Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/dcxV05cvYUkIgORyVqd1s1fNqJI.roa
File: dcxV05cvYUkIgORyVqd1s1fNqJI.roa (raw, json)
Hash identifier: acPo4exLWv02xsjqAwsJbAI2iOJGolCAQCDfT8FFyc8=
Subject key identifier: 75:CC:55:D3:97:2F:61:49:08:80:E4:72:56:A7:75:B3:57:CD:A8:92
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019FC2C54324406CFFD8075B6C8BFFB3B87B
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/dcxV05cvYUkIgORyVqd1s1fNqJI.roa
Signing time: Sun 02 Aug 2026 13:58:55 +0000
ROA not before: Sun 02 Aug 2026 13:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211507
IP address blocks: 85.8.192.0/24 maxlen: 24
2a14:c380:35::/48 maxlen: 48
2a14:c380:50::/44 maxlen: 44
2a14:c380:70::/44 maxlen: 44
2a14:c380:90::/44 maxlen: 44
2a14:c380:130::/44 maxlen: 44
2a14:c380:c70::/44 maxlen: 44
2a14:c380:d70::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:c5:43:24:40:6c:ff:d8:07:5b:6c:8b:ff:b3:b8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Aug 2 13:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75cc55d3972f61490880e47256a775b357cda892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:4f:86:17:fc:41:72:de:86:32:73:83:4a:
c4:dc:b4:4c:0c:cb:4e:b3:67:17:f2:7c:5f:08:2f:
6e:1a:23:ea:fd:ca:5a:84:25:50:6d:86:e8:96:3c:
81:d9:94:df:ad:9c:93:41:2b:2e:23:12:30:28:9e:
34:b0:ea:85:2f:10:59:f6:0f:8e:ae:0a:24:25:b4:
b4:68:c7:6c:a4:5d:93:68:76:50:91:79:03:bb:7b:
85:e0:38:e8:72:00:3d:32:c9:d0:06:94:f1:e6:90:
9b:10:55:a9:e0:f7:a7:bc:14:f4:ac:9d:8d:ca:5a:
20:69:bd:fc:62:02:85:bb:07:7c:02:51:7e:c2:45:
17:c5:11:1a:d8:02:4a:32:b7:33:48:15:2f:0e:54:
65:38:9b:f7:56:f1:e4:b1:af:06:4b:3d:f6:a5:3e:
8e:c5:f0:06:b2:8b:40:a5:f1:ed:30:ab:e2:a5:ad:
1d:28:38:a9:f4:d7:1b:61:40:18:1f:3b:f6:cf:da:
13:fe:48:f7:0d:13:04:7b:9a:29:a0:2a:8d:50:22:
14:91:56:88:78:d3:30:b8:48:81:24:75:9a:36:7e:
6e:58:8f:c0:8b:8d:fa:68:52:15:e8:8d:67:9a:74:
28:74:75:26:ac:2a:64:45:bc:6b:f3:19:c4:71:82:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CC:55:D3:97:2F:61:49:08:80:E4:72:56:A7:75:B3:57:CD:A8:92
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/dcxV05cvYUkIgORyVqd1s1fNqJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.192.0/24
IPv6:
2a14:c380:35::/48
2a14:c380:50::/44
2a14:c380:70::/44
2a14:c380:90::/44
2a14:c380:130::/44
2a14:c380:c70::/44
2a14:c380:d70::/44
Signature Algorithm: sha256WithRSAEncryption
1a:12:d0:41:ab:c4:70:95:4a:57:4f:08:38:55:0b:d4:be:85:
34:d4:11:93:7c:e5:0b:80:a4:c1:50:e3:a4:1f:6e:a1:10:00:
89:bc:72:23:86:61:c4:bc:14:b1:69:73:04:c5:28:ae:c2:99:
39:14:09:b2:fa:cb:e5:d7:32:3e:70:ba:06:69:e8:1a:31:70:
e4:dd:79:25:3c:1d:9b:6b:76:75:1d:66:11:6f:ff:10:44:42:
ab:bd:40:7c:a6:98:d8:a2:26:eb:e4:12:f1:23:d5:a9:62:a1:
12:37:38:c1:ce:9f:6d:e3:30:71:0b:17:08:47:7b:b7:92:29:
a0:2f:18:e2:c6:ba:be:93:02:09:e0:16:4e:6b:2c:33:64:ce:
68:c2:2b:cd:dc:4d:90:3f:15:81:23:9d:39:60:54:57:47:1d:
34:21:4b:fe:07:6b:51:8f:25:d3:ec:ee:b4:a5:5c:8d:d6:93:
2d:08:49:ab:8b:13:8e:73:f8:e3:7f:94:75:91:2a:9c:e3:40:
b5:dc:c6:ec:2e:f7:67:5a:18:7c:23:4b:42:d9:80:b6:2e:47:
2e:60:2e:22:e2:40:ec:27:b3:22:26:ef:30:54:89:85:fe:07:
51:27:e4:94:d7:93:8e:6f:94:0c:0f:52:9f:50:46:cc:af:ee:
21:4e:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:18:38 2026 by rpki-client