Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/b8fmiRsHfa1HeafrL2c67PcFnCg.roa
File: b8fmiRsHfa1HeafrL2c67PcFnCg.roa (raw, json)
Hash identifier: LNAixwqyhx4gcnGKNiUYlHjHNINv1hh3kb/KDSTw940=
Subject key identifier: 6F:C7:E6:89:1B:07:7D:AD:47:79:A7:EB:2F:67:3A:EC:F7:05:9C:28
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 01A01DDF383B4208D78D6B5F5B878C67A6E1
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/b8fmiRsHfa1HeafrL2c67PcFnCg.roa
Signing time: Thu 20 Aug 2026 06:32:43 +0000
ROA not before: Thu 20 Aug 2026 06:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 134.96.0.0/16 maxlen: 16
192.109.115.0/24 maxlen: 24
192.109.116.0/24 maxlen: 24
193.17.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:df:38:3b:42:08:d7:8d:6b:5f:5b:87:8c:67:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Aug 20 06:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fc7e6891b077dad4779a7eb2f673aecf7059c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:b0:3e:4e:c7:a7:95:85:e7:e7:cf:13:1a:
78:18:67:56:cc:7b:34:13:71:9f:e3:04:07:64:55:
55:ab:64:1f:78:fb:aa:3f:bb:06:07:fb:27:66:34:
41:74:50:13:8b:30:2b:7b:1e:b7:c3:63:12:ad:e0:
74:0c:a7:13:f2:1f:9c:5c:6c:4f:5b:c2:c9:af:7e:
83:ed:fe:9c:c8:1a:4e:82:77:5d:cb:47:aa:e1:58:
6e:af:77:1b:da:55:af:9e:2b:6a:92:76:de:79:5f:
73:f8:2c:2e:77:e1:c7:a7:4d:20:df:91:a7:11:79:
13:dc:0e:ec:1f:a9:a6:92:27:ae:5e:72:af:0f:d4:
e7:32:09:cf:e8:2c:25:bf:e7:35:e3:63:84:6d:88:
11:3c:b6:a9:bb:12:13:89:d0:eb:b5:7d:42:f1:91:
fb:bb:5a:e0:c5:45:52:95:32:a2:01:5a:0e:2b:e9:
99:cb:51:91:24:4a:62:86:4f:e5:82:e6:72:4d:01:
0c:d1:6d:e5:32:95:d4:a6:fc:e6:d0:c1:04:00:fa:
83:d4:bd:7c:18:47:b5:42:e9:cd:97:8e:81:3b:50:
49:a8:47:62:62:9c:38:45:59:fa:d7:3c:c6:52:c3:
e4:50:e8:af:6c:ea:60:55:39:26:7c:16:ac:f0:2e:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C7:E6:89:1B:07:7D:AD:47:79:A7:EB:2F:67:3A:EC:F7:05:9C:28
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/b8fmiRsHfa1HeafrL2c67PcFnCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.96.0.0/16
192.109.115.0-192.109.116.255
193.17.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:94:de:a2:52:27:f1:f2:c6:e8:f4:7c:f3:3d:de:6a:24:db:
9e:de:16:de:26:2c:fb:5c:ef:db:2e:d7:7e:3b:13:f1:27:b8:
aa:1d:db:14:89:a8:72:d2:7c:21:16:8d:73:e7:cc:af:55:61:
27:ed:5e:61:7b:8e:84:7b:66:74:5a:2c:2b:bd:e1:87:4e:a8:
aa:50:ac:96:a8:14:d4:62:fd:b2:9a:fd:14:6d:7d:45:20:8c:
4b:23:1e:dc:6b:8f:f7:e0:f5:53:d6:bc:82:c3:60:a4:92:e6:
cf:20:38:71:91:46:b3:dc:1c:7b:15:a3:56:61:2f:46:b8:a5:
af:93:cc:d4:45:de:45:0f:fb:45:d7:63:3c:77:5f:70:a1:5f:
bf:10:81:c7:33:eb:5f:e7:a3:7c:2e:43:13:c2:62:23:94:12:
03:3f:52:02:c0:e6:01:6f:69:b1:29:79:c3:6a:c3:e8:d0:46:
b4:9d:21:24:bd:5f:51:db:86:bf:78:ee:e8:76:55:2a:be:d9:
90:7c:7b:d3:5e:85:66:4f:bf:79:99:42:17:87:d3:40:5b:eb:
1b:e3:c8:cc:d3:e2:a7:84:de:41:52:fa:57:2a:79:b6:8e:5d:
0f:f3:e8:ea:e4:05:1d:89:f3:bb:14:13:7e:6f:2a:49:a8:4a:
7d:af:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:16 2026 by rpki-client