Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/DQFOw0x8RJL47XlL4ZturBkmc6E.roa
File: DQFOw0x8RJL47XlL4ZturBkmc6E.roa (raw, json)
Hash identifier: R/q0l9NVDtxc2lMCCEWPf2Muc4aJ1zn9HBgJtXqaF0o=
Subject key identifier: 0D:01:4E:C3:4C:7C:44:92:F8:ED:79:4B:E1:9B:6E:AC:19:26:73:A1
Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial: 019F295461DE11F34915FAE930E7F1966952
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/DQFOw0x8RJL47XlL4ZturBkmc6E.roa
Signing time: Fri 03 Jul 2026 18:53:43 +0000
ROA not before: Fri 03 Jul 2026 18:53:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215708
IP address blocks: 85.8.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:54:61:de:11:f3:49:15:fa:e9:30:e7:f1:96:69:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Validity
Not Before: Jul 3 18:53:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d014ec34c7c4492f8ed794be19b6eac192673a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:47:e5:9d:50:8f:14:7d:45:30:03:da:49:
d3:9c:35:d6:dc:c0:d9:cd:81:47:2e:29:c2:ef:4a:
f9:65:55:21:bc:28:d0:52:8e:90:ae:f2:ed:0d:27:
fc:37:6f:41:88:8c:9c:58:d7:2c:9e:b1:a4:9a:31:
47:0c:31:fc:d8:aa:99:1b:1c:bc:4a:d0:bf:92:76:
46:0d:17:13:f5:f0:dc:fc:d1:0e:87:51:00:14:d3:
27:51:8c:16:7e:42:44:52:47:ec:bf:bb:c9:40:17:
8a:55:66:1c:e3:c2:20:5b:81:fd:c5:8e:df:61:30:
be:ac:88:aa:15:ef:bb:0c:16:1d:34:27:17:35:e6:
a7:a8:b7:60:e3:85:ba:0a:91:8e:ba:8e:1c:1f:0a:
bf:95:25:71:78:39:ea:e7:11:ea:6c:8b:9d:c9:7f:
3f:a1:24:52:bb:a3:56:13:1a:47:40:a1:63:f0:df:
cd:ff:f9:4e:5f:21:af:3d:4d:0b:80:c5:e3:9d:5c:
df:f4:cc:cc:e7:ea:f9:dd:f6:31:b8:51:7f:28:b8:
c1:92:41:fd:b8:5f:45:84:8d:14:6f:66:a2:fc:14:
8a:e7:51:b3:21:24:49:88:44:a4:90:9c:c4:fe:29:
30:67:c4:aa:b2:5c:83:5a:0c:75:9b:f3:5f:1a:13:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:4E:C3:4C:7C:44:92:F8:ED:79:4B:E1:9B:6E:AC:19:26:73:A1
X509v3 Authority Key Identifier:
keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/DQFOw0x8RJL47XlL4ZturBkmc6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.230.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:4c:31:51:2c:6b:6d:9b:c9:20:cd:de:63:48:5d:a5:5e:b8:
04:64:af:3a:88:b7:cc:7d:29:b9:91:08:de:ea:af:e0:a2:bd:
39:ac:ed:af:a1:05:c8:74:46:d7:b0:16:bf:88:e9:10:1b:11:
f0:b0:17:9a:40:d2:01:74:78:5f:57:e4:19:0b:31:bb:dd:50:
e0:1a:90:1d:0d:62:9b:21:aa:02:17:2f:10:a9:b8:d6:6f:6c:
c7:67:e2:d7:72:ca:e0:bb:ed:04:be:36:0e:67:b7:62:bd:88:
6b:12:8e:4d:c9:f2:c2:9d:de:4d:19:04:42:3e:b3:5b:87:2f:
da:5e:73:97:f6:71:ed:ef:c8:ee:16:59:25:2f:ad:9d:e1:e8:
25:8d:c2:85:24:76:3a:fa:e3:ac:50:13:bf:81:4a:9e:1b:02:
13:3b:b9:29:a1:de:a9:2d:99:1d:95:db:d8:76:0c:05:47:d8:
88:47:bb:14:71:d5:2b:ae:91:4e:68:88:9b:ec:f2:f6:ea:3a:
7a:42:f6:f4:64:ea:f3:ad:ce:1e:02:cb:23:5c:06:a9:b9:be:
66:88:26:f9:3a:b1:1e:8d:1c:fd:11:8a:79:ce:30:dc:a5:96:
9f:33:c9:66:1e:e7:b3:a9:35:3d:73:24:45:c1:0e:04:e6:20:
f8:fa:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:03 2026 by rpki-client