Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/l8TSNwU2prw2gsntuaJ9QdkRHKw.roa
File: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (raw, json)
Hash identifier: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=
Subject key identifier: 97:C4:D2:37:05:36:A6:BC:36:82:C9:ED:B9:A2:7D:41:D9:11:1C:AC
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019CB940F16A9C91C94A446BED091EB800DE
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/l8TSNwU2prw2gsntuaJ9QdkRHKw.roa
Signing time: Wed 04 Mar 2026 14:29:26 +0000
ROA not before: Wed 04 Mar 2026 14:29:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150785
IP address blocks: 85.149.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 19:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:40:f1:6a:9c:91:c9:4a:44:6b:ed:09:1e:b8:00:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Mar 4 14:29:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97c4d2370536a6bc3682c9edb9a27d41d9111cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:bb:7b:a7:59:8d:1c:12:96:8c:f8:7d:ce:
29:8e:8b:7c:c5:a1:0d:0c:9e:d0:07:c8:f7:0b:d3:
22:24:86:26:73:55:b8:71:ab:00:25:74:ab:12:4f:
ea:7d:b2:34:f2:19:d3:3f:ec:11:36:c0:28:d3:c6:
12:ee:53:79:39:5f:ea:07:b0:b3:75:b0:d2:df:b6:
2e:5c:a9:2f:23:da:93:5f:59:c0:b0:2b:53:d6:f1:
cc:56:7e:29:19:8f:98:94:95:c4:5c:a9:8a:59:df:
2d:45:90:d2:41:27:ef:1f:01:4f:ef:00:60:34:e0:
2f:27:53:12:7d:32:b3:be:8d:f5:d6:98:d4:82:7e:
51:08:21:38:15:8d:9d:5e:24:60:09:21:4b:11:fd:
99:0d:c9:37:12:c4:1e:6d:aa:4c:44:d3:0d:94:3a:
9c:e2:92:72:01:48:dc:cc:0b:3e:45:94:92:a9:c9:
38:ed:b6:b5:80:13:18:b9:e1:80:a0:a0:51:fa:df:
39:6f:65:f1:c1:5d:b7:fb:b1:8c:8e:8b:90:a7:78:
11:d4:6b:5b:36:13:fb:6c:7c:96:fa:33:04:f4:81:
14:69:12:b7:6f:35:bb:54:2a:2e:01:63:10:70:2c:
6d:21:d0:d0:9c:2f:44:d4:cb:db:28:26:9c:43:6f:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:D2:37:05:36:A6:BC:36:82:C9:ED:B9:A2:7D:41:D9:11:1C:AC
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/l8TSNwU2prw2gsntuaJ9QdkRHKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.149.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a8:f1:bd:b4:ea:2c:24:4d:57:7b:16:7f:27:05:6b:51:c3:
07:06:46:a8:9b:8f:89:c9:fb:8d:aa:c5:a7:d4:68:22:22:14:
2a:3a:38:7a:02:3c:33:14:0c:57:56:2e:9d:96:13:7e:3d:25:
4f:64:2f:d8:50:84:5f:d2:58:60:be:e0:fe:32:58:7b:5d:69:
7e:49:77:57:24:43:2c:94:9f:5c:79:99:72:bb:08:af:e1:a1:
53:2f:6d:e0:69:4c:d2:09:e6:c4:3b:1e:38:20:6f:49:7a:47:
60:3c:72:50:0f:e2:d3:02:b3:05:2c:9d:2b:c7:b1:77:ba:19:
d3:87:5f:14:09:08:70:e1:5e:0c:97:39:55:2a:2b:59:5d:87:
19:fc:59:94:07:37:4e:90:d7:8d:e8:04:e5:b5:52:70:f4:1b:
da:27:8d:78:fc:9f:c9:98:47:82:0c:a3:42:91:db:4f:3d:b3:
79:27:55:5b:1a:1b:26:b0:d1:f2:8d:71:ee:be:4a:e5:f8:c3:
e1:44:6d:ca:12:d4:00:dc:0e:d9:61:84:eb:ab:ed:0e:1b:fc:
c6:a1:44:8c:d0:42:cd:3e:0a:f3:7a:aa:9c:16:eb:1e:8c:63:
c3:d1:b1:ba:85:24:d9:f2:4c:42:db:51:2d:db:f6:0c:95:5a:
8e:56:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 03:03:31 2026 by rpki-client