Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/p8KWXhQ17kNHqWtAUgCDpcUShPM.roa
File: p8KWXhQ17kNHqWtAUgCDpcUShPM.roa (raw, json)
Hash identifier: yT7/vJlEJytYxIwgAmSPUlSELtY4hqOC1H64eBjtuzU=
Subject key identifier: A7:C2:96:5E:14:35:EE:43:47:A9:6B:40:52:00:83:A5:C5:12:84:F3
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A0AE93F60CC4EDCDE24873758D45EC05E9
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/p8KWXhQ17kNHqWtAUgCDpcUShPM.roa
Signing time: Thu 17 Sep 2026 08:55:27 +0000
ROA not before: Thu 17 Sep 2026 08:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 85.232.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:93:f6:0c:c4:ed:cd:e2:48:73:75:8d:45:ec:05:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Sep 17 08:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7c2965e1435ee4347a96b40520083a5c51284f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:83:d7:94:c4:55:a3:b5:00:6d:9b:b8:54:
66:69:f0:bb:07:89:b9:2f:5b:df:66:f6:1c:5e:ce:
bb:12:3d:ea:e0:61:fa:49:b7:cb:8d:10:18:9c:87:
bf:a4:08:89:8f:d3:90:b7:8d:63:53:d9:12:53:25:
86:8d:ed:2f:7e:e6:0f:12:30:8d:a0:4f:46:85:77:
63:94:2a:09:8c:d5:f1:ed:71:aa:d9:ba:ad:5a:ad:
7c:00:7d:9e:91:a1:05:71:ef:27:30:69:1d:77:f7:
1e:f3:6c:6a:54:fc:dc:20:36:b2:fc:63:bd:fa:aa:
b4:7b:ff:96:49:45:00:8c:80:25:e9:26:b8:6d:b5:
59:c4:89:f1:14:5d:37:aa:84:b5:19:4c:82:4e:70:
41:1f:fc:0a:a2:a0:72:61:1c:0c:d4:e1:f2:94:35:
ec:03:77:9f:1b:a4:92:7f:c6:99:61:03:1b:5b:31:
ac:f9:2f:0a:2e:96:68:cd:e7:50:8c:15:e5:46:a5:
38:44:4b:41:5b:1f:2b:8f:2c:1f:31:33:9c:9d:c8:
8c:2b:d8:34:35:cf:93:51:fb:74:f4:ed:29:20:70:
e5:df:e1:3f:cb:db:71:46:f4:bf:cf:c6:f0:f2:cb:
f5:02:26:73:6c:54:13:7e:ea:ce:db:dc:e8:5f:9c:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:96:5E:14:35:EE:43:47:A9:6B:40:52:00:83:A5:C5:12:84:F3
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/p8KWXhQ17kNHqWtAUgCDpcUShPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e0:f3:ea:88:2d:10:14:8a:ae:06:dd:66:5d:1c:70:9a:28:
d9:af:f1:44:87:1e:f1:1e:e8:c5:de:93:10:20:a7:ad:b4:d5:
c7:d1:5b:07:c8:8c:6e:d0:59:a4:e3:ae:4c:96:fa:7b:20:fe:
0b:4e:26:bb:ae:fe:1f:cd:55:d8:94:8c:54:76:c7:aa:25:43:
00:bd:bb:91:53:c9:17:ee:f0:ab:a9:77:2d:72:22:29:a3:fe:
72:b3:21:6d:cc:6d:ac:f0:cf:99:3a:61:3b:27:a0:2b:eb:8e:
75:e8:3a:6c:89:f5:fc:28:c6:96:ef:53:ad:cd:95:aa:38:fd:
22:4c:03:9b:09:3e:4c:33:c6:a0:ff:9b:5c:af:e9:f8:43:1a:
65:6b:2f:a5:f8:ce:e7:1d:f6:ab:af:a3:e8:2b:07:f8:91:c0:
4c:d0:a3:7f:03:f5:be:b1:96:d1:3f:88:1b:ec:31:3f:d4:2f:
48:42:7f:87:99:5c:ee:8b:df:e9:9c:8c:53:61:c4:9d:bd:23:
df:53:e4:fd:b6:dd:8d:ab:00:26:ea:00:dd:a6:b2:cc:60:6a:
28:30:e8:7b:d9:2e:50:a4:d9:c5:38:2b:56:5b:23:bd:63:d3:
7f:80:d5:bc:f6:04:16:93:e0:63:31:d5:74:2d:c3:2e:30:53:
8b:8f:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:43 2026 by rpki-client