Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8vTLhGPJ3Wo_wotejIGMXjesqAI.roa
File: 8vTLhGPJ3Wo_wotejIGMXjesqAI.roa (raw, json)
Hash identifier: +QVdTem+n8zUfi5vVc6Ro4yFpY8Pcxd/4kjxjDee9zo=
Subject key identifier: F2:F4:CB:84:63:C9:DD:6A:3F:C2:8B:5E:8C:81:8C:5E:37:AC:A8:02
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019FEA8AC76A92D507C609EB16A3E8B08524
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8vTLhGPJ3Wo_wotejIGMXjesqAI.roa
Signing time: Mon 10 Aug 2026 07:19:51 +0000
ROA not before: Mon 10 Aug 2026 07:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12396
IP address blocks: 91.219.124.0/22 maxlen: 22
194.247.168.0/23 maxlen: 23
195.8.34.0/23 maxlen: 23
195.49.192.0/21 maxlen: 21
212.109.168.0/24 maxlen: 24
212.109.169.0/24 maxlen: 24
212.109.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:8a:c7:6a:92:d5:07:c6:09:eb:16:a3:e8:b0:85:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Aug 10 07:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2f4cb8463c9dd6a3fc28b5e8c818c5e37aca802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:0b:54:9c:a3:1a:f4:07:84:21:69:30:fd:
37:af:2c:65:aa:71:b1:fc:65:59:6e:ff:c8:12:f3:
d1:c0:7f:02:35:82:ee:2e:fa:e7:4b:bc:10:a6:ae:
c6:5d:4a:02:55:f0:7f:81:b7:48:de:30:2c:f3:95:
3f:40:34:74:62:70:0d:35:34:eb:2d:2c:d8:f9:10:
f1:33:62:7f:38:08:3a:82:eb:60:9b:14:64:f4:32:
a4:e3:0e:84:e6:20:86:66:5f:90:49:40:c9:35:6e:
8c:4b:96:89:31:07:e7:69:be:58:e1:06:80:c9:fd:
1a:d3:06:43:68:d7:7a:f1:2c:d7:68:59:2d:47:b2:
bd:36:af:8f:76:77:4b:d7:7a:2f:85:08:f8:33:5a:
04:b5:2a:f6:59:79:3b:28:11:fb:9d:0f:07:6d:c5:
e8:9c:db:fc:80:0a:8a:f8:83:9e:76:e8:52:5a:47:
c7:5a:32:1d:11:50:2c:70:8d:29:f3:2c:fb:11:3c:
c7:f3:ae:f2:83:cf:94:8b:cd:47:6d:8c:cc:6b:ee:
47:b8:da:26:f2:e6:a2:29:46:02:2f:5c:0b:0c:60:
1c:02:98:05:84:f0:4a:e8:8d:73:39:87:c8:b7:46:
37:f4:b4:3c:e7:86:37:b2:23:09:92:a9:e3:32:e7:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F4:CB:84:63:C9:DD:6A:3F:C2:8B:5E:8C:81:8C:5E:37:AC:A8:02
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8vTLhGPJ3Wo_wotejIGMXjesqAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.124.0/22
194.247.168.0/23
195.8.34.0/23
195.49.192.0/21
212.109.168.0/23
212.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7f:da:24:bb:08:32:17:0a:c1:e0:6f:51:0f:b4:9c:bd:f3:
d5:4b:ec:3e:a5:a8:f9:f3:27:ec:c1:84:2a:b8:e3:73:73:01:
3a:d4:7b:fe:e5:31:b9:ae:55:03:ab:9f:dc:0f:e8:8b:ac:07:
52:54:09:cf:d0:ec:d7:81:73:42:b0:5f:80:07:71:d9:0d:12:
a0:f9:c8:77:97:68:1d:e1:fc:b7:2c:19:69:23:75:80:1c:ea:
a5:a7:5b:bd:48:86:6d:92:08:01:eb:ac:0a:d4:b8:28:8d:e9:
78:4c:91:f4:1a:32:c7:b5:4b:00:46:6c:4a:30:25:70:4c:1c:
80:e8:a6:19:86:f4:42:9d:bd:94:6f:aa:31:42:c2:67:28:74:
ac:63:87:20:03:fa:3d:22:6f:02:4f:e4:be:79:63:1a:7e:37:
1b:2b:10:1d:ad:c1:a2:40:23:3f:6b:15:12:7d:eb:9c:e5:c6:
98:16:35:e8:d7:6b:b6:6b:5b:f4:65:ea:dc:96:c1:4b:2b:26:
11:16:ab:d0:df:c9:00:f3:c7:09:11:a1:04:0f:de:31:95:df:
19:86:c6:53:d8:aa:4e:d0:cf:47:58:99:3b:77:0e:71:ed:4e:
fa:2f:83:cf:de:5f:2b:1c:b4:4b:7f:1a:b7:58:ac:f0:99:2b:
af:ec:c4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:16:32 2026 by rpki-client