Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/s9mIDmbQfjDng3F9afVsbGicW3Y.roa
File: s9mIDmbQfjDng3F9afVsbGicW3Y.roa (raw, json)
Hash identifier: T2f9fV0PTZVsLbj7OMR7LqfcLJh8reznahmZKNLLplk=
Subject key identifier: B3:D9:88:0E:66:D0:7E:30:E7:83:71:7D:69:F5:6C:6C:68:9C:5B:76
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A055E73C527F441CEB680E2E069E42E7F3
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/s9mIDmbQfjDng3F9afVsbGicW3Y.roa
Signing time: Mon 31 Aug 2026 03:40:12 +0000
ROA not before: Mon 31 Aug 2026 03:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 85.8.148.0/24 maxlen: 24
185.176.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:e7:3c:52:7f:44:1c:eb:68:0e:2e:06:9e:42:e7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 31 03:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3d9880e66d07e30e783717d69f56c6c689c5b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:04:b6:5c:c4:58:21:bb:1f:d3:60:42:d9:
af:26:27:c9:4d:7e:bd:4f:a5:15:15:85:70:65:95:
3c:b2:84:4f:0a:e9:65:e4:bb:46:5f:ee:dc:94:5d:
7b:2f:6c:21:16:ae:e8:ed:7c:9d:62:49:e3:95:1f:
6c:af:33:0d:95:bb:77:c0:7a:87:b7:fd:e1:d9:ae:
69:a3:58:4d:9e:b9:f9:69:a8:8b:f5:91:99:43:99:
5c:4a:1e:e8:25:76:7c:ea:a2:78:1f:96:7e:16:ba:
b5:6a:26:a3:b9:78:2e:92:01:6c:a4:8d:d6:4c:61:
c0:f9:75:4d:b9:91:39:09:f7:28:e9:f3:f0:f1:d9:
9b:8d:58:c1:e3:c7:17:de:6d:3b:9b:03:45:63:7e:
94:8d:61:f5:13:77:80:cf:4f:c2:a4:13:bb:e2:2c:
e5:f6:b9:f7:17:0f:74:3e:a8:74:95:10:72:9d:34:
44:60:96:1a:59:0e:d2:6a:c0:8e:50:ae:49:3e:68:
ea:e2:8e:06:7b:f1:e0:0e:c9:55:73:08:37:59:9e:
ab:32:18:9b:42:de:1b:27:c2:2f:2a:31:ea:9d:29:
a7:9e:ee:63:05:6f:4c:66:8c:5b:db:11:92:a9:ee:
23:3d:64:bf:95:fd:d2:66:a0:fb:4b:35:04:4d:6f:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:88:0E:66:D0:7E:30:E7:83:71:7D:69:F5:6C:6C:68:9C:5B:76
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/s9mIDmbQfjDng3F9afVsbGicW3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.148.0/24
185.176.88.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1b:d0:56:a5:e3:8c:44:28:91:a7:65:e0:d1:29:6a:79:48:
9e:b6:40:cc:88:8a:1a:76:f0:fa:3b:f9:3e:7a:06:aa:b0:fb:
a0:6c:00:6d:a9:4a:78:91:eb:f8:ab:0f:3f:d1:94:e4:85:dd:
29:75:98:1b:e8:53:c0:85:6b:db:08:5a:06:0c:1e:fe:7a:17:
fc:fa:b3:58:08:24:16:b9:ce:f5:80:5d:6a:48:6d:ad:b2:e9:
b8:cc:fb:30:49:91:9c:c9:b9:85:2a:a4:bf:98:7a:e8:84:39:
7b:74:ae:b9:fd:cb:54:e3:26:02:89:58:b1:3a:d2:79:86:cf:
d7:32:0e:43:4e:e8:04:4f:83:76:4c:64:64:66:fc:31:2a:c8:
bc:a2:78:ee:66:f4:53:fe:2e:4f:48:94:44:b2:07:3f:b6:8d:
f2:ea:cc:80:a8:f5:9f:fd:0d:26:06:98:fd:c1:e8:5a:ea:2a:
09:1f:8b:32:af:7f:f3:69:25:58:d8:36:e7:c3:a4:c1:0f:42:
14:ef:1a:98:c6:2b:03:ee:c9:48:f7:66:78:b7:71:84:99:64:
8c:15:bb:71:0e:65:e6:c9:9e:04:43:0d:df:e5:f4:11:1d:51:
7f:86:cd:eb:3b:16:f1:88:45:e3:65:70:0b:a6:eb:0d:03:15:
1e:85:25:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:12 2026 by rpki-client