Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/h8Iw76TIsXpOdGew1lOCQ3S2fvg.roa
File: h8Iw76TIsXpOdGew1lOCQ3S2fvg.roa (raw, json)
Hash identifier: EfCZCrvchLedHJyov6tUz47HfCGHh/INCQdEBQIJikc=
Subject key identifier: 87:C2:30:EF:A4:C8:B1:7A:4E:74:67:B0:D6:53:82:43:74:B6:7E:F8
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823DBF9B1E045C0A030171C71F51EB
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/h8Iw76TIsXpOdGew1lOCQ3S2fvg.roa
Signing time: Tue 25 Aug 2026 15:20:31 +0000
ROA not before: Tue 25 Aug 2026 15:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 84.54.0.0/23 maxlen: 24
84.54.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3d:bf:9b:1e:04:5c:0a:03:01:71:c7:1f:51:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87c230efa4c8b17a4e7467b0d653824374b67ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:df:55:0f:02:35:18:d1:0d:58:d8:6b:1a:
1e:4b:a0:7d:45:91:57:a2:d8:69:d9:8e:8e:9c:85:
15:10:6e:b4:b4:a8:98:3d:fb:fb:1b:5d:bb:6d:1d:
d4:8a:6d:e0:4e:0d:ae:96:89:72:d7:f3:9b:c1:6b:
cb:15:b5:68:58:25:52:55:c3:5b:89:55:bf:32:bc:
bf:91:ca:58:02:47:fc:2b:40:f5:f1:4c:28:1e:6c:
04:d6:4e:49:0b:ef:92:73:f4:55:a9:0e:26:d1:e1:
f1:0d:bf:99:0e:71:8d:59:31:5c:52:cd:6a:cf:bb:
0a:92:95:f5:a4:ba:fa:5c:69:01:6b:57:0a:2d:a6:
3e:cb:59:fb:4d:0b:40:0d:08:f3:89:97:7e:5d:fb:
a8:c8:37:51:eb:c7:1a:8e:77:83:cd:fc:b6:83:e5:
e4:c7:c7:57:22:9a:56:7b:4c:c5:c0:62:bf:78:1f:
d9:fc:ba:3f:bf:62:9b:8a:b0:47:e4:2a:30:f9:4e:
23:13:ed:6d:b8:6c:19:5a:37:3e:23:a5:8f:35:89:
71:74:50:e1:91:c4:15:1a:88:8f:6b:65:4d:58:62:
55:a9:9f:cd:7e:62:cc:92:6f:0a:f7:ce:11:50:76:
54:db:f4:8d:5a:97:92:75:6a:8f:c3:d4:ff:78:9a:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:30:EF:A4:C8:B1:7A:4E:74:67:B0:D6:53:82:43:74:B6:7E:F8
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/h8Iw76TIsXpOdGew1lOCQ3S2fvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:19:d0:e7:fe:e7:d8:13:13:86:76:fa:cc:85:d8:65:72:0f:
80:2b:e1:7b:f0:81:56:ab:06:6f:97:5d:20:3a:7a:93:12:c3:
66:1a:05:b9:ee:a7:e5:66:8b:0f:5a:6f:67:b4:47:8d:79:ea:
8e:00:7d:f7:be:e0:d5:a4:74:37:f7:cb:a3:3a:66:2d:6d:cc:
6b:93:2f:7d:50:61:4b:82:8b:3d:b4:76:37:12:02:3b:ce:42:
63:77:25:ed:58:87:0d:9d:de:61:30:ff:a3:07:67:91:df:68:
c0:d0:ec:7d:4d:90:e6:52:84:1d:bf:f4:d6:ac:db:5d:c8:37:
ac:0b:36:65:06:12:83:ef:2d:3a:f3:6d:8f:76:6e:6a:71:3a:
69:95:60:56:99:4a:38:cb:f3:31:89:f9:fb:97:5e:6f:cd:26:
ca:8f:71:56:3e:b1:67:92:63:b5:74:9c:46:f5:5d:a5:31:ed:
b8:5a:19:ca:45:7b:24:f1:ed:80:db:4d:ae:65:3d:12:0a:09:
d6:72:69:9c:44:ec:eb:5e:e7:f6:06:6f:92:bc:7c:bc:0e:22:
f9:af:87:2a:ab:d4:49:cb:82:a0:0b:6d:7d:6f:68:58:9b:27:
a0:a8:8c:03:e0:a8:74:1b:3f:10:f2:d0:07:db:f0:58:e4:aa:
74:9b:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:57 2026 by rpki-client