Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/c8_6fx9na7RPLaZ9nrdFxDgY4xs.roa
File: c8_6fx9na7RPLaZ9nrdFxDgY4xs.roa (raw, json)
Hash identifier: t4zaMbAtnS1WUf26/eGpPUF7xAi1NOz7s/c1nr51Mjc=
Subject key identifier: 73:CF:FA:7F:1F:67:6B:B4:4F:2D:A6:7D:9E:B7:45:C4:38:18:E3:1B
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F2368911E8A7746C70079044FC68A65C5
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/c8_6fx9na7RPLaZ9nrdFxDgY4xs.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203436
IP address blocks: 185.224.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:91:1e:8a:77:46:c7:00:79:04:4f:c6:8a:65:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73cffa7f1f676bb44f2da67d9eb745c43818e31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:f2:36:72:11:61:9f:58:00:ce:ae:07:89:
f7:2d:09:67:50:47:93:52:44:4a:05:21:08:b1:a3:
65:03:a1:3b:0b:4e:77:31:3d:ab:9f:22:b3:90:c7:
49:14:5c:52:c6:84:12:a5:56:3b:4e:e5:0f:83:b8:
70:a1:92:4c:b2:93:f1:6c:65:ad:c8:91:be:95:35:
5c:b0:fa:b2:92:98:40:85:1a:2a:4f:93:1c:73:f0:
ea:1a:10:d6:0c:d1:72:25:01:00:ef:67:11:bf:a7:
ac:b1:04:77:02:3a:af:ba:b9:8f:52:2c:90:d5:8b:
8e:48:7c:67:75:d4:86:f6:c8:27:2c:4a:e7:c3:7f:
f8:88:59:8f:02:31:83:05:7f:be:3c:6a:8a:46:59:
b7:3c:50:9f:47:4b:80:26:1b:35:92:c1:fe:ed:9a:
24:4e:23:4e:3f:eb:03:d7:37:2a:6d:5a:bd:76:48:
3c:19:4e:ae:80:67:9f:85:3b:12:33:4e:c7:2d:52:
c0:f2:f3:b8:d9:99:9d:c4:1c:2c:2c:32:76:67:9c:
1f:0c:9d:19:3d:d3:6b:e2:08:d7:9a:c1:8d:0e:e6:
35:07:a8:97:30:f9:d7:54:21:71:3f:a5:67:87:85:
1a:8c:33:52:9e:a4:a6:17:3a:b7:ac:24:59:87:3e:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CF:FA:7F:1F:67:6B:B4:4F:2D:A6:7D:9E:B7:45:C4:38:18:E3:1B
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/c8_6fx9na7RPLaZ9nrdFxDgY4xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.217.0/24
Signature Algorithm: sha256WithRSAEncryption
32:7b:a5:63:4e:f8:5a:77:46:32:ba:3d:70:28:49:8d:68:72:
43:03:67:94:0b:78:d0:c6:8b:8d:44:78:af:f1:ac:16:a0:e6:
f2:eb:14:75:fc:01:c5:e7:e5:d4:e3:20:60:17:16:bc:a4:53:
00:da:67:c6:c7:59:1f:7f:f5:ea:f5:3f:2d:d6:49:9d:94:3d:
33:fa:36:0f:d1:7b:8e:86:7b:57:0b:fb:6f:47:73:22:6b:ae:
76:45:e4:81:94:08:ec:81:d7:1f:94:25:01:63:fd:32:d7:26:
d9:fe:cf:28:e0:82:74:0a:14:d4:d0:68:3a:43:75:27:0d:48:
23:a3:89:f5:14:f6:35:9c:6e:cd:f8:ab:80:39:53:4d:15:6b:
51:c9:1b:e1:c8:07:6d:41:d8:8a:56:12:d0:8e:ee:4d:b8:63:
42:21:f3:ea:cc:ae:78:53:9f:5c:dd:b7:9c:f4:e1:f3:76:57:
75:93:70:41:f4:e9:e2:e4:89:a5:21:a6:94:c5:40:45:8b:1a:
26:24:c9:bd:86:a3:0d:9c:4d:4a:45:d0:34:18:a3:fb:e5:3d:
91:33:76:39:05:3a:0e:c3:6d:94:f9:d7:24:63:70:d2:c2:2a:
84:e3:26:51:11:11:4e:0e:46:72:ec:9b:99:a8:a7:10:82:f8:
e3:3b:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:24 2026 by rpki-client