Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/M8HxuDTjeppXENHYtsmDwzIxfqg.roa
File: M8HxuDTjeppXENHYtsmDwzIxfqg.roa (raw, json)
Hash identifier: ehN4HCrYdAsRJz9J+AoM/g7LUsIA+10CKLm98CDchvI=
Subject key identifier: 33:C1:F1:B8:34:E3:7A:9A:57:10:D1:D8:B6:C9:83:C3:32:31:7E:A8
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 019F13044B16FACF5446308E073ADA8F9CC6
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/M8HxuDTjeppXENHYtsmDwzIxfqg.roa
Signing time: Mon 29 Jun 2026 10:54:36 +0000
ROA not before: Mon 29 Jun 2026 10:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50399
IP address blocks: 185.150.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:04:4b:16:fa:cf:54:46:30:8e:07:3a:da:8f:9c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Jun 29 10:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33c1f1b834e37a9a5710d1d8b6c983c332317ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:26:dc:aa:8e:66:1f:95:0c:f1:ee:0d:dc:
7d:45:d5:37:f4:20:91:4f:0f:b8:04:78:36:8e:f7:
0c:8c:a1:a5:01:39:01:c8:f9:41:6c:03:48:f9:b6:
cf:2d:83:15:0c:d2:a7:66:34:09:aa:24:bf:d7:f6:
d2:f9:66:2f:5a:a4:5f:e9:96:e6:71:09:f7:76:dc:
75:50:9e:a1:8f:3d:38:76:e8:f2:3d:c9:7c:8f:81:
87:17:22:ce:57:ba:7c:d1:17:21:f9:80:3c:a2:c4:
a5:65:4f:7c:46:dc:42:1a:47:90:e1:ea:1a:8e:15:
9a:51:67:5f:e7:e6:bf:43:d6:cf:59:4f:32:f3:4c:
db:62:b0:db:cb:7e:7a:98:0a:12:c8:b5:41:2b:f0:
57:2c:84:ef:66:57:6f:8b:ac:3c:9a:f9:5a:9e:c8:
8a:66:16:bf:1a:c6:9b:90:f1:b4:19:02:6a:38:fa:
7d:99:e2:ea:09:f6:b1:3f:a1:2b:5b:70:59:85:bb:
b0:46:c5:59:ac:bc:9b:6a:39:05:2f:b4:ca:b9:39:
98:91:63:a0:27:6d:e5:17:ba:57:4d:bc:db:16:34:
3a:62:56:c1:ea:37:da:96:80:6f:22:d8:23:94:16:
46:fc:4d:e1:3c:b9:1e:aa:b5:40:ad:52:ed:3f:a7:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C1:F1:B8:34:E3:7A:9A:57:10:D1:D8:B6:C9:83:C3:32:31:7E:A8
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/M8HxuDTjeppXENHYtsmDwzIxfqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.159.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8e:d0:d6:d0:22:a1:32:a8:8b:c2:bc:3a:52:b3:52:3e:16:
53:3d:fb:28:11:bb:02:7d:ca:0b:11:d2:fa:26:c7:d2:bd:3b:
35:e0:af:d0:82:ca:b7:f6:64:44:70:7e:e0:db:51:3b:ee:54:
9f:a9:5a:e5:10:bd:78:18:f0:3f:22:82:e6:01:17:e5:c1:b3:
9d:94:0d:cc:f0:01:4c:6d:6d:92:86:1a:5c:b9:32:ac:1e:3b:
70:20:a4:24:f0:b1:53:3c:ca:cc:48:0f:16:30:a5:b3:c9:fe:
c0:c8:2b:c2:33:2b:55:f0:f3:b6:72:f1:82:41:21:96:83:f9:
20:d9:85:9e:ac:20:28:e4:d1:de:b5:e3:ad:d9:c6:6a:c5:2d:
fe:f3:4c:d4:aa:51:0e:c3:f5:6a:a8:00:af:37:3b:2f:7d:82:
af:38:04:c5:35:b6:c1:53:55:ef:a8:c1:fa:3c:2e:f4:2b:75:
a0:e9:48:72:82:01:92:9c:20:f4:4b:55:f3:dc:3f:4c:cc:11:
8c:62:6b:67:96:46:c7:be:74:98:9b:e2:c4:94:02:f3:8a:42:
f1:a3:95:f0:fc:c9:7b:e7:90:f3:86:cd:b4:ef:e5:6c:e3:8f:
a4:3c:64:da:1d:f9:f8:d9:03:eb:4e:bb:e1:a2:60:e8:ca:d5:
80:fb:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:32:59 2026 by rpki-client