Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/8B0ybuszrJP-SYemF-uQdt2SNk0.roa
File: 8B0ybuszrJP-SYemF-uQdt2SNk0.roa (raw, json)
Hash identifier: payoeKzJic32kfvM1q1SXaHj6ZYf16MvCGVAXHfXiqA=
Subject key identifier: F0:1D:32:6E:EB:33:AC:93:FE:49:87:A6:17:EB:90:76:DD:92:36:4D
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019FF5C672AD1CB5F530DE522326DA9BCE08
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/8B0ybuszrJP-SYemF-uQdt2SNk0.roa
Signing time: Wed 12 Aug 2026 11:40:51 +0000
ROA not before: Wed 12 Aug 2026 11:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20055
IP address blocks: 203.81.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:c6:72:ad:1c:b5:f5:30:de:52:23:26:da:9b:ce:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Aug 12 11:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f01d326eeb33ac93fe4987a617eb9076dd92364d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:e5:8f:e5:9a:79:ca:ce:f8:2e:91:d9:15:
0c:b5:62:0e:f2:0b:55:96:59:ad:1b:17:61:b5:8d:
28:30:59:9e:30:c0:b8:14:d3:bc:55:65:20:08:7a:
34:56:5d:c3:9d:2a:d6:aa:f7:1b:be:bc:e5:2a:01:
82:75:9e:df:55:26:9a:63:eb:7d:10:e5:7f:11:be:
6a:e2:7e:04:b6:3a:ca:e8:06:3e:ca:b7:d7:c1:07:
b5:1c:49:d7:53:3a:d1:8a:82:23:d4:71:fe:c1:d9:
9a:aa:52:ff:f7:09:46:40:dc:df:d3:92:c7:8b:5e:
ad:c2:a5:48:12:cb:d8:58:42:29:d9:98:33:08:04:
1d:72:e7:3e:25:ad:c7:6d:fd:5d:45:d3:c5:4c:f0:
e6:7a:39:19:3d:97:40:7a:3b:a9:fd:3d:15:ec:73:
cf:37:cf:47:f4:3e:f7:33:f8:d8:be:50:60:aa:2c:
33:40:64:bf:91:97:c3:57:0e:68:1e:ac:c9:6f:66:
72:b4:94:16:32:b3:cd:77:05:58:74:68:80:86:38:
d7:ff:ae:44:47:f8:57:b4:97:85:a6:89:94:e5:00:
f1:45:4a:ed:6b:55:fd:82:37:72:9a:cf:7c:ec:32:
fa:b5:69:c4:8b:e5:95:8e:1b:4c:44:94:6a:85:7c:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1D:32:6E:EB:33:AC:93:FE:49:87:A6:17:EB:90:76:DD:92:36:4D
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/8B0ybuszrJP-SYemF-uQdt2SNk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.81.192.0/20
Signature Algorithm: sha256WithRSAEncryption
15:a2:09:76:17:7a:13:ba:cb:14:50:6a:77:1d:23:c8:03:1a:
36:cb:58:b6:d1:37:eb:1f:62:d9:6b:dd:8b:30:c9:b5:de:18:
dc:ca:45:fd:bc:a6:f1:4e:a0:49:51:a5:15:dd:f3:3b:76:b7:
79:99:bc:d4:f0:64:b3:47:a8:51:36:dc:39:ef:b4:c8:73:30:
ce:50:6e:50:5a:a6:4c:82:0e:89:ad:9c:8a:f9:f3:f9:cc:26:
18:79:ee:5f:f9:0e:cb:a2:1b:1f:b2:f8:30:e4:37:97:74:e4:
62:48:19:b2:29:db:f2:cd:fc:9a:24:eb:7e:c1:b3:d8:f0:f5:
86:24:de:f7:6b:5b:6e:68:cb:80:8d:8a:98:6c:98:6c:48:34:
57:fa:de:c8:86:2f:70:2f:24:8d:c4:74:d4:98:2b:23:37:85:
35:11:4a:6b:ce:01:54:07:3a:84:c8:eb:4e:d7:9e:70:3e:e3:
9f:71:50:9f:8e:9d:0d:92:47:80:b0:38:33:46:5f:ec:ef:c8:
b4:81:3f:b9:f5:56:60:dc:28:76:14:b2:35:85:a4:a2:c7:fa:
a5:58:06:49:0b:32:0a:f4:11:8d:48:ec:a6:b9:12:3d:09:1f:
a5:92:95:52:4d:cd:73:0d:7e:77:77:38:e8:9a:5f:94:5e:ea:
a7:1d:a3:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/1xnKtHLX1MN5SIybam84IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl
NzczNWIwHhcNMjYwODEyMTE0MDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDFkMzI2ZWViMzNhYzkzZmU0OTg3YTYxN2ViOTA3NmRkOTIzNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSPlj+WaecrO+C6R2RUMtWIO8gtV
llmtGxdhtY0oMFmeMMC4FNO8VWUgCHo0Vl3DnSrWqvcbvrzlKgGCdZ7fVSaaY+t9
EOV/Eb5q4n4EtjrK6AY+yrfXwQe1HEnXUzrRioIj1HH+wdmaqlL/9wlGQNzf05LH
i16twqVIEsvYWEIp2ZgzCAQdcuc+Ja3Hbf1dRdPFTPDmejkZPZdAejup/T0V7HPP
N89H9D73M/jYvlBgqiwzQGS/kZfDVw5oHqzJb2ZytJQWMrPNdwVYdGiAhjjX/65E
R/hXtJeFpomU5QDxRUrta1X9gjdyms987DL6tWnEi+WVjhtMRJRqhXw2KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPAdMm7rM6yT/kmHphfrkHbdkjZNMB8GA1UdIwQY
MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt
ZWVkZDk0ZWMxMjhjLzEvOEIweWJ1c3pySlAtU1llbUYtdVFkdDJTTmswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj
LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy1HAMA0G
CSqGSIb3DQEBCwUAA4IBAQAVogl2F3oTussUUGp3HSPIAxo2y1i20TfrH2LZa92L
MMm13hjcykX9vKbxTqBJUaUV3fM7drd5mbzU8GSzR6hRNtw577TIczDOUG5QWqZM
gg6JrZyK+fP5zCYYee5f+Q7Lohsfsvgw5DeXdORiSBmyKdvyzfyaJOt+wbPY8PWG
JN73a1tuaMuAjYqYbJhsSDRX+t7Ihi9wLySNxHTUmCsjN4U1EUprzgFUBzqEyOtO
155wPuOfcVCfjp0NkkeAsDgzRl/s78i0gT+59VZg3Ch2FLI1haSix/qlWAZJCzIK
9BGNSOymuRI9CR+lkpVSTc1zDX53dzjoml+UXuqnHaPM
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:01 2026 by rpki-client