Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S8k0wiAbtJr7JSPQ-Ah0WL78i-0.roa
File: S8k0wiAbtJr7JSPQ-Ah0WL78i-0.roa (raw, json)
Hash identifier: 4iU7cU5bi9mNbvXqHuFHcHwyr40xryEv/TCQPvCP434=
Subject key identifier: 4B:C9:34:C2:20:1B:B4:9A:FB:25:23:D0:F8:08:74:58:BE:FC:8B:ED
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B8CE131D929E9935B889A2374B9299C9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S8k0wiAbtJr7JSPQ-Ah0WL78i-0.roa
Signing time: Sat 19 Sep 2026 08:35:08 +0000
ROA not before: Sat 19 Sep 2026 08:35:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215120
IP address blocks: 195.72.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:ce:13:1d:92:9e:99:35:b8:89:a2:37:4b:92:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 19 08:35:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bc934c2201bb49afb2523d0f8087458befc8bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:d2:0c:0e:bb:a1:1b:50:b0:39:42:0d:9f:
d0:58:ce:e5:ae:cc:3e:c6:17:7a:57:6a:34:3f:84:
7e:1a:1f:4f:94:6e:33:53:14:25:f9:9b:87:60:d4:
02:b9:21:4f:aa:59:e8:cb:9f:5a:6c:1a:98:12:9f:
ab:a9:e6:4d:3c:77:3c:21:be:0b:93:5a:b8:1c:a4:
86:9c:6c:56:08:c5:2d:64:8d:3e:44:2b:7c:55:f3:
8f:f2:ff:55:a0:87:8b:80:1f:6d:9f:1e:fb:36:6f:
a1:87:53:cb:97:6a:65:b7:3e:1a:f5:ab:5b:19:0c:
bd:1a:fa:58:7c:db:db:27:01:38:c9:3f:97:ef:e4:
d1:e5:c6:13:64:13:09:28:65:d0:af:95:f0:31:f4:
0a:af:eb:b9:53:79:64:ab:11:7d:3d:14:c1:88:7d:
d6:44:a0:9f:39:65:b6:a1:81:2c:57:74:0e:4d:6a:
c3:b7:29:0c:4b:ce:6d:f6:62:cd:e6:06:f6:6a:78:
fd:80:a8:14:e3:89:d2:b0:61:7e:54:5d:6d:d9:63:
cd:77:54:a1:9c:37:8a:35:3b:3b:c3:ec:41:d8:ff:
48:d6:21:34:66:17:f8:98:a5:7e:51:65:c4:c7:4f:
00:c6:d3:a4:57:ce:f5:08:5f:d4:25:8c:4d:59:11:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:34:C2:20:1B:B4:9A:FB:25:23:D0:F8:08:74:58:BE:FC:8B:ED
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S8k0wiAbtJr7JSPQ-Ah0WL78i-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.167.0/24
Signature Algorithm: sha256WithRSAEncryption
73:16:56:05:d3:33:57:b5:c1:75:fc:dd:b1:ec:90:52:90:3e:
1d:94:a3:5f:85:58:14:99:f2:cf:e9:8a:09:b5:5c:86:c8:89:
9d:b3:2b:29:85:04:e0:11:4a:71:9f:18:a4:a7:59:a3:a6:43:
b6:8b:4c:93:94:b8:02:2b:51:47:c6:c4:14:ce:31:17:54:4a:
96:82:26:a4:51:43:d4:af:de:72:d1:0e:da:68:75:66:0d:cc:
16:de:a3:54:15:a0:e6:b9:aa:c8:8e:8d:53:1e:45:88:93:97:
f9:f1:ba:e7:85:7a:89:52:62:65:9f:b0:86:57:cd:b2:57:5d:
cb:62:2d:c8:9b:53:ed:1a:2a:89:ea:d7:41:30:8b:f4:b0:d7:
20:0a:fe:a4:0d:7b:06:04:ac:ef:ea:4a:9f:12:1a:fb:a3:eb:
53:c6:f6:8e:19:1c:8a:c9:84:65:6b:b1:b4:3f:85:a4:ba:f0:
7c:33:26:98:fe:19:0f:03:cf:23:05:49:8f:ec:b3:f8:ae:e5:
a7:b4:cf:8f:23:e7:cf:9e:44:36:e5:ff:74:67:9b:7f:37:d1:
f9:53:60:78:81:32:92:42:81:fd:12:73:5f:00:ac:7a:04:e7:
6d:5d:d7:b3:3a:54:8f:09:48:9e:80:83:30:a0:73:86:a4:c6:
54:ca:6b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:15:57 2026 by rpki-client