Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/h7b1e-fYNrOFKY69rJAwyPwBQlI.roa
File: h7b1e-fYNrOFKY69rJAwyPwBQlI.roa (raw, json)
Hash identifier: a8WXz49agKGnTCvXU5WXk2SqsC8W6MUt/TapTI9Vb6k=
Subject key identifier: 87:B6:F5:7B:E7:D8:36:B3:85:29:8E:BD:AC:90:30:C8:FC:01:42:52
Certificate issuer: /CN=8c33ae4c1ab3976f49a41febe9a08f52b6ae103e
Certificate serial: 01A163EB2ADA6FED5D54D936EBB91D01495D
Authority key identifier: 8C:33:AE:4C:1A:B3:97:6F:49:A4:1F:EB:E9:A0:8F:52:B6:AE:10:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDOuTBqzl29JpB_r6aCPUrauED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/h7b1e-fYNrOFKY69rJAwyPwBQlI.roa
Signing time: Thu 22 Oct 2026 14:01:58 +0000
ROA not before: Thu 22 Oct 2026 14:01:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33991
IP address blocks: 188.0.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDOuTBqzl29JpB_r6aCPUrauED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:eb:2a:da:6f:ed:5d:54:d9:36:eb:b9:1d:01:49:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ae4c1ab3976f49a41febe9a08f52b6ae103e
Validity
Not Before: Oct 22 14:01:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87b6f57be7d836b385298ebdac9030c8fc014252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:24:9e:70:11:3f:06:23:0f:cf:4e:e9:17:
fa:7e:63:af:dc:c3:8f:e3:9f:6c:86:cf:c0:86:b2:
e6:75:2d:8f:d4:58:b0:44:95:5c:29:75:4e:b8:1b:
19:3f:94:3d:32:4b:d4:d5:11:e9:b3:ee:ca:0d:db:
71:ea:5f:2d:24:d4:20:2d:51:b7:2a:65:a7:34:01:
11:0d:79:b7:df:0b:b6:09:e7:f2:b7:b7:f7:a8:ce:
1f:a4:0c:25:d1:3a:c4:07:d1:cb:3e:9f:76:5b:f3:
c3:c3:31:0d:88:4f:e9:c8:f5:cc:ba:04:29:0b:ed:
d2:96:0d:8d:b5:ca:9b:9a:19:ab:09:0f:6f:67:b5:
40:2b:51:e2:b4:4e:95:26:01:f1:83:bd:30:f6:49:
8a:94:51:6a:ec:94:b6:84:be:bc:d0:6c:33:d1:b5:
91:34:67:1f:79:4d:75:37:09:17:37:34:c2:76:1f:
e2:73:bb:ca:d8:d8:98:3d:f7:89:a0:25:81:40:7d:
7a:21:4f:c2:6c:b6:b7:83:25:15:d4:54:64:63:32:
d4:29:c5:62:c7:4c:e5:79:43:a1:bf:48:c9:63:4e:
4e:95:ec:40:7e:c1:fd:04:36:01:d6:44:e4:c6:27:
bf:b7:82:24:3b:24:9b:42:b4:79:1e:d2:e9:6b:3f:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B6:F5:7B:E7:D8:36:B3:85:29:8E:BD:AC:90:30:C8:FC:01:42:52
X509v3 Authority Key Identifier:
keyid:8C:33:AE:4C:1A:B3:97:6F:49:A4:1F:EB:E9:A0:8F:52:B6:AE:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDOuTBqzl29JpB_r6aCPUrauED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/h7b1e-fYNrOFKY69rJAwyPwBQlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.0.28.0/22
Signature Algorithm: sha256WithRSAEncryption
22:f2:c8:3d:51:7b:69:15:5c:b4:3d:07:79:6a:a8:8c:6f:45:
11:6e:5d:c8:df:a2:43:87:39:d7:5d:9e:26:7b:c5:02:5a:62:
80:0e:92:7e:2d:ed:50:2e:b1:43:5d:21:97:d7:df:68:48:b7:
a0:3a:6d:08:20:c4:50:01:c6:4d:9e:98:11:a4:0c:ef:b1:9e:
bd:d9:86:62:f3:76:a5:b7:af:5e:95:74:01:d1:b4:26:a4:90:
9e:65:bf:8d:68:66:0d:c9:ae:c6:b1:60:19:f8:7a:96:b8:83:
b4:33:d7:33:0a:31:42:69:31:8f:33:df:03:20:78:36:39:f8:
ab:83:09:44:d7:99:56:2b:6d:24:9b:dd:c1:98:44:21:41:8a:
64:71:da:5b:a5:7c:3a:93:df:98:25:07:5a:fe:c5:88:1b:04:
9a:b2:8a:d9:b2:af:8c:06:e3:50:51:fe:20:20:a5:d2:84:24:
cb:9b:69:7a:e0:76:a0:e3:23:6b:82:41:09:1d:82:31:c0:7b:
ec:43:86:3b:7a:43:a8:0c:b3:23:8c:0d:3c:e4:0f:ca:9e:f1:
89:f1:6e:d0:17:b5:86:4b:47:20:f7:c7:25:60:a4:ac:87:b5:
99:d8:e5:66:f9:09:32:be:94:b9:91:1f:a1:c2:20:fc:da:78:
98:5c:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:40 2026 by rpki-client