Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/jXAjydFCzXX9FbbDxCyxuEZs0bo.roa
File: jXAjydFCzXX9FbbDxCyxuEZs0bo.roa (raw, json)
Hash identifier: YjrC1JS4S+dNHEHiKpI6KJXs9fk3wikC81XSLmXizdo=
Subject key identifier: 8D:70:23:C9:D1:42:CD:75:FD:15:B6:C3:C4:2C:B1:B8:46:6C:D1:BA
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019FEA845E47C18A7E19D9859E8668C3FCFE
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/jXAjydFCzXX9FbbDxCyxuEZs0bo.roa
Signing time: Mon 10 Aug 2026 07:12:51 +0000
ROA not before: Mon 10 Aug 2026 07:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 85.232.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:84:5e:47:c1:8a:7e:19:d9:85:9e:86:68:c3:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 10 07:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d7023c9d142cd75fd15b6c3c42cb1b8466cd1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:2c:47:cc:09:00:16:9d:b2:ea:13:8d:7b:
20:08:77:fb:29:35:51:61:b7:b4:8d:05:de:27:10:
eb:6c:e7:46:01:c9:e3:91:f9:f6:10:95:5f:6c:f7:
6f:c0:dd:e5:f3:17:a8:cb:4d:7a:59:21:db:f8:15:
02:01:a0:01:b8:9a:76:61:3d:7c:13:bb:88:b0:be:
77:d6:f7:6f:ca:e2:b5:9d:91:70:ef:a9:f5:3a:3e:
a3:c8:73:c8:f0:db:18:61:b2:b6:bd:d8:f0:45:1e:
e5:ad:b7:f5:bc:2a:37:f5:60:97:33:25:3e:33:6e:
88:28:81:e6:2c:88:05:03:16:12:be:5b:95:b4:cc:
8c:2a:2a:7b:e0:fe:f5:69:a1:7e:b8:79:1e:aa:23:
15:5a:5f:7f:05:02:ae:0d:c8:b7:78:3f:ee:cc:a5:
f0:b1:5a:53:85:30:d7:6a:ae:af:b9:23:b3:74:1d:
cf:24:c9:42:ca:c0:7a:1c:99:af:9c:b6:81:ec:b5:
59:c2:1e:53:9f:66:30:b6:70:9c:e6:8a:79:3d:d5:
dd:7a:6a:15:de:7a:f8:40:99:0a:65:16:70:6d:19:
f2:05:f5:2c:c5:f9:de:2c:26:09:a0:44:7a:0b:54:
4c:7a:25:a0:3c:ad:d7:ab:32:fb:9e:65:86:61:2f:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:70:23:C9:D1:42:CD:75:FD:15:B6:C3:C4:2C:B1:B8:46:6C:D1:BA
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/jXAjydFCzXX9FbbDxCyxuEZs0bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.181.0/24
Signature Algorithm: sha256WithRSAEncryption
01:cf:89:4f:20:d7:6f:c3:85:48:5d:5b:2e:f9:77:fd:2d:a0:
0f:38:7c:74:a8:ce:e1:f5:55:1b:1a:51:46:3d:c7:d6:72:d9:
9a:2e:8a:fc:30:7d:2b:23:a9:b6:ee:34:71:c1:30:c5:7c:5b:
6c:7f:d7:23:91:52:a9:4c:16:ad:65:c2:31:1c:f4:1d:65:3e:
73:b8:3b:3c:63:91:3f:69:1e:50:68:40:9d:5f:0a:35:c2:a2:
27:db:be:10:bd:38:55:08:06:2f:67:a7:b6:0b:6e:74:43:13:
ba:50:9b:b9:a3:0b:80:ac:c4:3b:67:ca:89:11:4d:3c:4e:37:
b6:32:8a:5a:5e:23:76:f2:54:49:4f:03:39:fe:9a:6d:0e:cb:
66:8d:5f:77:f7:19:70:c9:e3:2b:6d:9f:cc:20:19:28:46:20:
e9:97:48:85:dc:e7:48:dd:81:fe:5d:c1:48:50:1f:9e:20:ce:
1d:04:48:ef:37:3c:78:53:d5:88:49:87:5c:78:a2:24:1e:dd:
a8:1f:54:a8:e5:f3:98:25:32:d0:79:49:7f:34:ea:ac:b0:57:
35:2a:14:83:0b:46:f2:47:41:34:bf:c3:98:41:b8:c4:8a:d8:
e3:e9:e5:00:7d:60:a5:dc:77:42:a1:7f:fc:a3:6a:56:ac:30:
d7:be:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:18:37 2026 by rpki-client