Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Kql7sWsn4UYYA09a8BP8DXNKrXQ.roa
File: Kql7sWsn4UYYA09a8BP8DXNKrXQ.roa (raw, json)
Hash identifier: NZFEAYFKfMBK0+KgmrnarU7SdVkGHvRNzkVDZcNMC10=
Subject key identifier: 2A:A9:7B:B1:6B:27:E1:46:18:03:4F:5A:F0:13:FC:0D:73:4A:AD:74
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0822866ABB11C1D93E6B37F147278E2EF
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Kql7sWsn4UYYA09a8BP8DXNKrXQ.roa
Signing time: Tue 08 Sep 2026 17:54:40 +0000
ROA not before: Tue 08 Sep 2026 17:54:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 85.8.144.0/23 maxlen: 24
85.8.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:28:66:ab:b1:1c:1d:93:e6:b3:7f:14:72:78:e2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 8 17:54:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2aa97bb16b27e14618034f5af013fc0d734aad74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:66:6c:26:cf:1a:9a:5d:58:ad:93:5f:4f:07:
89:6d:ff:8e:13:92:b6:97:66:5f:53:94:56:08:81:
5e:70:38:a9:1b:38:40:08:f3:90:34:ca:f2:a2:1b:
40:2a:4e:b5:21:4b:a9:40:5c:e4:9f:02:f7:19:b3:
8b:01:a7:58:49:7f:81:8f:55:57:84:43:d0:07:df:
a2:58:c7:8a:ba:5b:a6:37:e6:0d:d7:a8:ad:26:0b:
07:d1:f9:29:75:6b:51:50:b6:f5:a1:1b:aa:52:71:
d6:c4:7b:e8:80:23:d7:c0:5c:82:1f:fd:7e:cc:02:
1d:1f:8c:3d:5a:9b:99:7b:c9:34:1e:dd:82:0d:07:
c8:41:9d:7c:f8:41:c2:9a:b3:98:cb:c9:fb:14:cd:
82:f9:9b:3a:3d:ec:32:bc:27:4b:6d:2f:4d:00:ef:
0e:62:a1:3b:63:76:35:c5:58:f8:30:d9:c8:1d:40:
ea:35:21:05:8a:00:dc:69:ac:67:82:c3:e6:c7:a1:
27:5e:96:4a:0f:5d:cc:89:48:99:04:b6:ca:75:cf:
05:69:67:ab:2f:86:e8:41:ad:62:31:18:26:fb:bd:
3f:4f:cc:76:02:04:db:93:5d:93:d8:b5:69:7c:73:
3f:8b:c9:d1:57:c2:b9:ac:d0:a3:f1:d2:51:4b:ac:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A9:7B:B1:6B:27:E1:46:18:03:4F:5A:F0:13:FC:0D:73:4A:AD:74
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Kql7sWsn4UYYA09a8BP8DXNKrXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
67:ae:2c:ec:04:25:8b:c6:e4:40:b1:5e:d4:1d:22:88:93:4e:
47:82:51:32:9a:65:3e:77:93:96:a3:8f:b2:9d:15:46:0b:ae:
32:83:72:02:f3:29:3d:4a:23:fe:30:4a:21:5c:71:35:6d:ad:
e4:2a:00:0b:5d:b1:8f:39:95:28:28:06:50:9b:ea:1f:14:56:
8b:78:81:fe:be:29:95:b8:fb:c5:ed:1a:56:2d:24:0e:97:48:
79:32:f1:3f:41:fb:68:f9:95:84:4f:a1:c4:6f:51:6a:e4:19:
b7:75:a9:8e:41:25:c9:d5:32:83:63:b2:03:cc:09:ea:c4:e1:
24:a4:f8:b2:44:28:87:eb:c5:2e:3e:c4:81:a8:67:c4:ba:15:
18:6b:3d:3c:8c:de:99:ac:75:ba:e3:60:19:51:62:6b:02:09:
08:a3:6d:e7:bb:7e:13:27:76:d3:57:65:1b:6b:34:97:2a:97:
53:cb:82:76:16:57:19:ef:34:97:52:34:94:d6:be:77:ac:f9:
3e:4f:75:0b:57:82:18:23:45:d0:a6:3a:5f:84:81:97:e9:2c:
08:97:b8:c3:65:67:75:ab:c3:81:e0:68:bd:77:ee:06:63:e2:
54:55:d5:d0:54:5f:53:7d:3b:7e:83:e0:7c:5f:e8:4e:02:aa:
8c:2b:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:15:29 2026 by rpki-client