Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/hui7j93PRtJVhvNXR_dOwOYoGco.roa
File: hui7j93PRtJVhvNXR_dOwOYoGco.roa (raw, json)
Hash identifier: 0nTl+egSZRWnKPRCdnp2fe1d6ZaoylL5pIWyperYVa0=
Subject key identifier: 86:E8:BB:8F:DD:CF:46:D2:55:86:F3:57:47:F7:4E:C0:E6:28:19:CA
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982355CAAD207FC441725EC6C393875
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/hui7j93PRtJVhvNXR_dOwOYoGco.roa
Signing time: Tue 25 Aug 2026 15:20:29 +0000
ROA not before: Tue 25 Aug 2026 15:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29262
IP address blocks: 62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
85.8.156.0/24 maxlen: 24
85.8.157.0/24 maxlen: 24
85.8.158.0/24 maxlen: 24
85.8.159.0/24 maxlen: 24
85.8.160.0/24 maxlen: 24
85.8.161.0/24 maxlen: 24
85.8.162.0/24 maxlen: 24
85.8.163.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
93.190.9.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
139.28.32.0/24 maxlen: 24
139.28.33.0/24 maxlen: 24
139.28.34.0/24 maxlen: 24
139.28.35.0/24 maxlen: 24
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
2a02:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:35:5c:aa:d2:07:fc:44:17:25:ec:6c:39:38:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86e8bb8fddcf46d25586f35747f74ec0e62819ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:ed:38:31:c1:5a:47:54:66:ac:f2:22:a2:
7c:9e:95:00:12:12:75:2f:fd:4c:7f:57:f7:6a:6f:
1c:4a:53:56:0d:a2:e6:d8:80:a0:8f:00:25:e6:c3:
56:77:1f:26:55:fc:78:25:b6:35:93:8d:70:78:17:
b3:bd:52:f3:1f:0a:ce:90:17:1c:df:3c:2c:1e:c7:
05:56:7c:c5:ec:da:79:df:85:94:f1:ee:70:fb:6e:
c1:dd:d8:03:4b:f4:21:af:0b:d1:cf:5c:0e:43:d3:
36:a8:16:f5:3a:1f:7c:ee:5c:a1:52:d8:a5:35:f1:
83:3e:8f:a8:0f:bc:bf:24:c8:9c:bb:13:13:61:2f:
d5:52:cb:ed:72:10:5e:de:7c:62:1c:78:f7:b3:45:
11:a3:56:b7:62:86:d1:a7:e0:f0:4e:8e:2c:d2:f6:
f7:1b:9d:87:73:bd:2c:23:3d:66:ef:2b:2b:65:4d:
22:46:16:5b:54:9f:49:d2:74:f3:b6:2f:e9:30:b6:
ca:94:d2:fc:80:40:f3:4f:d0:28:00:c7:09:fb:87:
ae:6f:56:70:9d:f0:30:6b:02:42:e5:00:8e:8c:88:
e1:a3:d3:c3:22:95:23:e0:66:3e:6c:e3:7f:10:0e:
7a:13:59:42:1d:e1:14:c1:c7:5a:a6:d2:8a:86:13:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E8:BB:8F:DD:CF:46:D2:55:86:F3:57:47:F7:4E:C0:E6:28:19:CA
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/hui7j93PRtJVhvNXR_dOwOYoGco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
85.8.156.0-85.8.163.255
93.190.8.0/22
139.28.32.0/22
194.169.92.0/22
IPv6:
2a02:f240::/29
Signature Algorithm: sha256WithRSAEncryption
2d:9c:8b:73:f6:5c:64:05:e6:13:b1:48:42:ac:ec:d9:57:0f:
60:9b:d6:94:ab:47:84:5e:83:97:1a:cf:53:62:ef:30:50:99:
56:e3:21:a1:47:6b:69:a7:35:b8:2e:a9:64:fe:6b:a7:49:cf:
15:20:f7:9b:24:45:36:e2:6c:c9:0b:44:87:f6:04:be:5b:ff:
37:e5:2f:10:fb:3d:25:50:4b:72:29:ef:03:c0:57:ee:ea:c5:
62:c8:a8:c9:a4:e1:70:dc:be:73:bd:a0:3c:e8:f0:94:b4:4a:
9c:bc:50:27:f1:2f:31:da:aa:b6:df:7a:87:24:27:e3:5f:e2:
b4:da:f7:4c:4b:ea:aa:61:15:e9:ff:93:e3:a7:23:90:df:f6:
85:20:e8:1a:8c:19:94:ee:fe:df:db:7f:a0:fb:c8:21:e0:92:
f6:54:a2:8f:d3:e4:f4:54:9d:62:94:5b:a4:b9:f6:af:a9:ca:
a7:d0:49:a0:40:f4:ad:39:1b:fe:56:ae:88:85:12:39:3a:46:
a3:f2:39:50:4b:ab:76:e2:10:a8:34:06:3c:d8:b7:27:2a:9f:
b7:58:40:d4:75:d0:00:6f:cd:56:27:19:42:e5:e9:cd:54:02:
98:df:b2:89:a4:e6:63:f6:74:cd:90:25:6a:0a:31:8c:4b:fd:
c9:bb:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:55 2026 by rpki-client