Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/iVcF-kUh199mj9pq4jknTJC7IoU.roa
File: iVcF-kUh199mj9pq4jknTJC7IoU.roa (raw, json)
Hash identifier: 9isjb4INZ1b+de9fCvopPwiNmw4oAk827HjiQR/h8hQ=
Subject key identifier: 89:57:05:FA:45:21:D7:DF:66:8F:DA:6A:E2:39:27:4C:90:BB:22:85
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825BA04BC06AD1E8376CF04A48EB1C
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/iVcF-kUh199mj9pq4jknTJC7IoU.roa
Signing time: Tue 25 Aug 2026 15:20:39 +0000
ROA not before: Tue 25 Aug 2026 15:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219390
IP address blocks: 185.231.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:5b:a0:4b:c0:6a:d1:e8:37:6c:f0:4a:48:eb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=895705fa4521d7df668fda6ae239274c90bb2285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:29:06:b1:00:12:f5:9d:e6:a4:6a:58:d6:
0a:e4:1b:3f:30:c7:b0:b9:12:40:dc:8d:33:1f:d4:
bd:1b:64:66:5c:df:3a:06:ce:4b:f8:cd:c0:a4:64:
1a:5b:6f:38:c0:53:08:75:c8:ee:9e:6d:14:54:02:
f5:9b:73:a0:13:24:d1:67:27:09:1e:c9:8f:a5:51:
3f:c3:be:c8:1f:af:e3:6e:7c:b1:cf:2f:33:68:42:
f8:53:80:db:84:30:4d:99:f8:ef:b1:0a:0c:61:de:
1e:55:21:79:41:9a:38:a3:35:65:6a:e5:63:66:b7:
f8:3a:36:f5:11:38:a2:2e:ce:b9:f8:7a:9e:29:f3:
26:eb:29:bc:39:e7:bc:f0:8a:14:a4:3d:09:21:76:
26:66:37:0b:3a:a9:2d:e6:b4:fc:f3:d3:38:fa:14:
26:7f:cb:09:83:97:8d:47:ae:c1:94:d6:bb:58:ef:
f4:a3:cf:73:c0:07:1a:e6:e5:b9:ec:b9:3a:dd:a5:
e5:fa:0f:cf:b9:a7:a2:02:1a:b4:7c:a3:80:c9:f9:
7c:52:02:f2:dc:68:5e:2e:f1:29:b9:53:dd:fb:fb:
76:66:9b:5f:c6:b9:b9:54:15:4f:4e:d2:23:c9:8d:
08:2b:a3:03:02:1b:8f:ae:9e:e9:c4:c9:cc:a1:9e:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:05:FA:45:21:D7:DF:66:8F:DA:6A:E2:39:27:4C:90:BB:22:85
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/iVcF-kUh199mj9pq4jknTJC7IoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.225.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fd:18:ab:ce:11:26:f8:a4:8e:36:70:d1:8a:9e:f1:ee:ea:
e5:5d:67:dd:3b:d7:8f:72:18:67:9f:5f:01:4d:53:71:20:e3:
d8:4f:d1:de:54:fc:1f:82:06:b9:dd:af:64:d8:51:de:00:ae:
d1:ab:69:92:7e:3a:c1:c2:81:29:d9:29:e2:c5:83:ae:83:3f:
e5:a0:fa:58:7d:c8:c7:b1:4d:48:ce:36:7b:3a:73:77:cc:c9:
bf:8c:48:df:30:55:7e:6f:58:84:df:32:19:8a:07:f7:cb:bf:
cd:e9:82:6e:23:80:08:70:01:50:3c:14:2a:d1:8d:6a:a9:01:
d3:1f:97:a7:d3:8a:8e:c0:03:9e:93:04:71:ef:0c:b7:9c:4e:
16:88:09:b6:ce:aa:20:1c:a2:ef:b1:07:0c:84:1a:af:6b:e7:
8e:e8:40:99:d5:54:d2:88:8a:fc:e7:b8:b6:01:59:a6:9b:5c:
90:64:ad:1f:5a:a1:ba:28:bb:53:b1:ef:1b:fe:73:52:4a:51:
30:6e:6a:d8:14:51:db:9f:50:c2:d6:fb:96:47:82:77:ce:66:
1a:f2:fc:68:98:14:3a:75:59:27:09:22:22:af:3b:ba:d5:71:
46:65:fd:1d:4f:18:7d:2f:f9:bc:e0:78:a1:98:31:35:42:73:
39:44:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:47 2026 by rpki-client