Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/Ote8Xple36NOljGpswnBnv1BVHg.roa
File: Ote8Xple36NOljGpswnBnv1BVHg.roa (raw, json)
Hash identifier: 7PcKnm0HqFWloTnBPRiK0Jc5QCuqif0gaeoULdBF7ck=
Subject key identifier: 3A:D7:BC:5E:99:5E:DF:A3:4E:96:31:A9:B3:09:C1:9E:FD:41:54:78
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 019D2A8736E0A678CCB1A050A416507582A8
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/Ote8Xple36NOljGpswnBnv1BVHg.roa
Signing time: Thu 26 Mar 2026 14:23:17 +0000
ROA not before: Thu 26 Mar 2026 14:23:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209824
IP address blocks: 85.209.52.0/24 maxlen: 24
85.209.53.0/24 maxlen: 24
85.209.54.0/24 maxlen: 24
85.209.55.0/24 maxlen: 24
2a09:9340::/30 maxlen: 30
2a09:9344::/30 maxlen: 30
2a09:9344:0:500::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:87:36:e0:a6:78:cc:b1:a0:50:a4:16:50:75:82:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Mar 26 14:23:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ad7bc5e995edfa34e9631a9b309c19efd415478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:dc:27:78:98:d7:4c:c7:b3:69:7a:ed:42:
73:79:44:cb:55:25:b5:7e:e2:36:60:42:d8:1e:39:
6c:8f:4d:e3:8e:51:42:4b:22:e0:e0:a0:1b:1b:a1:
2c:1e:ea:8e:39:4d:00:8b:07:f6:bc:9d:9d:df:0a:
67:be:04:07:4a:8b:3f:db:19:2f:78:95:ad:f4:67:
8b:63:7a:7d:d6:e4:e9:47:47:86:71:2c:1d:75:ce:
43:ed:11:d0:84:78:48:8e:76:03:df:28:67:e7:3c:
58:2d:70:ee:0d:7f:93:00:91:26:80:6b:32:87:56:
51:7a:24:8e:5c:96:9c:1b:5c:56:d1:29:e1:eb:5e:
1f:e4:1a:c0:f9:37:01:3f:b4:8f:aa:3a:7a:97:bb:
27:a5:34:81:86:35:89:bc:5e:8d:37:55:ee:1b:b2:
ca:e7:5b:b1:50:43:7e:89:cb:ed:1a:ed:d1:c0:25:
15:0e:8c:c9:ff:bc:37:62:32:f5:14:f3:1b:48:4b:
18:e7:eb:71:34:a7:8b:2c:f5:c8:32:5b:8d:26:42:
94:46:9a:8e:a6:63:ea:06:94:fc:9e:85:9a:6b:74:
bf:c3:fd:4b:dc:f4:9d:49:26:b3:70:6a:5c:d1:82:
14:a9:93:1f:4a:5a:68:39:09:68:ad:98:ab:b3:39:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D7:BC:5E:99:5E:DF:A3:4E:96:31:A9:B3:09:C1:9E:FD:41:54:78
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/Ote8Xple36NOljGpswnBnv1BVHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.52.0/22
IPv6:
2a09:9340::/29
Signature Algorithm: sha256WithRSAEncryption
27:01:cc:e3:f7:8f:52:b8:f8:12:87:46:ae:b6:fe:ab:57:d1:
70:fe:a7:ae:2b:fd:48:10:82:6b:8a:1a:e7:68:78:91:a5:23:
08:71:7e:a1:db:9e:3d:5d:26:90:06:45:17:e8:c8:ad:8d:9a:
29:99:6a:9c:e2:d9:f0:d6:c4:a1:33:fa:78:6e:23:67:a3:4f:
7d:be:0e:e8:14:cd:13:27:84:33:28:5d:da:1d:1d:24:10:5e:
cc:1f:96:50:cc:a3:dd:5f:ec:c7:0c:1e:a2:b4:9a:0f:00:85:
6b:1d:68:2c:ec:f0:a9:5c:ec:a0:dc:06:22:18:1d:a1:ad:da:
18:46:ee:f1:8f:0e:06:d6:8f:e2:82:d2:65:05:78:db:b1:14:
cc:62:a5:8b:3a:51:17:fe:42:7e:51:29:42:5c:78:d4:61:11:
9f:d8:0a:07:68:87:52:0e:b9:c4:f3:c2:9d:e0:23:19:c1:d5:
be:90:5a:5e:27:6b:57:fa:77:73:a9:60:40:b3:d5:03:b8:c7:
17:e9:43:07:8a:93:1b:a5:31:5f:3b:36:7d:56:68:6e:07:ed:
a4:80:32:4e:7e:ca:f2:46:42:d9:cb:14:2e:93:c7:cf:4a:f5:
85:6b:7e:31:58:05:51:27:62:ff:49:f5:fd:de:2f:71:f2:5b:
68:a5:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:26:28 2026 by rpki-client