Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/w69I0Uf-d_cKgR5DITm-RYrq9oU.roa
File: w69I0Uf-d_cKgR5DITm-RYrq9oU.roa (raw, json)
Hash identifier: kB5dpwPaXc8nYCV8m4Y0ogmTYY2wwXfoHIPX1TZCrYU=
Subject key identifier: C3:AF:48:D1:47:FE:77:F7:0A:81:1E:43:21:39:BE:45:8A:EA:F6:85
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982564C704B7667C36946FE93F2D568
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/w69I0Uf-d_cKgR5DITm-RYrq9oU.roa
Signing time: Tue 25 Aug 2026 15:20:38 +0000
ROA not before: Tue 25 Aug 2026 15:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214382
IP address blocks: 85.235.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:56:4c:70:4b:76:67:c3:69:46:fe:93:f2:d5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3af48d147fe77f70a811e432139be458aeaf685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:a2:45:e2:f0:aa:fb:78:f8:9b:f9:fe:26:
d1:52:f5:0d:f5:35:51:ae:db:c4:27:d9:2a:ac:19:
75:04:3f:e7:49:ef:d4:f6:61:2e:7a:ab:87:de:dd:
e6:e9:c5:f0:b7:86:34:bd:85:41:2e:6f:5a:b9:3b:
1d:9e:43:7a:01:01:f5:d5:03:50:b7:f7:b0:4f:a5:
b4:d2:06:5b:a7:cf:55:e8:e6:1b:51:14:4a:0e:f7:
dd:83:8d:fe:f2:11:54:03:bc:80:8d:88:40:33:77:
d8:36:07:6d:6c:95:fe:42:fb:ae:b7:76:74:d7:57:
dc:90:77:2d:89:91:d8:f8:ab:23:37:b1:a3:db:2b:
6b:2c:b2:4e:61:36:b2:f6:4a:5a:ea:30:b6:76:0d:
89:5e:d6:3d:b5:df:3b:74:64:28:13:f4:16:9f:27:
0b:81:24:c3:d5:07:51:01:15:91:5d:32:d8:be:f4:
d6:63:15:11:c4:a4:05:9b:c9:6b:9f:c3:9d:1d:de:
ac:1f:69:29:cd:42:10:77:ad:a9:0a:6e:db:04:ac:
24:d8:0f:7a:85:24:41:49:b7:d1:de:5e:49:93:1b:
41:cf:28:de:50:32:df:cc:00:00:b1:29:98:11:13:
fa:45:de:3c:ce:a4:a8:b1:d3:ec:51:b9:3b:c5:c4:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AF:48:D1:47:FE:77:F7:0A:81:1E:43:21:39:BE:45:8A:EA:F6:85
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/w69I0Uf-d_cKgR5DITm-RYrq9oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.75.0/24
Signature Algorithm: sha256WithRSAEncryption
78:92:04:cc:f7:6c:e4:30:cd:26:de:27:b7:4f:5a:a2:3f:c7:
dc:fd:54:c3:f6:dc:b5:95:22:9d:6c:4c:84:0d:95:60:2b:c4:
fb:04:43:fa:8c:b1:9a:ba:0e:b7:d3:2a:39:1c:5f:13:9e:67:
9b:d0:9a:e4:57:30:6b:a5:ca:c3:ee:e2:e8:b7:e2:01:4f:42:
a1:44:bf:ee:68:03:69:74:b0:c1:36:ed:9b:08:a3:68:23:5f:
d1:95:fa:2d:aa:e7:17:c9:b3:df:43:c8:e7:57:f5:43:5c:e9:
89:46:28:bf:7f:a0:d0:fd:22:83:6b:33:f2:a1:66:b0:e1:72:
27:24:09:20:ad:67:93:bd:0f:9a:f0:7d:47:3f:a9:02:29:45:
9f:99:07:eb:68:c2:14:67:0b:67:a8:d0:63:13:33:2a:3c:3f:
d2:10:89:89:9a:52:b7:77:af:fe:82:51:2e:4f:e7:75:08:2b:
92:07:05:85:2b:88:6a:91:f3:81:d7:5d:d0:82:f1:dd:f1:11:
88:82:92:6b:a2:5c:2d:cb:0b:8f:ed:8a:2f:93:fd:7a:6a:a9:
2b:fe:78:89:5d:a7:18:36:f7:b7:f1:e3:e0:84:76:93:4e:86:
cf:44:b8:37:59:79:a4:9a:89:22:d0:b1:fc:af:1a:4b:bf:5d:
3d:9b:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:52 2026 by rpki-client