Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/qNLpv7C-WKIPtLwOt5vvG2jOI1g.roa
File: qNLpv7C-WKIPtLwOt5vvG2jOI1g.roa (raw, json)
Hash identifier: ja42JQwQXX8r9uYT0tonmAltBETuMJpfhq0fQEwqugU=
Subject key identifier: A8:D2:E9:BF:B0:BE:58:A2:0F:B4:BC:0E:B7:9B:EF:1B:68:CE:23:58
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 01A0383B55BBD69C09C107F0E508DC40CF24
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/qNLpv7C-WKIPtLwOt5vvG2jOI1g.roa
Signing time: Tue 25 Aug 2026 09:23:27 +0000
ROA not before: Tue 25 Aug 2026 09:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57008
IP address blocks: 85.198.88.0/22 maxlen: 22
85.198.88.0/24 maxlen: 24
85.198.89.0/24 maxlen: 24
85.198.90.0/24 maxlen: 24
85.198.91.0/24 maxlen: 24
90.156.222.0/23 maxlen: 23
90.156.222.0/24 maxlen: 24
90.156.223.0/24 maxlen: 24
176.123.180.0/22 maxlen: 22
176.123.180.0/24 maxlen: 24
176.123.182.0/24 maxlen: 24
176.123.183.0/24 maxlen: 24
185.36.144.0/24 maxlen: 24
185.200.84.0/22 maxlen: 22
185.200.84.0/24 maxlen: 24
185.200.85.0/24 maxlen: 24
185.200.86.0/24 maxlen: 24
185.200.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 09:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:3b:55:bb:d6:9c:09:c1:07:f0:e5:08:dc:40:cf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Aug 25 09:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8d2e9bfb0be58a20fb4bc0eb79bef1b68ce2358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:5a:e4:b7:f1:68:8e:c1:a2:d9:e8:5e:c2:
34:45:81:4f:2c:13:23:59:33:4a:44:63:f8:f6:b9:
1a:b4:1c:32:04:88:b5:9c:83:ab:e5:a7:8f:69:c4:
c1:54:54:1a:c7:48:3e:e9:d1:a7:7f:1e:52:0a:f6:
2a:0b:48:19:c3:c3:c1:7f:59:f9:18:7d:84:1c:76:
c2:a6:c8:a4:1e:64:5e:0f:dc:f1:4b:c2:38:9a:8c:
31:67:df:cb:7b:68:93:30:04:9d:60:1c:f6:5e:f1:
a2:1c:cb:d5:8e:37:fd:15:2e:e8:f7:49:47:b0:00:
0a:ac:4c:9c:31:ca:8c:b5:b0:a1:92:88:cb:11:cd:
00:f4:b4:59:5a:d3:7e:ae:05:50:3b:db:46:35:39:
4b:7c:8a:89:00:c9:8f:a1:8b:ca:1a:f2:b8:ce:4c:
16:bc:6d:58:a1:d9:5f:3c:e9:e6:ac:36:b8:c4:c8:
37:ee:29:54:4b:a0:f8:43:b4:0a:7c:ce:eb:62:00:
83:73:5b:f6:cb:ce:9a:ba:b3:61:34:0d:e3:40:43:
98:96:97:2e:ce:4c:11:50:19:cf:59:26:01:e3:30:
2a:d6:99:05:dd:bb:ac:e0:16:04:88:9f:87:a0:b9:
d6:bd:8c:af:03:d8:68:ac:f3:41:37:de:70:fa:41:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D2:E9:BF:B0:BE:58:A2:0F:B4:BC:0E:B7:9B:EF:1B:68:CE:23:58
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/qNLpv7C-WKIPtLwOt5vvG2jOI1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.88.0/22
90.156.222.0/23
176.123.180.0/22
185.36.144.0/24
185.200.84.0/22
Signature Algorithm: sha256WithRSAEncryption
89:33:64:65:cf:fb:2a:2d:3d:f4:b6:96:51:d1:d8:af:64:a9:
7b:12:1b:fa:c0:26:4f:c4:f4:a4:82:33:dd:b5:b0:80:1f:e0:
20:8b:15:95:f3:14:37:e6:3d:1b:8c:78:dd:3f:65:2c:17:9d:
8f:ae:ff:ce:10:c1:7d:29:75:7f:3d:2e:fb:b2:d3:ea:1c:0c:
7c:09:c9:ef:e0:12:4c:61:ea:42:01:51:77:12:c9:40:60:7f:
a6:05:0c:88:38:3d:df:26:58:b5:26:a1:87:13:dc:57:de:de:
d5:56:6f:54:ec:45:e9:bf:78:77:21:4b:c2:45:02:34:71:c2:
8c:ad:29:76:28:6c:be:43:c3:3a:5b:f8:e1:57:b9:da:c9:f3:
27:50:73:19:35:9b:aa:3f:89:73:c1:8b:b6:02:a6:81:15:54:
04:3b:8b:f1:55:70:f8:85:a4:df:84:5c:5b:14:6e:d5:9a:b5:
38:19:ba:d2:58:56:4e:1d:5c:73:22:39:f0:6f:31:17:c7:2c:
a8:68:dd:6f:a8:2f:ba:f0:f4:3b:d0:44:eb:79:01:ac:10:78:
1e:36:9e:df:0f:2a:2d:c3:c4:d0:da:fc:33:bb:d7:85:27:43:
fa:03:26:d9:a6:38:12:70:af:61:f8:3b:df:d4:bc:d1:63:01:
a4:61:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 19:10:09 2026 by rpki-client