Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/i-2Qajd4m8riLuobvPBkDzzfa5s.roa
File: i-2Qajd4m8riLuobvPBkDzzfa5s.roa (raw, json)
Hash identifier: kJTbL3ROqa3RXxMLEUptXN8oatw6z/BtfYm3rGnRJXI=
Subject key identifier: 8B:ED:90:6A:37:78:9B:CA:E2:2E:EA:1B:BC:F0:64:0F:3C:DF:6B:9B
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019DD8D93E1803A25153015901319597049C
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/i-2Qajd4m8riLuobvPBkDzzfa5s.roa
Signing time: Wed 29 Apr 2026 10:46:49 +0000
ROA not before: Wed 29 Apr 2026 10:46:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57008
IP address blocks: 85.198.88.0/22 maxlen: 22
85.198.88.0/24 maxlen: 24
85.198.89.0/24 maxlen: 24
85.198.90.0/24 maxlen: 24
85.198.91.0/24 maxlen: 24
90.156.222.0/23 maxlen: 23
90.156.222.0/24 maxlen: 24
90.156.223.0/24 maxlen: 24
176.123.180.0/22 maxlen: 22
176.123.180.0/24 maxlen: 24
176.123.182.0/24 maxlen: 24
176.123.183.0/24 maxlen: 24
185.36.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:d9:3e:18:03:a2:51:53:01:59:01:31:95:97:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Apr 29 10:46:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bed906a37789bcae22eea1bbcf0640f3cdf6b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:66:0b:0c:9f:2f:80:70:de:1f:90:33:c5:
02:40:bb:f6:8a:06:57:69:07:e9:b7:ba:b1:ad:ed:
e4:79:06:4c:bf:2a:c5:8a:c0:12:54:ce:91:12:0d:
0f:38:92:b7:8c:35:54:a3:da:82:52:d8:d8:94:af:
9b:43:74:9f:81:7a:5c:4b:7b:ce:52:04:07:89:a0:
bd:b2:03:56:bb:13:5f:9d:3c:48:d1:d3:28:dc:ad:
1a:63:38:c7:36:71:c3:2c:cc:73:75:47:31:4c:94:
2e:9b:61:11:36:9a:63:9a:84:ae:8d:4c:75:af:a6:
1c:ad:7b:0b:03:08:f2:42:32:cd:a5:bd:89:19:ac:
12:ad:04:71:5a:19:1d:d9:fc:d0:12:3b:ef:49:90:
53:7a:01:c8:64:f2:8b:bd:8d:f3:7e:b0:fc:75:c0:
ce:8e:f2:e8:55:31:ff:2b:2a:89:6d:27:a1:0f:0a:
d0:f6:ac:35:7b:32:03:5a:d9:73:81:cd:e3:1b:6b:
cf:c8:23:f2:3e:0d:2c:2a:17:1f:94:a6:4e:60:be:
21:45:14:a4:9e:80:c4:85:d3:0f:2c:cb:28:21:a7:
76:ed:a1:8e:37:31:5a:74:c5:1c:0b:2e:48:b4:2c:
3d:18:56:0a:7d:5a:d0:fb:55:f8:cc:82:20:37:a5:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:ED:90:6A:37:78:9B:CA:E2:2E:EA:1B:BC:F0:64:0F:3C:DF:6B:9B
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/i-2Qajd4m8riLuobvPBkDzzfa5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.88.0/22
90.156.222.0/23
176.123.180.0/22
185.36.144.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1d:aa:d4:1c:91:37:e9:5b:a6:a7:fc:1b:f9:47:b8:0d:f7:
4c:e1:a3:8d:da:d0:e7:d4:85:3d:36:ba:99:50:fb:28:16:49:
ba:4f:83:56:94:56:a2:22:56:5c:39:2a:41:e4:80:73:18:51:
7d:59:e4:39:f5:e0:73:db:57:4c:da:3b:59:4d:99:fa:ec:9d:
88:fd:2e:02:7e:fa:6a:4c:44:d7:47:26:2b:c2:18:55:80:0d:
e7:79:7f:16:00:07:7d:fb:2e:ae:e2:27:87:93:93:f8:b9:80:
a1:f4:d3:ce:67:86:1c:f8:c2:d5:26:46:a8:fc:26:6f:d2:07:
3b:41:7a:78:d1:fc:2f:f3:af:25:2d:4b:52:87:b1:ee:94:32:
24:d8:9c:ed:0e:b5:36:58:0e:1e:ef:6e:f6:4d:da:d1:fb:d6:
44:22:cc:c5:72:80:ff:fc:32:fc:d2:f1:d8:b2:7d:e9:51:44:
24:9a:a6:69:84:05:b6:88:e7:af:d4:cd:40:5a:6a:96:9d:16:
47:5a:8d:de:2b:8c:7c:2d:97:d8:bb:61:0e:04:36:37:58:3b:
7f:e9:d2:4a:94:34:3b:4d:cb:b0:6e:69:70:6b:17:65:3f:71:
93:00:e9:61:10:64:29:6b:e9:24:63:ef:a2:4a:2a:21:b0:51:
c9:a3:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:06 2026 by rpki-client