Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lQbZL52FpQ5OaqzBU-Rk_8o9-to.roa
File: lQbZL52FpQ5OaqzBU-Rk_8o9-to.roa (raw, json)
Hash identifier: ucr6MmSUkoVqygMhesjpMg4zGHyZZC5TIGQ33lulQeE=
Subject key identifier: 95:06:D9:2F:9D:85:A5:0E:4E:6A:AC:C1:53:E4:64:FF:CA:3D:FA:DA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FCD3B3131D8592BBAC0BB3D40834281E0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lQbZL52FpQ5OaqzBU-Rk_8o9-to.roa
Signing time: Tue 04 Aug 2026 14:43:56 +0000
ROA not before: Tue 04 Aug 2026 14:43:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219091
IP address blocks: 85.189.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:3b:31:31:d8:59:2b:ba:c0:bb:3d:40:83:42:81:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 4 14:43:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9506d92f9d85a50e4e6aacc153e464ffca3dfada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:00:82:58:3b:2d:ec:61:23:8a:11:8f:33:
60:9a:05:64:18:ef:2c:9d:f8:25:33:5f:f8:d1:c0:
77:50:ec:1b:92:3e:ef:9f:46:af:f0:28:51:4e:a5:
d3:f4:02:80:b9:be:a7:b2:30:0d:32:4d:46:7a:fd:
13:b1:4e:d8:e1:c9:f7:93:86:06:de:cc:13:c3:73:
00:9f:de:fe:6a:df:3f:1e:ee:8d:9c:e4:93:c8:ab:
60:b3:cc:2c:ce:8f:ec:1c:40:8d:14:4f:71:1b:eb:
1c:a9:58:fb:63:cc:58:90:94:9d:5b:ab:e9:58:7a:
c5:9d:48:4b:2a:6b:34:ea:33:ba:07:ef:4c:57:59:
44:f4:18:bf:e0:2e:bb:0c:ae:88:dd:67:54:a7:82:
b7:87:56:13:32:04:56:8e:c8:ac:53:f5:3b:01:c5:
7e:cf:c5:f5:8e:60:6d:04:9b:ac:f4:10:c4:17:f6:
3d:fd:d9:a4:02:44:97:8f:29:da:7d:dd:d3:4d:cb:
58:93:11:51:5b:ae:16:e6:bb:10:3f:27:3b:68:79:
5b:57:f5:6d:66:c8:1a:b7:3c:d4:6e:c0:73:03:7e:
3e:15:94:60:d2:81:cd:6f:c4:64:5f:37:7b:2d:7c:
a5:58:77:d3:b1:c4:37:9b:7f:00:8a:8f:62:86:6c:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:06:D9:2F:9D:85:A5:0E:4E:6A:AC:C1:53:E4:64:FF:CA:3D:FA:DA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lQbZL52FpQ5OaqzBU-Rk_8o9-to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.23.0/24
Signature Algorithm: sha256WithRSAEncryption
33:91:4a:80:e2:0d:76:83:5a:80:fc:c5:40:f3:d4:f5:1a:2b:
46:a9:1b:47:ed:f3:ec:e1:1c:e8:c9:7d:03:97:07:66:51:d1:
90:d6:6e:50:c0:68:61:2f:e0:4b:d6:cb:53:54:39:a4:24:99:
2b:14:91:ac:76:21:18:be:5d:03:53:58:1a:a7:35:c3:a0:d3:
60:f0:ab:71:fc:34:63:9f:85:51:37:b5:75:45:73:0e:f3:e6:
90:61:e7:c7:66:7b:88:d3:89:c8:43:40:0b:74:5d:f5:4a:f2:
59:de:1d:10:15:02:7c:4b:25:d4:f9:7d:16:03:de:e0:18:22:
dd:8b:0a:0d:4c:b8:cf:6a:8b:51:6e:c4:d0:fe:3e:bf:12:2a:
80:1b:83:f2:19:41:01:30:b7:9d:ca:8e:d7:c0:2d:72:a5:6c:
86:a4:6d:fa:4b:e1:0f:91:32:6b:72:25:9d:5c:91:a8:db:06:
fa:67:31:c5:1a:0d:74:54:3e:ce:39:0a:0e:e5:ee:f5:67:a9:
cd:a4:54:f6:63:2b:af:8f:9b:c9:a8:e0:69:a5:89:37:fc:07:
15:23:2f:19:39:6c:a3:f0:44:60:b8:a5:45:86:d0:ad:d5:f5:
61:00:15:99:74:cb:5d:c3:3d:95:7f:83:33:91:7d:ea:1c:bf:
7e:8e:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:20 2026 by rpki-client