Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/8zyDwbu0R2UQtA1JdTzahnVwS1Y.roa
File: 8zyDwbu0R2UQtA1JdTzahnVwS1Y.roa (raw, json)
Hash identifier: tuDzfZxtf5VmR39bOcR0E/bzWGgsk0k3GYlkpnu/q6w=
Subject key identifier: F3:3C:83:C1:BB:B4:47:65:10:B4:0D:49:75:3C:DA:86:75:70:4B:56
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691FC3BBB75B407B08CD10D4554663
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/8zyDwbu0R2UQtA1JdTzahnVwS1Y.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216381
IP address blocks: 194.209.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1f:c3:bb:b7:5b:40:7b:08:cd:10:d4:55:46:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f33c83c1bbb4476510b40d49753cda8675704b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:8e:70:60:e0:66:a6:22:21:b0:f4:b1:ab:
af:97:c9:d7:a7:48:d0:5c:05:8e:7d:69:4d:66:27:
ce:fe:80:63:9f:27:04:7c:17:5b:1b:b2:fb:ab:d9:
61:36:65:3e:af:19:96:d2:4c:80:59:17:0c:d5:98:
9f:13:6f:c2:3f:6c:ba:d7:2e:11:56:30:0a:77:44:
6c:d6:1d:0d:c1:d1:55:6c:fc:21:ac:7b:68:e2:61:
a8:4f:63:82:06:c8:4c:7c:94:d3:c4:a3:e0:af:c5:
3c:e8:c2:8d:62:f4:88:55:81:bc:e9:7e:43:1c:7e:
96:ee:54:64:52:69:1d:c8:94:95:ea:71:94:c2:73:
de:53:bb:06:dc:ea:6b:49:a3:57:7c:f5:b7:48:58:
86:02:e1:7d:99:a9:94:2e:e0:03:b2:13:a6:4b:7b:
3f:54:3a:0f:b3:82:68:b5:7f:f8:a9:ea:30:86:dd:
f5:77:c0:2b:55:63:16:4d:c5:67:d3:ea:9f:92:5d:
9f:da:f3:0f:98:de:65:59:bb:f2:b1:0e:60:83:3b:
ff:1b:7b:9d:cb:06:a7:99:d4:1a:1d:87:5d:e9:7c:
48:ed:2a:65:3a:c7:bc:64:ba:05:22:24:47:72:9b:
77:21:1f:19:52:7a:b7:2a:1a:25:c4:3d:19:c1:d7:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3C:83:C1:BB:B4:47:65:10:B4:0D:49:75:3C:DA:86:75:70:4B:56
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/8zyDwbu0R2UQtA1JdTzahnVwS1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.113.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5f:1b:91:63:89:c6:9c:49:d1:16:eb:44:d3:f8:7e:d1:dd:
25:89:aa:df:4a:98:4a:b0:69:f3:fe:99:3d:a5:3c:b9:12:65:
08:c9:6a:58:84:17:b4:9b:2e:44:e3:d3:dd:2a:5c:53:f6:42:
b6:bd:ff:0e:58:93:ec:56:38:79:b8:23:a5:bd:b0:aa:16:69:
34:43:01:fd:13:0e:84:0c:df:23:da:fe:fe:4d:69:cc:54:56:
ea:f9:a9:03:1a:64:f0:57:5d:dd:d5:48:11:38:20:51:b3:dd:
b1:5e:b3:28:83:65:d4:d7:23:bc:5c:65:12:61:56:49:96:b3:
fd:bb:c7:28:da:c0:66:b6:d2:1a:b6:b4:3a:70:90:94:d1:00:
6b:a4:97:37:e3:9d:e3:b2:7b:53:24:e1:6c:5e:14:07:98:e8:
1a:e4:2c:06:17:67:5b:e1:49:a2:28:46:6d:30:e8:12:e8:d4:
9b:b2:a6:71:df:46:1e:ad:76:43:3a:89:9c:c5:f3:29:5c:c9:
b1:63:9d:05:51:72:ef:ed:4e:33:6d:1f:65:42:8f:f1:fb:3c:
13:b5:f9:48:21:cf:68:1a:32:e4:28:9e:6f:83:47:64:94:b8:
7a:11:e3:1f:7e:9c:9c:14:c6:1d:3e:40:00:f4:68:49:f9:ea:
62:9d:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:32 2026 by rpki-client