Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8Z9bzUZYpH98LT2u_98gU4VEkM8.roa
File: 8Z9bzUZYpH98LT2u_98gU4VEkM8.roa (raw, json)
Hash identifier: o+qita/fAuCQIe0uHkmiG4nKxBIvVXqMRBabFPanLEE=
Subject key identifier: F1:9F:5B:CD:46:58:A4:7F:7C:2D:3D:AE:FF:DF:20:53:85:44:90:CF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FF9E6FBE40C7529723171261CC7435FAE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8Z9bzUZYpH98LT2u_98gU4VEkM8.roa
Signing time: Thu 13 Aug 2026 06:54:52 +0000
ROA not before: Thu 13 Aug 2026 06:54:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42954
IP address blocks: 87.86.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:e6:fb:e4:0c:75:29:72:31:71:26:1c:c7:43:5f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 13 06:54:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f19f5bcd4658a47f7c2d3daeffdf2053854490cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:a4:73:fd:31:42:ee:ea:ec:6a:a6:b0:05:
46:df:30:a4:d6:2a:fd:6c:70:16:b1:fd:5d:ba:af:
6d:ef:ea:87:21:4c:65:46:6b:26:16:39:b3:42:3e:
64:41:2a:e0:42:d7:fe:3c:89:1a:f8:d9:2f:97:09:
a3:04:5d:97:9d:34:96:75:0b:ed:50:96:57:2f:ba:
99:66:1e:84:52:7d:0f:9f:ba:03:50:a6:dc:ab:1d:
6d:50:a9:44:3d:e5:3f:7a:98:12:86:a8:35:0b:b0:
37:e8:92:7c:ff:e2:fa:5e:78:03:36:20:c0:48:15:
23:a0:67:10:dc:7f:e3:80:7c:63:9f:9f:48:b7:a3:
75:eb:e1:6b:3e:4b:21:48:cf:7c:a7:e4:11:32:72:
14:b4:3b:f3:3a:1a:63:a4:7b:5b:b8:f1:1b:57:3d:
33:9d:e1:d9:a7:ae:13:1d:6b:5b:9f:1b:36:38:05:
4a:38:be:5c:45:fd:0d:50:ee:aa:b1:d9:d7:93:4f:
39:47:8a:b5:3d:f0:96:4a:54:14:46:32:57:bf:93:
82:b3:15:54:30:d1:7e:b2:38:41:da:90:0b:57:5c:
df:f3:a9:e2:9c:1d:e9:6c:bd:74:54:7a:d8:70:87:
c9:0c:23:83:34:19:d7:b8:13:4c:18:67:e3:af:63:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9F:5B:CD:46:58:A4:7F:7C:2D:3D:AE:FF:DF:20:53:85:44:90:CF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8Z9bzUZYpH98LT2u_98gU4VEkM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:7f:37:a1:bf:28:1d:76:46:39:92:df:99:5c:3d:25:8b:82:
da:09:83:96:ab:4a:91:79:95:ac:e4:52:4a:0b:02:24:bc:df:
24:a0:e9:74:f7:e7:70:a4:cf:34:ed:36:11:e4:00:fd:99:b2:
ff:24:36:af:6e:cc:83:57:3e:e3:e9:61:09:70:3f:b8:46:1a:
f0:e6:89:61:ef:2c:39:28:91:bb:da:fb:d4:c3:ec:bf:85:8c:
61:2b:36:b6:b7:f2:31:26:88:87:8a:30:ca:90:69:16:f9:d9:
d2:56:a3:e1:34:33:8a:d7:c3:ec:fb:83:88:00:d1:c6:8b:6e:
dd:44:0d:f0:97:be:dc:31:c2:b8:de:4d:d9:6a:e2:9e:43:9d:
6d:aa:f8:9b:3d:f6:55:15:6f:73:83:92:e1:e4:8e:c0:a5:fc:
69:16:7a:6d:66:01:33:34:bd:7b:25:c1:b8:7d:87:03:23:17:
a8:95:bf:4a:0e:c9:86:fe:45:b3:9a:1f:6f:e7:5f:07:6a:7c:
77:2a:9a:b9:7a:cd:c3:57:29:6d:fa:41:08:76:f4:75:7e:51:
80:5a:b1:28:12:ca:1c:7d:53:b7:69:ba:df:ec:1e:27:a0:8b:
6f:c0:5a:86:88:3e:df:16:e5:3e:ac:b9:fb:c2:4b:79:4c:9d:
33:38:f7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:40:23 2026 by rpki-client