Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/8OPSC16RY36j4n0kBE2Yq11beWI.roa
File: 8OPSC16RY36j4n0kBE2Yq11beWI.roa (raw, json)
Hash identifier: cFFStpz00EWP1nrdo74i6fEMUpfwB9wfd/V5QPzO7dQ=
Subject key identifier: F0:E3:D2:0B:5E:91:63:7E:A3:E2:7D:24:04:4D:98:AB:5D:5B:79:62
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019F3BD63CCE57C9C2299B5B61BE738308A7
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/8OPSC16RY36j4n0kBE2Yq11beWI.roa
Signing time: Tue 07 Jul 2026 09:08:43 +0000
ROA not before: Tue 07 Jul 2026 09:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204380
IP address blocks: 78.28.225.0/24 maxlen: 24
78.28.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:d6:3c:ce:57:c9:c2:29:9b:5b:61:be:73:83:08:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jul 7 09:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0e3d20b5e91637ea3e27d24044d98ab5d5b7962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:cd:fa:91:0c:e1:36:2c:db:d0:f4:c6:cb:
f9:7d:6a:87:ec:1f:ac:34:59:c7:10:28:ff:97:51:
1e:9c:a5:a6:15:82:73:24:f0:be:a1:b4:2b:36:96:
a3:76:d0:5b:2e:b3:65:9c:6c:47:2f:79:2d:cb:48:
e6:75:70:56:45:e0:58:60:31:50:6c:32:53:0c:de:
a1:12:74:b5:24:51:bf:50:a3:9d:39:ee:79:a2:34:
9c:80:c1:99:96:d1:33:de:b3:1b:1d:0d:dd:21:4d:
75:ae:12:3b:95:2e:ee:6d:42:7a:1a:54:c0:bf:56:
b8:1e:41:d0:45:d5:c9:db:77:d0:71:9b:ea:f3:69:
88:19:81:83:4f:2e:d7:08:29:34:ea:19:be:1f:5c:
9c:69:1e:fc:f7:5e:62:ea:d6:9e:b7:46:09:58:a2:
88:3f:38:b9:78:93:6d:22:73:0e:48:06:a2:fe:9e:
ba:85:0d:cc:8a:c2:d5:f7:31:19:22:c7:7d:06:0e:
89:d7:eb:01:69:4c:9c:1b:ce:93:27:b4:78:f0:48:
b3:fe:f5:bb:f4:de:d5:f9:66:b8:8b:f2:c3:81:bb:
c4:4a:95:a5:0c:60:fa:3f:76:0a:fc:63:07:04:f2:
3b:5c:df:19:9d:30:8c:f7:24:a5:74:d3:d0:81:50:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E3:D2:0B:5E:91:63:7E:A3:E2:7D:24:04:4D:98:AB:5D:5B:79:62
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/8OPSC16RY36j4n0kBE2Yq11beWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.225.0/24
78.28.239.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a3:e1:b1:0c:d0:ae:a2:12:26:b0:04:64:91:5f:70:4e:c7:
a9:76:c0:05:37:35:71:b7:32:73:7d:87:0d:9d:8d:61:52:5a:
85:22:0f:cc:04:bb:f1:3b:12:e9:1b:c0:7f:b2:bb:1f:9c:44:
66:52:99:b3:62:21:33:70:5f:8a:42:69:89:8c:8b:10:df:f3:
63:27:19:cc:08:e8:28:47:83:ce:5f:3c:b5:3f:29:8e:b2:51:
29:bb:cb:b6:38:d0:4a:c7:19:65:15:fb:db:2f:91:8a:be:b7:
5a:f3:03:8c:a3:79:a9:64:63:7a:d8:37:c3:9f:89:25:24:3f:
5a:31:67:3a:45:28:a4:8a:80:92:ef:a0:bf:67:b4:26:1a:53:
82:db:d2:3b:8e:0c:e6:27:7c:cf:ca:86:dc:76:6a:e0:36:b9:
96:7f:dd:12:0d:12:0a:47:bb:41:aa:55:f0:39:70:04:00:75:
51:54:5b:30:33:d9:85:5d:77:2e:f3:37:46:9b:28:2d:43:84:
fe:94:2a:1a:ba:04:7f:b3:82:37:45:90:49:9f:cd:73:ab:e9:
55:25:99:e3:85:a8:8b:1c:14:e5:b3:1d:9a:b4:37:bf:40:4e:
51:a2:fc:47:51:91:41:a6:29:f0:bf:bd:79:27:13:a1:98:4d:
48:26:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:42 2026 by rpki-client