Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/y8_zhxLnTyLVMVkKCxv2htwRO6s.roa
File: y8_zhxLnTyLVMVkKCxv2htwRO6s.roa (raw, json)
Hash identifier: 0B0AhLTjiKxRKyJN76TunlKY12o6P7Os0KKG5Yonjjo=
Subject key identifier: CB:CF:F3:87:12:E7:4F:22:D5:31:59:0A:0B:1B:F6:86:DC:11:3B:AB
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019FC697F58C3371FDA7D4F7C1F0B9AA2731
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/y8_zhxLnTyLVMVkKCxv2htwRO6s.roa
Signing time: Mon 03 Aug 2026 07:47:55 +0000
ROA not before: Mon 03 Aug 2026 07:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197179
IP address blocks: 195.238.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:97:f5:8c:33:71:fd:a7:d4:f7:c1:f0:b9:aa:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 3 07:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbcff38712e74f22d531590a0b1bf686dc113bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:94:9d:98:25:a5:04:98:52:f7:2a:40:f1:
18:56:08:61:cb:fe:46:88:38:8d:04:79:0e:56:da:
da:08:0b:48:7e:f6:ef:cb:05:ca:72:1a:eb:99:0a:
27:71:0e:df:6d:87:20:cb:8f:98:9f:b3:b4:c1:55:
50:81:0f:e9:7f:94:f5:db:af:31:2b:2a:be:40:9f:
8c:7c:02:08:a1:b3:69:61:bc:c8:2d:26:7a:8e:18:
af:34:9e:6a:e3:b5:b5:73:c4:1d:3b:91:9b:f2:65:
7b:d1:74:16:86:e3:66:74:7a:9d:b9:f1:fa:9b:31:
65:79:26:8e:a2:06:53:cd:7d:32:d4:5b:e6:18:f7:
b3:55:00:e4:38:17:e1:46:be:29:4f:18:a8:51:6f:
9e:f3:84:72:8c:f5:d1:e4:a8:72:fc:d1:cd:d3:0b:
97:e9:b6:9b:bb:96:b6:9d:62:11:c6:22:b3:c9:02:
f5:74:87:c8:fe:27:76:4c:9f:f4:ad:ab:01:6d:8f:
df:1c:90:cb:89:da:61:cf:5c:c3:d9:4f:15:45:c6:
0c:74:73:18:99:ee:90:3b:9c:b5:1e:89:99:24:2f:
f6:61:28:da:5d:32:b5:ba:e8:3e:85:eb:f8:be:7f:
47:97:44:eb:af:9a:2a:ed:1a:f1:5c:d1:a6:c4:29:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CF:F3:87:12:E7:4F:22:D5:31:59:0A:0B:1B:F6:86:DC:11:3B:AB
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/y8_zhxLnTyLVMVkKCxv2htwRO6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.98.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f3:30:74:3d:80:03:66:5d:b0:40:dc:f1:85:be:80:31:33:
fb:52:c5:07:8c:6b:17:24:b6:d5:6b:d7:62:3f:95:f9:54:d6:
b7:d2:82:c6:54:a9:e8:ce:16:de:74:64:67:3e:12:01:e5:1c:
39:73:88:b0:5f:0f:0d:ce:63:53:7b:39:1b:75:9d:58:e9:aa:
d9:38:19:65:d9:e6:47:80:5d:ce:b7:09:a6:89:76:e2:72:41:
56:91:69:a5:6a:8f:e6:77:19:6b:e5:31:82:86:63:9a:f2:be:
af:30:1e:9c:22:7d:46:d2:8e:72:0e:f0:4a:2e:76:df:6c:67:
bc:44:3e:36:06:2b:ad:30:a7:b0:bd:2d:74:3b:df:6d:47:a9:
01:e0:c9:43:4b:0b:89:50:1a:61:39:bd:e2:9c:ef:a9:fa:a3:
62:7f:bc:48:3b:1d:8e:84:d3:07:d3:11:ce:a7:b4:ad:b1:6a:
d4:d2:fa:d0:50:9b:28:c7:0d:f0:a0:bf:99:22:dc:7b:ee:3d:
66:51:74:45:6c:83:b5:e3:f2:93:68:25:80:0f:a6:02:b0:a7:
b4:fa:20:38:36:a6:20:ce:a5:b3:4c:0f:d1:4a:53:e9:fb:6c:
1f:29:88:0d:fc:b8:2c:a2:4e:da:67:52:91:06:84:fd:7d:69:
5b:f2:81:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 01:31:33 2026 by rpki-client