Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8i-73IxsdCKWe3tx5oLbH7Bbk04.roa
File: 8i-73IxsdCKWe3tx5oLbH7Bbk04.roa (raw, json)
Hash identifier: CJRSGxNLHHvZ9yAKARaFfJGa6Vah8sx089zHPQbr/Ck=
Subject key identifier: F2:2F:BB:DC:8C:6C:74:22:96:7B:7B:71:E6:82:DB:1F:B0:5B:93:4E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A08024F6BD40CB82037C246ECA6122D962
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8i-73IxsdCKWe3tx5oLbH7Bbk04.roa
Signing time: Tue 08 Sep 2026 08:31:41 +0000
ROA not before: Tue 08 Sep 2026 08:31:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402526
IP address blocks: 194.77.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:24:f6:bd:40:cb:82:03:7c:24:6e:ca:61:22:d9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 8 08:31:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f22fbbdc8c6c7422967b7b71e682db1fb05b934e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:96:2e:d1:ce:81:21:03:23:14:8b:80:7d:
6c:8d:85:d4:f2:f0:7f:7e:53:6d:07:aa:a4:c4:28:
22:42:53:34:ed:5a:16:bb:15:21:40:a9:86:87:eb:
33:95:7c:86:15:8a:2b:07:3d:b3:a5:59:d0:a9:3f:
5a:3e:b9:c7:70:29:59:63:cc:29:a2:6e:da:2c:23:
64:b5:48:2e:fe:26:30:5d:82:16:70:a8:4f:ce:8d:
89:61:ce:73:99:55:9c:67:ac:f8:96:22:ec:21:e9:
dd:5d:dd:eb:38:da:8e:f4:16:a8:37:b3:16:f6:87:
bc:1e:a5:00:38:e4:62:b8:28:ea:ff:61:9e:d8:a9:
04:11:b2:3e:d0:69:95:33:51:c4:ea:32:b2:b8:ef:
71:b6:97:55:39:30:f3:ba:11:40:6c:ae:76:45:17:
4d:3b:6d:99:78:4f:a2:72:5d:88:59:66:d6:28:c8:
66:f9:7d:56:eb:f4:a3:77:be:05:18:8d:be:21:63:
ad:8a:a7:27:7c:e2:0b:27:68:9f:63:80:14:81:ca:
32:71:08:c5:44:5e:5c:8f:61:c4:f8:b5:e4:14:12:
45:6a:9c:19:59:d5:56:7b:87:94:5e:4c:52:50:ce:
94:cc:34:ea:bb:02:fa:a0:1a:b2:a9:ea:e6:39:84:
8c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2F:BB:DC:8C:6C:74:22:96:7B:7B:71:E6:82:DB:1F:B0:5B:93:4E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8i-73IxsdCKWe3tx5oLbH7Bbk04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6c:7f:a8:bd:9d:c6:34:2a:81:1e:c5:48:d6:11:fa:cf:0a:
0b:de:b6:4e:88:25:5e:5c:3c:34:f2:7f:71:75:1c:f1:b6:bc:
c0:b2:16:c9:b1:07:eb:dd:cc:a3:db:ee:78:33:7c:73:b1:60:
86:39:ae:1c:e1:db:c7:47:0f:3c:0c:15:cc:40:e3:5e:a1:85:
b7:2d:0e:3c:76:52:f1:be:22:40:62:58:de:77:1a:f3:58:23:
1b:f1:2a:71:05:5d:d3:9a:46:6f:ac:76:89:72:14:7b:d1:1d:
fd:96:75:aa:2d:80:2a:e3:51:5a:fe:d7:ae:fd:8d:3e:8e:57:
58:87:4b:a5:fa:da:24:08:38:22:49:66:71:2f:fa:5f:63:b6:
2b:6e:aa:b4:3f:8e:20:31:43:8a:43:8f:70:23:c8:b9:41:0b:
9a:b8:42:38:60:42:37:34:88:d4:1e:91:0a:50:ba:4b:e2:a9:
d8:dc:8d:f4:83:eb:9f:7b:e6:31:2b:bd:69:65:aa:cb:9d:bf:
c4:84:67:16:09:78:0d:20:e6:68:20:67:92:d4:49:d4:54:83:
6f:91:bf:ce:81:9a:0a:26:f2:a5:fd:b9:02:e0:bf:56:f2:e1:
cc:90:8d:6d:2b:cf:21:fb:bd:42:28:06:e5:74:6e:41:0f:69:
ca:96:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:17 2026 by rpki-client