Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iBFVawCnQRdByXytWBtE9h9OgTs.roa
File: iBFVawCnQRdByXytWBtE9h9OgTs.roa (raw, json)
Hash identifier: R5bJvI0l5FzlVjyp9Pn2vQ5mJYhMwqQnrnkADhd3bT8=
Subject key identifier: 88:11:55:6B:00:A7:41:17:41:C9:7C:AD:58:1B:44:F6:1F:4E:81:3B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD0CA2706C61CD5EE383377790C2B55EE
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iBFVawCnQRdByXytWBtE9h9OgTs.roa
Signing time: Wed 05 Aug 2026 07:18:56 +0000
ROA not before: Wed 05 Aug 2026 07:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26042
IP address blocks: 80.240.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:ca:27:06:c6:1c:d5:ee:38:33:77:79:0c:2b:55:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 5 07:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8811556b00a7411741c97cad581b44f61f4e813b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:a0:94:f4:2a:b7:bb:e4:76:bc:9e:5c:71:
ad:cf:c0:21:d8:69:07:9e:36:d8:31:a5:e6:15:1f:
69:1d:09:78:07:65:ea:84:f9:39:64:5e:48:3c:a3:
53:6b:e3:90:93:17:35:b8:b4:a0:38:d7:2c:ff:b8:
f0:3c:39:67:2a:40:d1:e4:5b:05:44:ff:a4:74:26:
97:93:63:80:8d:eb:79:f3:03:ad:f2:ed:09:04:46:
6f:a6:91:98:34:a1:3e:6a:ef:fc:25:27:99:2a:9b:
3f:10:47:b6:8e:0d:ee:e1:28:a0:18:1c:e6:2e:52:
19:22:14:61:70:60:4d:9b:1d:61:9b:f6:49:8a:04:
11:a2:2f:ed:9a:6e:7f:65:2a:8e:3d:8c:a8:45:62:
94:4f:22:f0:27:63:2a:09:5a:96:ee:0b:3d:e4:4f:
d4:d8:dd:66:ca:c4:63:89:f3:a5:f1:15:35:26:60:
82:9d:9c:44:7c:d8:47:6e:b8:06:12:cb:52:04:08:
ca:8c:f9:06:be:ac:54:a5:10:66:0a:9b:ae:39:b6:
be:b5:6d:bc:d5:ef:f0:85:e0:e8:51:4c:4a:ed:6e:
2c:33:42:c1:5c:cd:43:37:6d:30:4f:47:39:af:13:
dd:a6:75:ef:a9:9f:6f:8e:1b:4f:7e:af:90:4e:d1:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:55:6B:00:A7:41:17:41:C9:7C:AD:58:1B:44:F6:1F:4E:81:3B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iBFVawCnQRdByXytWBtE9h9OgTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:10:60:8c:39:30:51:45:93:c3:c9:09:d7:c6:70:df:ca:1f:
3c:6d:f3:0c:35:5c:ce:5d:65:7f:cc:a4:75:df:ca:b0:7c:ca:
6e:c0:a2:66:ce:78:e8:e1:ba:fd:0c:ce:3e:b2:79:a9:8c:4f:
17:07:6e:72:79:73:66:da:0b:b0:3c:bf:7b:b0:d4:4a:a5:ae:
e4:0e:dc:d6:e4:c3:98:ca:b8:59:cc:81:fb:98:25:2c:61:c9:
53:6a:dc:25:12:83:63:b3:23:22:29:fd:02:49:70:c1:40:4b:
9d:18:e0:4c:b6:73:a9:1c:d2:8e:ed:74:48:cf:43:7e:2f:23:
2d:f6:02:cc:d9:d4:9d:bf:38:8d:6f:61:39:c4:7b:eb:1f:3f:
4e:da:3d:8b:8d:1a:7e:d9:4b:ca:be:0c:aa:11:3e:f0:02:df:
12:a1:46:e9:0f:58:f0:a1:53:82:4b:10:2c:0c:69:e0:4e:48:
7b:23:b8:78:24:f5:ac:a0:c7:96:ba:2b:10:2d:d9:e5:1d:3b:
da:d3:57:cd:93:59:8d:53:f7:94:80:98:7f:6e:34:42:64:37:
9b:9b:b7:11:a6:73:83:2b:1f:8f:1f:5f:7d:16:7c:90:50:43:
56:1b:12:21:0e:f1:61:1e:08:cd:16:b9:d7:f6:8a:e6:12:23:
3c:61:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 19:55:53 2026 by rpki-client