Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/M8W0w-CPP90hj_DQi0WahGH2WVU.roa
File: M8W0w-CPP90hj_DQi0WahGH2WVU.roa (raw, json)
Hash identifier: 8ymtKye9WrjjwYpglAzMF3QjFXcpvqFxRfkDZJikCQI=
Subject key identifier: 33:C5:B4:C3:E0:8F:3F:DD:21:8F:F0:D0:8B:45:9A:84:61:F6:59:55
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368FCFD7F6F35525A0B9B0E961B5536
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/M8W0w-CPP90hj_DQi0WahGH2WVU.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30934
IP address blocks: 195.65.103.0/24 maxlen: 24
212.243.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fc:fd:7f:6f:35:52:5a:0b:9b:0e:96:1b:55:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33c5b4c3e08f3fdd218ff0d08b459a8461f65955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3c:07:25:52:84:55:43:c5:db:b8:ca:d4:70:
46:06:06:e2:61:5f:5f:8a:ad:c0:d4:51:61:5d:f4:
51:ac:e9:58:1f:14:b5:1d:e3:15:2a:ef:af:26:4c:
5f:ce:5f:22:c6:9a:39:3d:ec:da:1a:87:d1:a7:0d:
dc:e3:18:28:8a:d8:89:d7:ac:d6:2c:31:01:24:5e:
6c:1a:38:d7:7a:8d:8c:be:62:a7:20:65:a2:fd:a5:
ad:52:e1:43:6c:cf:12:33:d1:49:00:86:62:cf:3c:
cc:4c:b3:87:bd:1b:81:61:45:aa:e3:ec:28:42:47:
15:c1:ff:76:47:e2:52:e7:da:47:d6:25:db:70:09:
dc:a0:13:bc:11:b8:82:db:78:ab:df:a0:be:ac:46:
b2:31:47:d9:68:5f:1d:1a:78:30:fb:96:9c:3a:25:
e4:05:62:e1:2b:dd:32:6e:aa:cc:53:98:16:f5:5a:
02:d7:d7:c6:39:4e:b9:3c:0a:bc:3e:e0:8d:7b:07:
80:97:84:0a:6f:86:ec:37:2a:4a:e4:88:ad:ef:12:
84:81:29:c3:b2:e6:14:18:eb:0b:1d:6e:2a:29:25:
fe:4a:09:f5:3b:ca:61:59:9f:03:06:65:1c:25:e1:
b2:90:10:62:49:8d:19:b7:71:85:c3:61:10:b5:19:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C5:B4:C3:E0:8F:3F:DD:21:8F:F0:D0:8B:45:9A:84:61:F6:59:55
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/M8W0w-CPP90hj_DQi0WahGH2WVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.103.0/24
212.243.12.0/24
Signature Algorithm: sha256WithRSAEncryption
92:bf:17:e8:ba:0b:96:e6:52:49:f6:40:8a:d3:47:5f:c4:60:
b3:4f:88:59:a0:65:12:f2:19:a8:27:27:c2:e5:19:95:da:b9:
3f:22:6e:66:1a:32:44:56:17:54:b6:01:41:a1:2c:94:0f:52:
97:ba:2e:43:7b:9d:b1:bd:1c:84:38:d4:5c:28:cd:0d:2a:74:
20:21:23:b7:91:32:5e:1b:db:9a:1c:a3:d9:f0:72:d7:23:97:
43:6c:f8:75:2a:8c:d0:1b:80:23:24:54:6d:cc:0b:71:01:f0:
8d:ac:39:c6:0c:cc:5f:08:53:80:a5:8c:d8:77:99:5f:a9:36:
5c:ba:2f:18:ab:29:4c:70:fb:c4:82:76:dd:fd:58:85:7a:57:
7f:57:00:c2:96:c0:d5:03:cd:89:1e:d7:63:06:ac:a1:a3:c8:
7b:89:5e:c9:25:4f:40:81:28:9d:4e:7c:2d:cc:d6:8a:1f:30:
de:fe:4a:af:3b:f5:d9:e2:72:2d:85:70:19:62:aa:f1:cd:2e:
66:75:ff:ee:a3:31:0a:be:2e:c2:74:e1:f0:2f:18:5a:71:c8:
51:76:a8:e1:70:64:fe:1c:4a:9f:1c:af:fa:f1:13:5b:49:8c:
34:77:76:76:34:f6:8a:2f:94:fc:21:8b:65:cb:e9:7f:e9:3b:
f4:37:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:13 2026 by rpki-client