Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i959_gdVGRm6QO67PWsOk3T7eL8.roa
File: i959_gdVGRm6QO67PWsOk3T7eL8.roa (raw, json)
Hash identifier: jJjdKQ0vvTECaFjaMiXytClGMzJNXQVMe4chBKID0rk=
Subject key identifier: 8B:DE:7D:FE:07:55:19:19:BA:40:EE:BB:3D:6B:0E:93:74:FB:78:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FEA36930539108154C56AB6AD691BD8AF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i959_gdVGRm6QO67PWsOk3T7eL8.roa
Signing time: Mon 10 Aug 2026 05:47:52 +0000
ROA not before: Mon 10 Aug 2026 05:47:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 37.202.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:36:93:05:39:10:81:54:c5:6a:b6:ad:69:1b:d8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 10 05:47:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bde7dfe07551919ba40eebb3d6b0e9374fb78bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:6b:eb:35:be:8a:a0:17:bb:a4:df:c0:9a:
15:99:c1:86:9c:e8:9e:3f:33:22:01:63:7d:ba:a7:
40:f9:f2:58:1f:15:91:0e:7f:d6:bf:e7:5a:71:a0:
3d:5c:85:2c:f8:c9:f0:e5:3a:6e:7f:f0:3a:cf:63:
2b:17:32:81:56:77:bf:4c:ad:6d:c5:3b:f2:9d:c1:
e5:47:30:fe:d2:ce:4b:64:c8:59:ad:e6:12:a9:71:
c8:9d:30:7c:d2:c9:a9:a2:df:2d:b7:1f:4b:6e:81:
57:5e:6e:d9:85:fc:88:d6:f1:4d:0b:5d:06:97:6c:
80:79:8d:a3:dc:61:73:0f:d2:1f:99:ad:c5:9e:95:
7a:3c:ec:d3:3d:09:22:5d:97:c5:27:57:d0:56:8a:
b5:a6:be:4d:6f:0e:b1:82:bf:5b:95:07:a4:8b:de:
2c:e1:19:94:52:54:ec:62:20:64:ed:51:8c:52:46:
c5:9e:10:74:9c:e9:56:64:4c:50:d2:0a:07:0e:8f:
6c:8d:c7:67:99:35:ea:c9:2f:1b:74:40:0c:5a:dd:
74:82:33:59:31:78:b1:e4:ee:39:ed:c2:c8:66:85:
86:86:3b:d1:07:47:de:18:3b:72:4c:b3:ab:13:48:
59:8a:dd:c9:cc:9e:75:ef:3d:18:de:8e:df:9d:05:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DE:7D:FE:07:55:19:19:BA:40:EE:BB:3D:6B:0E:93:74:FB:78:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i959_gdVGRm6QO67PWsOk3T7eL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.211.0/24
Signature Algorithm: sha256WithRSAEncryption
af:60:a1:f4:cc:a7:5b:e5:f3:f5:97:8b:a5:25:52:f7:96:a1:
a6:44:ed:48:dc:62:8a:d8:71:d0:22:0e:cd:8e:5a:fd:8c:36:
fb:ae:0d:8d:37:d1:63:2c:b8:4b:cb:30:a8:6a:fe:8b:57:f0:
3d:2c:65:ae:ad:65:fb:97:da:83:f8:49:de:75:a6:b2:6c:21:
21:9b:f6:fe:62:37:47:68:9e:cb:4e:53:08:7f:ad:51:ad:a7:
36:5c:70:39:e5:35:a6:ad:e7:55:15:64:a1:10:94:3b:d0:1a:
10:9e:79:85:f6:97:24:f4:bf:c3:13:a2:93:97:37:c4:90:cf:
b9:bc:69:f1:29:3a:08:c5:2c:1d:83:0a:bb:72:c5:78:97:b0:
e3:3d:ce:a3:95:50:5a:c3:15:b5:95:b8:dd:fd:f4:a2:35:e1:
73:df:59:0c:13:97:20:c0:65:20:a1:e2:59:cd:12:40:bf:cf:
7f:a2:3e:b0:c0:de:98:ab:d3:d3:fc:88:05:80:04:c5:2a:cc:
2e:90:8a:92:0f:13:60:06:59:86:b3:ed:fa:6f:83:71:27:60:
28:e5:77:a5:b4:c9:52:c9:0b:39:25:d7:78:b2:95:8e:51:e6:
4a:48:ab:dd:a2:c0:b6:58:67:e0:0b:b1:71:e1:f1:00:ef:d0:
fd:2a:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:35 2026 by rpki-client