Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/8c8Bez583gSraB_UqN_7qP66Nb0.roa
File: 8c8Bez583gSraB_UqN_7qP66Nb0.roa (raw, json)
Hash identifier: b7dkdp0h2UCgVW6dTmard9yseZSUrDakBX19toPQms0=
Subject key identifier: F1:CF:01:7B:3E:7C:DE:04:AB:68:1F:D4:A8:DF:FB:A8:FE:BA:35:BD
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 019ED9FBA5499CBF776886E254DB04198EB5
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/8c8Bez583gSraB_UqN_7qP66Nb0.roa
Signing time: Thu 18 Jun 2026 09:06:48 +0000
ROA not before: Thu 18 Jun 2026 09:06:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 178.21.158.0/24 maxlen: 24
178.21.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:fb:a5:49:9c:bf:77:68:86:e2:54:db:04:19:8e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Jun 18 09:06:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1cf017b3e7cde04ab681fd4a8dffba8feba35bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:07:19:11:cd:c5:44:c2:4c:a9:d5:2a:0f:
75:82:e1:40:8f:d7:56:3e:a4:02:63:e3:0e:d4:8e:
1f:ef:45:79:0c:e9:f9:4e:4c:d0:03:2e:53:10:83:
6a:a2:92:d9:0e:f6:21:93:3f:09:fc:a2:70:bf:2f:
0c:0f:fb:e6:15:3e:cc:d8:70:6d:9e:3b:f4:75:6b:
59:98:75:a5:74:d9:30:b4:de:b7:23:8e:7f:a4:24:
4f:2b:67:6f:ef:2c:f2:e0:a0:58:b8:a0:44:b3:97:
1b:1d:41:56:67:e7:18:da:cc:2b:1e:d6:ad:22:20:
31:8b:bc:16:47:f9:a6:b7:70:9c:a8:74:ee:d7:80:
a8:e6:3d:83:03:68:a8:39:8b:83:0f:d7:66:56:b3:
77:e1:37:16:ed:e7:49:ef:c8:b5:eb:d1:06:98:c6:
db:73:be:f7:7e:05:3e:66:6e:87:ac:8a:27:79:f5:
7a:7b:62:bf:1b:c0:30:40:e5:04:4b:4a:db:4b:4b:
ee:02:83:72:10:39:b5:04:3f:cb:dd:12:8d:f4:86:
1e:9c:12:5f:fb:4b:39:55:93:be:da:9a:5e:c3:e4:
75:0b:ec:9b:18:cd:fe:89:17:e4:9c:d9:19:45:df:
11:e0:4e:b4:84:46:12:6c:e2:61:76:61:cf:81:a7:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CF:01:7B:3E:7C:DE:04:AB:68:1F:D4:A8:DF:FB:A8:FE:BA:35:BD
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/8c8Bez583gSraB_UqN_7qP66Nb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.158.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:31:08:66:3b:47:1a:93:2a:e0:d1:95:d8:8f:10:69:bf:6b:
87:a6:6c:8e:f0:e6:d2:93:65:57:9f:af:50:47:50:f2:99:8a:
68:02:e7:ac:c4:19:ab:ef:59:b5:f1:04:0f:a7:60:6f:6e:71:
fc:7e:09:44:81:8c:ed:a1:82:93:a8:6b:38:a5:e2:86:40:16:
8d:28:6d:74:84:cb:de:dd:e3:db:22:92:95:65:de:55:01:4b:
19:1b:75:3d:37:da:c3:1b:8b:43:ef:af:0c:90:ad:56:df:34:
fd:30:5e:dd:e9:c3:46:b2:e7:3c:b3:77:72:79:ff:af:07:b1:
fd:05:06:d0:c0:51:2f:e7:06:be:71:ad:ee:d0:84:8d:93:12:
7a:cb:fc:60:3f:e4:74:c8:d2:5f:b7:e8:89:f4:5f:be:65:dc:
6b:fe:2a:14:62:f2:1c:59:24:f9:29:41:9c:18:f8:7a:c6:28:
0d:e5:8f:49:20:bb:d2:18:0e:a4:29:cd:67:c6:ce:53:65:09:
3b:05:fb:ac:1c:65:28:92:00:38:5f:0a:28:81:0b:10:ca:59:
c5:b2:b4:cc:4f:42:ae:e5:28:6e:29:f9:f7:54:7a:f4:83:49:
77:0f:10:e8:eb:85:ff:ec:9c:a2:dd:61:af:05:1f:b8:29:ef:
a1:0e:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:39 2026 by rpki-client