Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/8hFVko0dhdA-H1lW4G0ZEJqMaFU.roa
File: 8hFVko0dhdA-H1lW4G0ZEJqMaFU.roa (raw, json)
Hash identifier: pt73BuJ/y3ShDrV/pgMGCwb8k6XcsAIy36ogWlsMzYQ=
Subject key identifier: F2:11:55:92:8D:1D:85:D0:3E:1F:59:56:E0:6D:19:10:9A:8C:68:55
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019CBCFCC0BC6022C656F3A3292304D36432
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/8hFVko0dhdA-H1lW4G0ZEJqMaFU.roa
Signing time: Thu 05 Mar 2026 07:53:26 +0000
ROA not before: Thu 05 Mar 2026 07:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202248
IP address blocks: 83.217.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bc:fc:c0:bc:60:22:c6:56:f3:a3:29:23:04:d3:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Mar 5 07:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f21155928d1d85d03e1f5956e06d19109a8c6855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:4f:9d:43:e6:2b:6e:78:a6:27:09:df:ed:
2e:be:b3:e7:fe:29:6a:12:bb:0c:00:e2:1d:96:58:
9c:f4:34:4e:bd:84:78:9f:3a:09:f1:8e:ab:46:fd:
72:a7:a0:42:e2:05:ff:ee:38:79:a0:c4:8f:49:cf:
8c:c8:27:23:34:71:41:bc:52:88:ad:fd:e9:a9:42:
d5:20:3d:4b:b0:91:00:90:05:f2:c5:d7:fc:79:8c:
a6:ae:d0:06:66:34:68:d0:2c:bc:89:89:d1:c5:15:
26:f6:6f:9a:66:33:bc:2a:4c:5b:d8:39:54:ff:9f:
c1:00:bd:3e:68:37:cc:a0:cd:b8:c7:04:41:88:d6:
4e:8f:df:42:3f:a7:9c:e4:2c:4a:07:ff:85:ad:73:
28:c5:ea:47:33:4c:c3:47:75:fc:c8:95:a2:2a:62:
9d:80:b3:8c:b5:9d:47:c7:f6:2e:5c:6f:1a:f2:34:
4f:db:f0:7e:f5:eb:6e:c5:29:a8:97:77:ff:c5:2e:
f2:fe:d4:5c:22:cb:21:c7:eb:3d:88:52:d7:78:4e:
7b:e4:80:08:ae:fa:50:af:76:b3:78:82:a2:99:75:
96:50:87:ca:26:c2:c2:2e:26:17:26:a7:35:d4:f0:
a9:4c:3c:f9:73:b6:5d:75:e4:0f:d7:90:18:c0:6c:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:11:55:92:8D:1D:85:D0:3E:1F:59:56:E0:6D:19:10:9A:8C:68:55
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/8hFVko0dhdA-H1lW4G0ZEJqMaFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.196.0/23
Signature Algorithm: sha256WithRSAEncryption
28:4d:8a:8f:d8:55:4f:b3:78:2c:65:54:46:70:e5:48:bd:ab:
71:aa:8b:de:8d:fd:8b:c7:9b:2d:d4:5b:c2:28:e2:46:6c:54:
45:4b:f9:45:55:a0:68:78:22:b7:30:02:99:9b:ca:8b:07:61:
08:f3:64:fd:41:ab:77:a8:7b:bb:84:a7:cd:cc:20:fe:8b:82:
c8:61:ce:ca:2d:df:da:2e:de:6a:7c:4a:78:25:4b:53:23:de:
7f:8a:35:4f:e1:a1:e1:4d:bc:ea:46:fc:1e:27:43:97:f0:9b:
fc:7c:d2:de:e5:02:25:19:ce:0a:ec:1f:fb:52:37:5c:21:f4:
8d:87:2c:ae:d5:70:3d:48:32:31:ab:0d:91:f0:6d:f8:ec:eb:
c3:24:a2:fa:ad:03:3c:bc:f7:35:3d:9c:49:eb:ca:14:7d:58:
e7:e4:12:ee:b8:1e:03:c5:9a:0c:a1:8f:be:d3:bb:6c:79:e2:
d1:77:fe:44:6b:98:e5:0b:f2:e7:c0:39:eb:a9:71:3b:a5:7d:
a2:7f:7d:6b:13:af:5b:e8:85:7e:4a:3f:e0:14:58:cd:46:1b:
cb:ae:d2:1c:be:71:6e:92:d4:52:fa:f9:81:24:3c:0c:c2:e6:
d9:bc:5a:69:6b:32:23:78:fa:7b:fa:19:92:ab:b2:fd:56:1c:
2e:55:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 08:32:46 2026 by rpki-client