Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/fXOsQ3j-NO7BLqWTYtUzhCUluo8.roa
File: fXOsQ3j-NO7BLqWTYtUzhCUluo8.roa (raw, json)
Hash identifier: 8on9Wj7wgWS3bgbMN8K27Nuy/bvBtTxIn35r63/Pk1c=
Subject key identifier: 7D:73:AC:43:78:FE:34:EE:C1:2E:A5:93:62:D5:33:84:25:25:BA:8F
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A01A04F5E8601D674EA272A51A38661070
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/fXOsQ3j-NO7BLqWTYtUzhCUluo8.roa
Signing time: Wed 19 Aug 2026 12:35:27 +0000
ROA not before: Wed 19 Aug 2026 12:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205548
IP address blocks: 216.23.80.0/22 maxlen: 24
216.23.96.0/22 maxlen: 24
216.23.104.0/22 maxlen: 24
216.23.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:04:f5:e8:60:1d:67:4e:a2:72:a5:1a:38:66:10:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Aug 19 12:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d73ac4378fe34eec12ea59362d533842525ba8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:a9:bd:a8:b7:8d:0b:3f:15:a1:c4:d8:af:
e1:d5:9b:ad:a6:e3:2d:51:14:ed:17:bf:4b:b4:52:
d3:ba:81:80:c2:60:16:29:df:36:5a:42:3e:bc:7b:
b2:02:bc:fe:7b:71:f6:3f:2b:aa:24:77:47:3e:2d:
ed:ef:39:ef:3d:28:1e:c1:f2:d3:d4:eb:e5:ad:49:
01:6e:b0:9d:63:e9:f4:c3:8d:5a:53:b7:df:05:08:
51:2a:66:8b:31:62:f9:33:13:61:2d:e9:08:00:09:
7d:a1:cb:5e:b6:84:25:aa:c8:87:5c:34:60:54:d7:
23:ac:05:bd:c5:74:38:c2:c8:64:b2:79:ea:41:45:
e2:bf:74:2c:03:81:00:2b:3e:a5:9e:af:13:ff:3b:
af:a3:a4:aa:39:d5:68:82:8c:7d:8e:ba:17:fb:52:
81:e3:68:d3:62:7b:45:c5:1a:d4:17:ec:7a:35:38:
e0:50:ac:e9:49:48:59:d2:56:9f:6c:3a:bd:d9:9c:
12:77:93:5c:c2:7f:b3:60:64:2f:69:d0:16:c1:bb:
aa:42:1c:7b:20:10:17:ba:14:71:52:6d:b5:d7:54:
63:84:16:99:8e:e7:af:48:05:a9:36:5c:eb:3d:8b:
a1:be:24:f0:fe:cd:47:85:72:14:33:11:b2:2a:4f:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:AC:43:78:FE:34:EE:C1:2E:A5:93:62:D5:33:84:25:25:BA:8F
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/fXOsQ3j-NO7BLqWTYtUzhCUluo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.23.80.0/22
216.23.96.0/22
216.23.104.0/22
216.23.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:d6:03:5e:d7:1c:4c:99:59:1c:61:08:dd:5d:63:35:f7:35:
3a:55:10:4f:45:f9:bb:55:0f:98:a0:5b:28:f7:43:61:ad:ac:
1e:7e:b4:d1:fd:85:c1:1e:80:69:b8:20:b0:06:71:0d:ea:4a:
b7:c4:58:1f:4d:7e:a6:6f:79:ce:f3:2d:f3:92:97:12:7a:ef:
4d:89:06:1d:0f:1d:9b:d0:09:b6:e0:94:fa:40:b8:63:97:6f:
cc:d7:3f:e0:3d:4a:d6:9a:d5:7b:83:c0:cf:78:ff:b1:31:2f:
68:37:42:ea:af:b6:c9:4a:9a:e0:34:40:e0:97:4f:be:06:c2:
50:cd:4e:e6:81:f5:a2:87:9f:4b:a1:cf:61:bb:07:b8:a6:36:
9f:bb:d3:f8:cb:b6:bc:4e:9f:cd:67:11:ca:0f:46:87:15:7f:
06:20:35:4b:2c:e2:cb:85:56:d3:10:16:a7:ad:a1:67:bb:9d:
e3:53:f2:03:44:a9:49:3f:3a:14:13:39:a4:3a:6e:97:b5:00:
54:bb:9b:66:b3:ea:3b:e5:72:47:91:88:8a:2d:8e:9a:df:18:
1e:56:1e:8e:1b:1b:02:33:bb:9d:62:f1:fc:2b:5a:ee:a5:b7:
02:81:47:2a:cc:04:b5:96:b7:38:df:e2:a6:a3:5f:a4:ec:22:
d7:9a:8a:d4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaAaBPXoYB1nTqJypRo4ZhBwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwODE5MTIzNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDczYWM0Mzc4ZmUzNGVlYzEyZWE1OTM2MmQ1MzM4NDI1MjViYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19Wpvai3jQs/FaHE2K/h1ZutpuMt
URTtF79LtFLTuoGAwmAWKd82WkI+vHuyArz+e3H2PyuqJHdHPi3t7znvPSgewfLT
1OvlrUkBbrCdY+n0w41aU7ffBQhRKmaLMWL5MxNhLekIAAl9octetoQlqsiHXDRg
VNcjrAW9xXQ4wshksnnqQUXiv3QsA4EAKz6lnq8T/zuvo6SqOdVogox9jroX+1KB
42jTYntFxRrUF+x6NTjgUKzpSUhZ0lafbDq92ZwSd5Ncwn+zYGQvadAWwbuqQhx7
IBAXuhRxUm2111RjhBaZjuevSAWpNlzrPYuhviTw/s1HhXIUMxGyKk9cyQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFH1zrEN4/jTuwS6lk2LVM4QlJbqPMB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvZlhPc1Ezai1OTzdCTHFXVFl0VXpoQ1VsdW84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQC2BdQAwQC
2BdgAwQC2BdoAwQC2Bd4MA0GCSqGSIb3DQEBCwUAA4IBAQAb1gNe1xxMmVkcYQjd
XWM19zU6VRBPRfm7VQ+YoFso90NhrawefrTR/YXBHoBpuCCwBnEN6kq3xFgfTX6m
b3nO8y3zkpcSeu9NiQYdDx2b0Am24JT6QLhjl2/M1z/gPUrWmtV7g8DPeP+xMS9o
N0Lqr7bJSprgNEDgl0++BsJQzU7mgfWih59Loc9huwe4pjafu9P4y7a8Tp/NZxHK
D0aHFX8GIDVLLOLLhVbTEBanraFnu53jU/IDRKlJPzoUEzmkOm6XtQBUu5tms+o7
5XJHkYiKLY6a3xgeVh6OGxsCM7udYvH8K1rupbcCgUcqzAS1lrc43+Kmo1+k7CLX
morU
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:30 2026 by rpki-client