Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/xokwMX7pBQZJD8_4WfB-FdFEXi8.roa
File: xokwMX7pBQZJD8_4WfB-FdFEXi8.roa (raw, json)
Hash identifier: I09l7esTbT+gqVY+7jBoty1HjPWzG3I2RBTZMIcgZgo=
Subject key identifier: C6:89:30:31:7E:E9:05:06:49:0F:CF:F8:59:F0:7E:15:D1:44:5E:2F
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019FC7BCEF11C0FE813E75C58945940D9005
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/xokwMX7pBQZJD8_4WfB-FdFEXi8.roa
Signing time: Mon 03 Aug 2026 13:07:55 +0000
ROA not before: Mon 03 Aug 2026 13:07:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33993
IP address blocks: 85.8.201.0/24 maxlen: 24
94.131.23.0/24 maxlen: 24
2a14:e080::/32 maxlen: 32
2a14:e081::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:bc:ef:11:c0:fe:81:3e:75:c5:89:45:94:0d:90:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Aug 3 13:07:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c68930317ee90506490fcff859f07e15d1445e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:dd:ba:f3:af:3a:0c:28:ea:41:b3:50:59:
4a:bb:9b:23:7a:a2:31:17:22:12:56:79:03:ed:75:
05:79:0d:9d:92:ff:62:cf:bd:b8:a2:f0:63:0e:03:
7c:0d:f7:4f:b0:8a:ef:59:1f:07:ba:51:bd:41:5d:
3b:9c:c9:38:a3:7e:b2:94:5a:5a:f3:29:bb:79:b5:
94:a4:5e:08:e7:2d:d8:8e:34:b3:99:ca:bd:33:0a:
00:c4:75:74:ab:1c:7a:90:99:5f:ed:7b:8d:e7:25:
27:cc:2e:67:39:19:b0:54:d0:26:c3:3e:d8:3d:04:
0e:eb:8c:66:88:99:e2:fa:b2:57:da:58:c1:6c:35:
48:20:28:78:7f:0a:16:93:0f:b0:6c:25:92:5a:0e:
42:51:9e:45:84:9d:a3:6c:42:51:69:60:5f:fa:19:
0b:13:ca:02:f0:37:30:c0:03:d6:b6:27:e7:75:ee:
bd:a5:fb:7a:63:77:18:46:d4:70:9a:d5:c8:46:88:
01:11:08:d3:a1:be:d3:56:fb:34:77:5a:61:c1:48:
a7:c0:a4:12:44:77:9a:29:50:65:04:6d:9e:be:dd:
a4:7d:b5:d5:3d:d9:dc:d5:d6:b9:f9:51:ea:a4:5a:
23:df:c6:2c:7d:c9:3f:ef:72:9e:b7:c5:92:6d:bc:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:89:30:31:7E:E9:05:06:49:0F:CF:F8:59:F0:7E:15:D1:44:5E:2F
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/xokwMX7pBQZJD8_4WfB-FdFEXi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.201.0/24
94.131.23.0/24
IPv6:
2a14:e080::/31
Signature Algorithm: sha256WithRSAEncryption
02:59:fe:63:0c:4b:b8:8a:66:be:df:ef:45:3e:13:d8:47:52:
77:8f:0c:b0:d1:da:d4:b1:db:ec:c7:c5:2d:cc:d8:8c:3a:f0:
c1:e9:b6:1c:31:22:02:1b:d1:e4:4c:ec:82:d8:22:30:ab:4c:
59:3f:26:11:17:a2:04:72:f1:84:3d:ef:2e:44:70:60:18:78:
80:0d:4b:6b:38:d7:d9:0d:db:89:4b:a0:a6:df:cc:b4:cd:8c:
f5:83:7c:8c:8b:60:13:b8:8c:14:c5:b1:59:09:ee:d9:78:1b:
aa:45:ee:b3:6e:41:ef:7a:29:f1:bf:2f:3a:25:1e:76:be:2f:
9a:3f:7f:5c:20:d6:16:4b:28:54:08:0c:c8:05:76:37:4f:a8:
36:fa:d2:09:74:80:51:b6:b2:64:0b:46:74:3d:0d:98:7e:0a:
93:77:db:2f:f1:74:8b:dc:3f:28:78:25:5a:fe:7a:a4:20:60:
38:28:84:5d:f4:82:de:0e:3a:83:2b:37:45:c6:b1:6f:69:90:
0e:cf:5e:f8:72:61:90:94:d9:ed:2b:61:91:de:1c:6b:78:8d:
75:1b:a0:33:8d:ae:bb:7b:bb:11:d5:7f:dd:45:78:fb:d9:09:
67:81:1f:f1:04:8a:f0:8b:83:0f:45:9a:42:7f:07:c7:d1:1a:
03:65:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:36 2026 by rpki-client