Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/8su6_N9x1_5jtlPtUacEBgxM-28.roa
File: 8su6_N9x1_5jtlPtUacEBgxM-28.roa (raw, json)
Hash identifier: aN7HS3FKkzQvDb/maZERXdwpEUxBKjRpludo/z8UrHk=
Subject key identifier: F2:CB:BA:FC:DF:71:D7:FE:63:B6:53:ED:51:A7:04:06:0C:4C:FB:6F
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019FC77587B2D4EA281B5C98F48E2DE1EC17
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/8su6_N9x1_5jtlPtUacEBgxM-28.roa
Signing time: Mon 03 Aug 2026 11:49:55 +0000
ROA not before: Mon 03 Aug 2026 11:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 185.191.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:75:87:b2:d4:ea:28:1b:5c:98:f4:8e:2d:e1:ec:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Aug 3 11:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2cbbafcdf71d7fe63b653ed51a704060c4cfb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:25:54:85:d1:0b:e6:5d:73:43:06:55:25:25:
f5:36:4d:dc:36:df:46:fb:a0:05:84:54:fd:6f:f6:
8c:e0:5c:65:67:d3:2c:f1:e2:68:42:50:fd:b7:c3:
70:71:7a:be:38:b6:6d:93:ad:b8:9c:30:3d:77:76:
e2:47:46:93:69:02:59:ca:d5:6a:f3:aa:9b:33:d6:
d8:7f:e8:57:41:43:70:ed:77:2a:49:31:39:13:7b:
7d:a9:75:4a:90:d5:a0:46:e3:9f:d4:d5:75:13:0c:
c6:55:fe:65:07:8e:cb:38:86:ed:f5:50:ea:c9:19:
ca:77:a2:e1:33:27:54:22:39:c1:d2:9b:20:ac:e1:
8b:a1:dd:77:e1:bd:36:46:b5:ee:73:fd:c5:dd:37:
ed:35:e8:57:99:21:a7:4a:a3:63:c3:cc:36:7c:aa:
6a:0f:9d:d1:54:ac:29:9d:8f:8d:6f:6c:42:e5:73:
6d:36:32:50:6a:5c:73:ea:d8:ee:a1:e9:9c:58:55:
3c:0d:41:f6:ea:67:7f:b9:02:c1:fd:e5:f1:25:1e:
cb:24:44:01:a1:3b:65:22:8d:f4:20:1b:b8:22:49:
45:3b:5c:85:a1:6f:d3:3a:0d:1e:73:52:5c:9c:b0:
98:e1:7a:67:82:39:6b:eb:4e:90:75:92:06:95:f9:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CB:BA:FC:DF:71:D7:FE:63:B6:53:ED:51:A7:04:06:0C:4C:FB:6F
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/8su6_N9x1_5jtlPtUacEBgxM-28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.20.0/24
Signature Algorithm: sha256WithRSAEncryption
34:07:b3:c9:7c:50:23:fc:26:c2:81:cd:b8:0c:1c:95:6e:10:
83:99:ef:fe:84:1e:4d:c1:2b:a4:a0:84:db:90:18:e4:86:32:
19:9d:6e:dc:9a:a7:f2:0f:8b:5e:0a:cf:56:ef:6a:3e:2d:b0:
a6:b2:c2:2b:66:15:56:13:38:55:3e:81:47:10:b8:8e:0d:fc:
6f:66:bd:0b:43:55:f1:47:8c:b9:35:54:16:70:d0:64:45:f9:
b6:f0:bb:52:ec:b0:3f:84:81:3b:f0:a0:e2:ca:08:55:ee:39:
c8:76:13:f5:e9:01:ac:f8:f8:a8:58:34:fb:d3:65:fe:e8:b2:
87:87:ca:32:80:14:1a:81:09:e5:bd:cd:b4:9b:55:99:62:3e:
65:01:41:57:b2:91:44:93:49:69:7f:bf:6f:15:2f:c6:96:a2:
fd:27:05:2c:ff:39:a3:61:7b:44:66:30:fe:b4:1a:02:4d:e2:
62:9d:60:60:ae:1b:c1:97:0b:f8:f8:7d:14:92:69:89:c9:b2:
68:06:74:91:bc:85:fc:c6:a3:4c:13:00:d4:84:e6:79:04:f4:
52:1e:63:0d:74:34:ef:db:bd:43:dd:0b:4f:f3:ee:ff:26:14:
84:59:dc:9b:9d:3b:11:1f:27:8c:dc:c1:29:9b:05:39:2c:93:
ba:8c:7e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:12 2026 by rpki-client