Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa
File: H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa (raw, json)
Hash identifier: QhTyNMDXFYnK58Oe3Oi5QvMxyGR5QCyt3DqruWhYNhc=
Subject key identifier: 1F:C8:72:DC:CF:9D:65:B1:79:2C:5F:9B:2C:D2:8B:1A:44:80:88:CF
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019CB9B18E0FC9EAB07C6F1636B3A2B0CC1C
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa
Signing time: Wed 04 Mar 2026 16:32:27 +0000
ROA not before: Wed 04 Mar 2026 16:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202973
IP address blocks: 104.247.180.0/24 maxlen: 24
185.73.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:b1:8e:0f:c9:ea:b0:7c:6f:16:36:b3:a2:b0:cc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Mar 4 16:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fc872dccf9d65b1792c5f9b2cd28b1a448088cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:65:b6:e9:cb:fe:85:60:81:f5:67:ea:f7:
cb:a4:28:58:fe:e5:df:18:03:25:ff:52:d8:ab:11:
5b:ef:c0:b5:75:3b:69:df:6a:b6:6e:d7:38:fe:ce:
ef:6c:39:e0:17:bf:34:29:90:37:ed:52:e1:51:88:
75:81:bd:10:e3:6c:de:18:6f:d6:59:b3:17:05:f6:
52:06:f1:2c:9f:32:ea:dd:68:1b:60:98:88:6e:91:
95:34:da:26:6e:1c:f7:bb:dd:2e:35:fe:57:fe:88:
42:ad:36:be:6b:d3:61:f5:fb:1e:dd:31:48:40:70:
01:53:15:c5:2a:e9:81:60:fa:11:7b:fa:56:f6:40:
9c:0e:42:49:4e:67:0f:9d:9b:49:15:32:2e:f1:19:
6c:85:64:83:04:ad:9b:35:74:90:09:0f:d3:aa:ee:
cb:f6:4a:76:f6:74:34:82:5b:4a:1b:d5:33:ce:59:
79:f1:d4:30:67:6b:36:d4:10:aa:5e:0e:47:f1:10:
b1:2d:83:5b:fe:a8:02:5f:84:41:fb:1e:ba:c1:94:
0d:b8:1f:55:26:9e:48:b7:ba:36:1f:e3:76:8c:26:
2d:f6:1b:d3:b6:25:15:ea:bb:1b:ea:aa:3b:fe:12:
8c:2a:43:67:87:ed:ea:47:ba:1a:6d:17:85:6e:e7:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C8:72:DC:CF:9D:65:B1:79:2C:5F:9B:2C:D2:8B:1A:44:80:88:CF
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.180.0/24
185.73.129.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5b:8e:30:6b:f1:f2:a1:41:17:a3:31:dd:41:bd:b4:3f:6d:
f0:16:28:c3:5f:cd:ac:10:d0:d5:76:2b:35:b3:d2:81:cc:97:
03:d4:4a:d4:06:c7:5f:e2:63:20:dc:d8:d5:96:de:03:2e:dc:
6d:86:7d:12:cf:de:24:d7:37:97:27:45:59:b0:af:b9:d7:47:
aa:07:86:18:47:fb:f8:1c:f3:41:f4:41:2f:3a:a2:47:a1:a1:
8b:0f:7a:72:bf:19:c7:79:e0:59:37:e2:f7:bc:69:4a:98:9d:
fa:48:e9:bd:1e:cc:e8:64:df:74:e5:3a:df:42:5d:a5:55:f9:
63:d1:57:eb:44:94:74:9c:a0:4e:00:32:b6:f6:b3:45:60:41:
ee:e2:df:68:a0:6e:41:22:15:e1:69:20:91:24:0e:78:2c:e5:
83:e1:40:56:0f:86:8f:4c:44:55:06:f2:4e:4a:1b:d0:08:ae:
9c:21:8e:8d:2e:b6:ce:af:b0:5c:0a:36:75:dd:b7:b4:3d:c1:
60:d5:09:62:75:9e:90:43:b2:65:32:19:05:eb:57:fb:bf:8a:
0f:d0:85:0b:ea:19:c8:8b:34:8a:e1:9d:5b:5d:8c:bc:d7:d8:
de:9f:ee:c9:45:cd:ef:d4:35:2f:eb:9c:08:5b:80:c7:04:ce:
0b:6f:93:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 03:46:53 2026 by rpki-client