Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/8hF3fW2AQn8gutEmii7RqoEEVDI.roa
File: 8hF3fW2AQn8gutEmii7RqoEEVDI.roa (raw, json)
Hash identifier: KwYHqf2lsartQGfEy7n9jVCdqYe9vnnpdPb7Og62FCk=
Subject key identifier: F2:11:77:7D:6D:80:42:7F:20:BA:D1:26:8A:2E:D1:AA:81:04:54:32
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 019ED019D28F6565A9DD0A7E2898B7A413C2
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/8hF3fW2AQn8gutEmii7RqoEEVDI.roa
Signing time: Tue 16 Jun 2026 11:03:33 +0000
ROA not before: Tue 16 Jun 2026 11:03:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207350
IP address blocks: 195.24.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:19:d2:8f:65:65:a9:dd:0a:7e:28:98:b7:a4:13:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Jun 16 11:03:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f211777d6d80427f20bad1268a2ed1aa81045432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:34:ce:13:2b:63:50:80:c5:03:44:34:63:
f2:71:f3:0d:4f:23:cb:10:bc:96:43:da:5f:71:88:
8a:d2:a9:16:68:aa:71:fe:42:07:4e:4a:13:06:a9:
70:ff:10:9d:da:38:92:5f:07:7f:9b:5b:35:f8:40:
9b:ab:9b:3b:8b:b4:70:b1:01:27:75:62:50:ef:28:
74:a6:a9:4f:a7:98:86:e0:24:0b:01:3f:ad:d3:96:
8e:c0:0f:42:d9:7e:c9:36:23:58:a0:13:7b:c3:80:
6c:07:74:83:d9:cb:7c:c1:8f:8c:22:39:2a:a7:ee:
df:96:5b:e4:77:79:58:07:e6:01:e6:4d:74:32:c0:
0b:ce:3f:47:c4:cb:3c:3c:9a:3d:c5:b9:ce:68:6d:
bc:d8:e0:7e:3f:3c:3c:20:81:64:9a:c3:86:23:0e:
3c:19:0b:5a:fe:4b:a4:21:9a:3d:84:d9:45:cc:a3:
92:8d:52:7e:63:86:c7:f8:f8:03:da:70:66:24:1d:
1b:a9:52:cf:3b:d3:f0:f7:1d:bd:ba:3c:0c:8f:58:
eb:19:c2:18:61:51:b4:c9:f0:ab:b7:10:6a:26:3c:
c2:36:69:1b:bd:fb:fe:ca:01:11:ed:8f:e4:6e:ca:
fe:df:d2:d7:b4:03:be:62:d0:52:7b:e9:41:47:27:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:11:77:7D:6D:80:42:7F:20:BA:D1:26:8A:2E:D1:AA:81:04:54:32
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/8hF3fW2AQn8gutEmii7RqoEEVDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.237.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a5:05:ab:59:94:57:eb:50:df:99:48:ad:68:34:34:24:41:
ce:9f:44:65:dd:a2:64:bb:7d:4e:29:03:db:bc:c9:de:8a:73:
e2:f9:2c:43:88:a3:e0:42:13:b1:fd:6b:6c:77:ad:74:e9:cf:
5a:2a:1d:8d:50:fc:a2:90:91:dd:00:13:b2:2d:3f:e1:2a:c3:
c0:b0:84:05:45:52:fb:1c:6e:29:bb:aa:ca:f0:a7:8e:3d:8b:
c1:af:b7:77:06:97:8d:a3:5b:82:6a:54:6a:1e:2c:9a:4d:01:
d3:08:51:32:9d:30:52:d8:6c:27:57:58:31:6f:50:06:43:de:
a3:ef:4c:2a:ec:6f:ae:13:04:30:1c:6d:e6:4c:92:03:7a:9a:
85:39:57:1d:b3:f0:71:d9:39:3a:99:29:00:75:cd:39:76:69:
d0:e3:57:6f:87:e6:e0:05:4f:c5:b6:f1:60:d9:fe:53:67:6e:
b5:e9:f4:a9:3b:66:41:73:ba:08:4e:81:13:1e:3d:2c:7b:a4:
6c:d8:16:55:53:8b:10:50:87:c7:da:58:15:f0:20:66:3e:38:
3b:24:a7:cc:a9:d1:6e:80:ee:b5:59:62:5f:1c:9f:0a:67:71:
e5:a9:09:9f:88:d4:8e:5d:50:cd:a2:0f:5f:eb:b8:7f:15:25:
f6:00:ee:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:35:58 2026 by rpki-client