Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/cCHc2071jPUfSdxVw1hfya7219k.roa
File: cCHc2071jPUfSdxVw1hfya7219k.roa (raw, json)
Hash identifier: G7uzQDVgliOYaasp15D3RtdUjtrHzBqJYwkoucVPw7A=
Subject key identifier: 70:21:DC:DB:4E:F5:8C:F5:1F:49:DC:55:C3:58:5F:C9:AE:F6:D7:D9
Certificate issuer: /CN=d49ec8c643a3b516e84c4a7ea5c27cfcc9ab22c2
Certificate serial: 019FD7959BED20978922D8B9BB12624200DE
Authority key identifier: D4:9E:C8:C6:43:A3:B5:16:E8:4C:4A:7E:A5:C2:7C:FC:C9:AB:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/cCHc2071jPUfSdxVw1hfya7219k.roa
Signing time: Thu 06 Aug 2026 14:58:54 +0000
ROA not before: Thu 06 Aug 2026 14:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54113
IP address blocks: 85.236.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:95:9b:ed:20:97:89:22:d8:b9:bb:12:62:42:00:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49ec8c643a3b516e84c4a7ea5c27cfcc9ab22c2
Validity
Not Before: Aug 6 14:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7021dcdb4ef58cf51f49dc55c3585fc9aef6d7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7b:2e:15:a6:8c:ee:64:da:42:e9:56:49:8f:
54:16:80:1e:13:4a:ee:93:1b:67:88:31:16:bb:22:
33:df:ff:64:b4:ce:36:8c:77:fa:df:98:96:56:bb:
98:98:2b:60:66:2a:e5:6e:3f:4a:96:c0:10:be:2e:
0b:ef:08:40:e5:93:16:50:ab:66:fd:96:ea:fe:a5:
13:9c:85:03:c7:fc:e9:c7:e5:b8:9f:91:e1:69:b0:
56:2e:ac:e4:5f:8a:3c:07:fd:e9:55:32:82:f7:8b:
52:4b:bd:5c:5b:aa:8d:9e:37:79:4b:c2:28:a4:9a:
92:5b:da:cd:e5:fa:fa:8b:9e:35:35:e7:59:bb:ed:
fa:83:45:80:9f:47:cb:ca:f5:9b:b0:b4:c5:40:92:
d3:80:d4:63:84:fd:7f:f0:02:6a:ff:66:99:90:73:
8c:0c:77:1b:30:0d:f8:f1:7b:b9:85:13:6f:5f:38:
48:13:20:75:ed:6c:43:4b:a2:eb:24:9d:6d:ff:ff:
a9:44:97:8f:2c:4f:35:5b:02:e7:43:fd:b5:5d:55:
28:34:0d:35:19:15:09:76:1f:32:9b:1b:34:3e:a7:
24:bf:b5:41:e3:8f:7a:60:6e:72:4b:e1:1f:f0:66:
42:74:fd:3a:74:6c:4a:7e:db:2c:de:0e:8c:16:7e:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:DC:DB:4E:F5:8C:F5:1F:49:DC:55:C3:58:5F:C9:AE:F6:D7:D9
X509v3 Authority Key Identifier:
keyid:D4:9E:C8:C6:43:A3:B5:16:E8:4C:4A:7E:A5:C2:7C:FC:C9:AB:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/cCHc2071jPUfSdxVw1hfya7219k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.106.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0a:b3:ae:4f:00:aa:11:ed:3f:a7:27:5c:0c:3a:22:9b:43:
78:7d:de:19:85:ed:8e:a7:54:d8:f4:f6:ba:d3:de:02:12:dd:
61:95:5b:e2:da:06:2a:96:ad:71:17:c6:72:82:9c:db:2b:a0:
58:88:2f:63:f3:a7:e7:c7:b9:0a:bf:be:b5:42:2b:b2:7f:07:
0b:40:cd:cb:fd:65:78:39:ac:ec:c7:2e:cb:20:d4:80:ab:92:
75:4e:b7:a1:04:ac:28:cb:8f:2d:13:14:c0:b5:33:76:90:77:
05:8e:b0:61:f6:11:1b:dc:7b:85:51:f5:d1:e1:84:e4:cc:f6:
53:04:cd:24:f3:1e:71:3c:cc:88:90:67:da:06:b7:31:1a:35:
95:3b:01:52:b2:65:4a:28:e5:a2:87:d5:36:27:3f:96:ba:09:
d2:a2:f8:00:a3:15:42:cd:c0:15:44:be:6f:5d:e0:17:38:93:
7d:26:84:34:92:38:0e:fc:15:17:1c:69:a8:39:91:2c:35:ed:
7b:47:dc:47:48:4a:d8:64:0e:a5:f5:31:17:ed:9a:f3:f6:28:
a8:31:7b:85:85:4f:70:a9:e8:b3:72:3d:79:7a:1f:9a:f8:30:
fe:c7:41:0b:d3:7f:a5:76:6b:fa:3e:0f:4d:a6:f6:10:a8:2f:
cc:5f:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 00:01:17 2026 by rpki-client