Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/8fT9Bwo1qSnIQUTFAaZlznnjaVE.roa
File: 8fT9Bwo1qSnIQUTFAaZlznnjaVE.roa (raw, json)
Hash identifier: ZgX4jXJIUC299mXxW62RnNsImL/nPwTMHS9fEBFmaP4=
Subject key identifier: F1:F4:FD:07:0A:35:A9:29:C8:41:44:C5:01:A6:65:CE:79:E3:69:51
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 019FD8322A67933DB4022C7EDFE1DF2461E5
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/8fT9Bwo1qSnIQUTFAaZlznnjaVE.roa
Signing time: Thu 06 Aug 2026 17:49:54 +0000
ROA not before: Thu 06 Aug 2026 17:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200845
IP address blocks: 85.208.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:32:2a:67:93:3d:b4:02:2c:7e:df:e1:df:24:61:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Aug 6 17:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1f4fd070a35a929c84144c501a665ce79e36951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:31:b6:ee:20:ee:f3:99:78:b7:3d:c1:bf:
d7:35:86:43:13:1e:c8:64:62:e6:52:aa:50:2b:4e:
83:79:6b:14:55:48:c8:95:3c:8a:21:84:72:da:bd:
78:fc:4f:4b:db:69:62:79:78:6a:5a:75:28:6d:1f:
71:7d:81:38:00:84:02:7a:c0:5e:87:df:86:73:30:
58:54:35:fa:23:07:59:04:f1:da:1a:f2:96:7b:30:
03:af:f4:10:e9:7d:aa:38:8d:59:bc:46:95:6d:44:
5b:f4:f7:c4:f6:35:dc:23:f1:97:8c:92:d4:3b:46:
81:29:f5:f6:3e:63:5f:9a:a4:54:85:17:c2:06:2b:
6f:68:65:a2:d0:7a:36:c0:50:83:22:08:3b:3b:70:
3e:ed:a5:17:0b:a9:10:67:6b:88:8e:5a:7f:f1:61:
34:e9:82:74:3d:a6:a8:1d:2f:42:de:ca:13:73:90:
fc:a1:d7:59:0a:c3:f4:a4:94:48:b8:f5:6d:3d:6c:
6c:60:13:b8:02:66:99:18:99:f6:fb:31:7a:7d:e6:
ea:e3:2e:9a:a8:87:b4:54:96:03:b8:78:ef:b5:0a:
41:0f:f3:db:10:f3:a9:48:98:1a:68:43:5d:ef:9c:
63:51:55:2d:38:b3:cb:24:12:7d:bc:b8:fa:b6:33:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:FD:07:0A:35:A9:29:C8:41:44:C5:01:A6:65:CE:79:E3:69:51
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/8fT9Bwo1qSnIQUTFAaZlznnjaVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:56:7a:53:86:22:8a:f2:7f:91:68:8c:00:c2:84:d9:4a:02:
09:64:fc:17:28:98:12:88:19:03:b1:9f:44:2d:7e:d0:b5:76:
f5:00:6d:e1:c0:64:7c:01:c4:ab:72:51:4b:61:9e:d1:3c:6c:
15:10:c9:4d:8f:de:33:bc:c2:59:a8:cb:fb:8c:e7:44:47:f8:
80:e3:f4:1a:b8:a8:ea:13:1f:e3:80:48:2f:c0:e4:59:ad:f2:
5e:f2:03:dc:98:b3:f8:d8:46:e5:40:44:9a:4e:c2:86:d9:6b:
c7:3d:ba:3b:64:45:33:ab:a0:5e:65:ff:32:d2:c8:f7:41:25:
04:1e:10:73:15:82:66:77:9c:d3:2e:bd:14:4f:79:b5:e5:b2:
32:36:de:ab:df:f3:d0:73:af:e9:7a:b8:90:96:db:c9:84:ed:
81:3a:e8:ee:38:be:4b:a5:90:51:a9:35:e2:6a:68:57:d6:5e:
11:41:11:36:58:32:00:e8:87:5f:44:8a:aa:bf:b2:82:70:ff:
13:99:ad:09:f3:40:09:85:9f:3d:89:16:e5:9d:89:e4:1b:12:
ce:30:d9:e6:10:11:e2:6d:b7:bd:31:60:6c:1d:93:70:38:8b:
fb:0b:31:53:76:6f:30:83:72:ce:6a:17:6b:ac:78:90:74:97:
13:5f:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:29 2026 by rpki-client