Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/IjCH-sqDG187PVVmJq9UXUG58Q8.roa
File: IjCH-sqDG187PVVmJq9UXUG58Q8.roa (raw, json)
Hash identifier: ZeryMWfiqlc876G1je4RBD22AenRdJNuu5lhGxbMfeE=
Subject key identifier: 22:30:87:FA:CA:83:1B:5F:3B:3D:55:66:26:AF:54:5D:41:B9:F1:0F
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019F610E2174030A35E293B0FA2215B9A4F9
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/IjCH-sqDG187PVVmJq9UXUG58Q8.roa
Signing time: Tue 14 Jul 2026 14:35:43 +0000
ROA not before: Tue 14 Jul 2026 14:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33993
IP address blocks: 85.8.201.0/24 maxlen: 24
94.131.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:0e:21:74:03:0a:35:e2:93:b0:fa:22:15:b9:a4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Jul 14 14:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=223087faca831b5f3b3d556626af545d41b9f10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:82:1a:80:15:80:ba:13:0b:e3:e8:03:cc:
c3:af:02:33:30:dd:0a:5d:9a:c9:c5:69:61:fa:4a:
1e:b5:a8:e3:95:ed:ad:74:a2:07:ca:33:22:4b:a9:
3b:a6:9c:51:97:66:a0:19:9a:9b:00:51:93:fb:7d:
33:d8:56:cb:06:37:59:4b:b8:64:14:ba:c4:a1:3e:
49:74:c8:fe:6a:2e:18:d7:9c:f7:89:2a:76:73:4b:
60:5f:b4:f5:4f:1b:17:d7:63:dc:3f:b6:24:52:f5:
d3:d7:59:57:2c:85:08:f1:3c:a6:0c:74:73:37:54:
9c:1e:ab:a5:ef:81:99:5a:f4:cb:14:15:cc:e0:fc:
8c:ca:f3:fe:e6:41:ab:fd:f3:6d:42:bb:16:18:7b:
92:8e:42:5f:a9:0d:28:58:4e:a4:9e:75:41:9f:ad:
1b:5d:bf:4d:c0:7c:62:05:cd:fa:e9:7a:61:8d:2b:
a3:65:c3:c5:4a:f5:ca:a9:7c:9e:74:f3:18:b9:17:
06:6c:d8:e5:6c:0d:af:1f:eb:41:90:f2:c0:b5:eb:
78:b8:6a:25:1f:fc:47:48:27:b5:a0:14:81:cc:7c:
5a:4f:44:50:7a:82:09:84:bc:fe:79:d4:da:04:43:
8b:fe:80:67:01:88:a4:6a:15:9c:ee:eb:d5:93:9a:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:30:87:FA:CA:83:1B:5F:3B:3D:55:66:26:AF:54:5D:41:B9:F1:0F
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/IjCH-sqDG187PVVmJq9UXUG58Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.201.0/24
94.131.23.0/24
Signature Algorithm: sha256WithRSAEncryption
15:65:69:84:a1:51:17:b1:84:56:c0:be:fc:4e:a6:85:90:d7:
89:f8:c6:62:38:4f:37:16:6f:79:04:80:6c:69:2f:19:2e:b1:
b6:d5:39:47:73:85:86:7d:b8:3e:55:12:55:bf:d7:e5:7c:7c:
dc:fe:e6:b7:32:d3:c4:47:e8:75:0b:f2:1b:6c:e6:48:e1:19:
7d:2d:42:1e:05:5f:64:09:fc:a9:8d:2f:d0:31:6a:6a:53:be:
80:8f:b2:8e:b6:8e:44:40:57:0d:49:6a:1d:cd:38:9b:d7:e9:
8e:47:34:d6:92:e1:9d:c1:1a:5f:bf:14:e1:98:78:71:55:37:
77:97:8b:25:ba:0a:6b:72:e3:a1:e3:f9:8b:60:c5:39:ad:40:
be:58:de:17:13:9c:63:3d:15:cd:8f:32:00:40:05:4f:7c:c2:
98:8a:53:54:e2:53:f4:d5:a8:95:85:9b:20:a1:b6:3d:7a:01:
2d:16:f8:0c:8c:88:12:3d:3c:7a:b8:3a:85:59:f1:b5:21:e2:
71:6f:55:c9:27:de:a7:db:5a:87:35:14:2c:0d:61:5b:a6:dc:
9e:33:df:4e:60:e1:bb:d8:53:33:6b:62:38:cd:10:9e:6c:6d:
3b:00:5d:fd:94:89:8e:fd:83:57:cd:b0:21:f2:a8:5d:36:ca:
d6:0e:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:37 2026 by rpki-client