Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/tIs_5VDFkidZoWHC7iAKGF7TIMQ.roa
File: tIs_5VDFkidZoWHC7iAKGF7TIMQ.roa (raw, json)
Hash identifier: Fu5YGfBv3U5tWckXyywplbyAbT6esIVzrw8xnNN/KU4=
Subject key identifier: B4:8B:3F:E5:50:C5:92:27:59:A1:61:C2:EE:20:0A:18:5E:D3:20:C4
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982543016A2CD0C8D1058F554B9597E
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/tIs_5VDFkidZoWHC7iAKGF7TIMQ.roa
Signing time: Tue 25 Aug 2026 15:20:37 +0000
ROA not before: Tue 25 Aug 2026 15:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213257
IP address blocks: 85.235.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:54:30:16:a2:cd:0c:8d:10:58:f5:54:b9:59:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b48b3fe550c5922759a161c2ee200a185ed320c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a7:47:f2:85:1c:cd:d7:d2:6a:91:a2:e0:3b:
e6:75:cf:27:d4:39:1d:cb:39:72:52:4d:14:af:7f:
e8:df:4d:81:82:6b:c5:82:cb:e2:3d:9b:4d:8c:f3:
7f:c9:c1:1c:24:4f:a8:3f:ee:31:30:64:a6:b1:30:
8b:b6:03:c0:0d:0d:0b:ba:07:98:05:f5:a0:5a:03:
63:d3:0c:31:3e:2e:7e:c8:a7:9a:8f:78:18:af:3f:
59:e3:a3:26:28:65:97:21:13:65:8f:10:b4:6a:13:
52:4b:a5:42:af:aa:de:29:fc:0f:8c:ec:99:2b:3d:
54:3c:9d:5c:7e:47:45:cd:40:c0:60:59:3f:50:5b:
34:90:08:87:6f:04:85:04:ec:c6:25:51:be:a2:37:
b5:4e:b5:d9:90:58:77:db:7f:d9:59:74:7b:b6:e4:
c8:2e:ad:6a:55:c3:0c:63:2f:48:94:4b:df:85:32:
72:66:27:d3:fd:bc:05:13:62:b3:5d:60:cc:43:68:
92:b1:9e:3e:58:92:1e:8f:0b:44:ff:81:da:33:50:
fb:10:ad:77:32:cf:2c:37:20:60:56:01:f4:61:7a:
3a:36:ed:0f:26:66:06:02:46:cf:fe:e1:cf:a3:5e:
a5:72:34:40:4d:10:7e:1e:60:19:f6:58:45:c4:d2:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8B:3F:E5:50:C5:92:27:59:A1:61:C2:EE:20:0A:18:5E:D3:20:C4
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/tIs_5VDFkidZoWHC7iAKGF7TIMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d6:74:49:19:ab:8f:7e:fd:a2:1f:8e:3f:8a:af:96:d0:84:
7c:86:e6:e6:73:23:92:fb:12:7e:51:43:ac:d9:89:ba:27:19:
45:07:c2:78:b6:95:02:72:b6:a6:00:bd:3a:51:f1:5a:15:1d:
f8:73:ed:ba:59:3c:49:ac:01:4f:50:b3:73:5f:4b:c9:67:f7:
36:e6:37:cb:e6:90:e8:23:4e:32:4b:5f:8d:44:be:f1:5e:02:
77:a2:a1:70:d5:d9:89:cd:24:c5:21:3c:d2:c9:9c:70:9c:78:
26:f4:84:63:04:45:0c:f5:73:9c:cb:e4:2c:47:cc:fe:17:c9:
ec:e4:8c:9c:14:bf:9b:d8:f3:66:32:62:9d:5e:c5:c2:73:76:
c0:8f:ae:ce:de:3b:87:b4:d6:d6:e3:9c:3b:c5:9f:7f:02:95:
a3:c3:15:39:2a:35:9d:00:c6:ea:36:c7:ac:01:46:90:be:37:
35:1b:e9:0a:e9:b1:ce:67:94:44:ad:04:25:f9:ca:f5:b8:a9:
53:74:d7:e0:fc:da:16:b3:d4:31:bb:61:8c:16:6f:c7:ee:fd:
e0:ea:08:eb:81:7e:ab:55:38:e3:69:f6:1b:dc:d7:91:2c:6c:
11:a6:d5:9d:c5:77:56:ab:3d:a0:b5:5d:ef:08:e3:5b:74:52:
d3:73:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:11 2026 by rpki-client