd:eb:a5:5c:e3:2d:8f:0d:c0:
70:7d:c0:bf:14:8e:4b:62:a3:b1:34:3d:44:6e:32:63:70:a4:
20:28:d2:ad:4e:32:8e:29:ec:70:95:55:bc:82:7b:fd:0b:8b:
d5:e3:a7:48:58:8c:86:fb:8e:62:88:6f:8e:97:01:6d:d5:b4:
40:bf:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:21 2026 by rpki-client