Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/8Z9LlW9pX1ZFA3wQNfdVO9-jjgs.roa
File: 8Z9LlW9pX1ZFA3wQNfdVO9-jjgs.roa (raw, json)
Hash identifier: XL3JspixgmL+Y5+ELAq1VBUarv7KKAfzu3TKsU6vMjU=
Subject key identifier: F1:9F:4B:95:6F:69:5F:56:45:03:7C:10:35:F7:55:3B:DF:A3:8E:0B
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019FEFB5B6F9BDBB2E2B8C2BF8F67537854F
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/8Z9LlW9pX1ZFA3wQNfdVO9-jjgs.roa
Signing time: Tue 11 Aug 2026 07:24:51 +0000
ROA not before: Tue 11 Aug 2026 07:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219023
IP address blocks: 205.178.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:b5:b6:f9:bd:bb:2e:2b:8c:2b:f8:f6:75:37:85:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Aug 11 07:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f19f4b956f695f5645037c1035f7553bdfa38e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:45:1e:66:e3:64:ff:24:13:c7:b2:81:11:
30:3d:47:bd:83:98:29:3b:16:fd:8b:23:7c:19:70:
b0:d9:ee:ab:b5:1c:dc:c8:fe:0b:7c:23:56:ad:b4:
f9:cc:f5:0d:0a:97:05:9e:ed:ef:5f:e8:8c:b9:fb:
98:ab:b2:b4:c7:ce:bc:c3:10:0e:a3:ce:0e:6c:a5:
74:1a:29:20:0f:c3:fc:a2:eb:7e:0a:9a:ea:f2:e5:
31:6f:f5:31:fc:8d:3f:26:8d:e2:8e:bf:78:61:02:
5f:4e:c1:64:43:ac:14:59:95:80:01:e9:50:3d:c7:
a6:eb:35:02:0b:dd:9e:8b:4e:21:92:07:19:0a:45:
12:0b:94:56:d3:80:52:db:e9:ab:dd:20:77:01:2d:
9d:93:fb:ee:22:b7:75:97:de:80:6a:5e:31:ad:58:
08:a1:36:2e:14:c2:6d:e1:64:c0:80:c5:8e:7e:70:
71:9a:b4:3f:35:3f:47:94:42:cd:69:dd:98:ec:b2:
79:ca:cd:c7:48:62:c1:5e:79:f6:82:86:70:4e:7e:
ba:8a:a4:f1:27:76:46:45:2e:8d:5d:5c:d3:2f:51:
0c:68:ae:db:75:51:00:88:ae:f4:c6:9c:85:87:39:
78:99:a5:92:b6:87:28:91:de:f0:8f:78:57:91:4a:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9F:4B:95:6F:69:5F:56:45:03:7C:10:35:F7:55:3B:DF:A3:8E:0B
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/8Z9LlW9pX1ZFA3wQNfdVO9-jjgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.178.176.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a3:07:be:92:af:84:c2:6e:0d:dd:94:85:2c:9c:26:40:e3:
a7:6e:d8:91:d5:e3:a6:04:43:30:9b:42:2e:1d:a9:af:30:e1:
5d:4e:59:e1:fb:3a:a9:33:8b:93:6e:fb:04:d5:ce:3f:8f:ef:
6f:1d:0f:ce:c9:30:eb:6b:44:ae:4f:79:8e:b9:48:23:f5:11:
7a:c2:09:e3:41:73:6d:6d:55:45:da:a5:c5:e9:57:12:1e:8f:
f2:61:85:07:5d:0b:51:7f:d2:07:28:a3:da:38:d6:48:8d:18:
ef:68:34:e1:62:e2:73:a2:ce:55:89:98:92:86:3b:bd:1f:25:
34:0f:24:a5:ef:10:25:6a:c1:03:5e:71:15:cd:10:53:56:ae:
20:c7:84:bb:75:9b:40:ff:4a:1e:66:6e:23:90:54:69:d5:cc:
d3:c5:75:5f:3b:a8:cb:53:b0:26:72:b8:c0:a7:7a:64:3e:3f:
68:a6:a0:76:a3:8d:0d:5a:c5:60:d1:44:54:5f:d2:3d:7b:9d:
2a:74:0f:8d:73:5d:fc:f3:29:bd:20:13:8f:56:ad:af:9e:60:
46:97:43:10:76:f4:17:29:36:e6:d4:3f:4a:ce:00:2d:d6:c2:
dd:03:c3:b5:3b:4d:dd:07:8f:84:8b:db:1a:d5:fa:6e:77:17:
de:9f:ab:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 11:58:35 2026 by rpki-client