Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/8RlFcN6gLbpUc6FFzlURVV6HRUw.roa
File: 8RlFcN6gLbpUc6FFzlURVV6HRUw.roa (raw, json)
Hash identifier: Tx6IxgxGtMFyzuZm5nI4v5qQk6SBxlPImSdMh1gmEkw=
Subject key identifier: F1:19:45:70:DE:A0:2D:BA:54:73:A1:45:CE:55:11:55:5E:87:45:4C
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 019FB32D908A170E2E72006F4E02AECB5AE6
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/8RlFcN6gLbpUc6FFzlURVV6HRUw.roa
Signing time: Thu 30 Jul 2026 13:18:55 +0000
ROA not before: Thu 30 Jul 2026 13:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 188.213.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:2d:90:8a:17:0e:2e:72:00:6f:4e:02:ae:cb:5a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Jul 30 13:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1194570dea02dba5473a145ce5511555e87454c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a8:f6:6c:cc:45:e9:0b:b4:ac:e6:5b:4e:94:
df:5a:5a:d0:3e:84:42:a7:8e:c6:8d:98:e5:4f:1c:
90:5e:4c:05:eb:67:e3:5a:46:76:f1:18:20:cd:6e:
6b:83:4b:bd:7a:43:77:19:2a:a7:0f:ca:61:b7:00:
7f:a3:2d:92:50:fb:ed:97:be:17:df:41:68:92:dc:
e0:14:e7:da:ac:dd:6c:b3:98:26:71:1d:4d:78:93:
da:79:ad:36:8c:6a:1f:3d:e6:28:14:06:b2:d8:bf:
a2:cf:2e:b3:a9:29:e8:0e:21:fa:32:e8:13:a3:55:
fe:ba:73:ad:ae:b7:f3:b9:15:58:cb:2c:cb:c5:4e:
41:f9:47:3f:82:bc:1a:30:cf:42:13:73:af:e2:d4:
27:fb:3b:1e:72:15:5a:a6:ec:e2:89:13:e3:e2:97:
81:05:5f:c6:e0:b6:cd:a0:23:d0:e1:d1:35:0f:21:
d7:b9:79:b0:05:4e:48:15:7c:15:09:ad:69:dd:b2:
79:a5:95:f1:74:1f:ec:e3:2c:8e:17:86:d4:0c:2d:
5a:1f:6e:45:00:c1:39:61:d2:f7:59:db:e2:a7:9c:
7c:21:e1:2f:d0:48:b9:69:4e:65:cf:a0:19:49:8d:
3f:27:b0:23:f4:ec:1b:9c:00:bf:6d:2c:10:b3:15:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:45:70:DE:A0:2D:BA:54:73:A1:45:CE:55:11:55:5E:87:45:4C
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/8RlFcN6gLbpUc6FFzlURVV6HRUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bd:62:40:54:d2:50:73:3a:ff:b5:50:36:33:98:ed:79:1f:
f3:06:3c:4d:fb:fa:42:dd:59:54:b5:a8:8d:af:72:9a:db:bf:
35:1f:b5:89:6f:4e:94:0f:eb:59:41:18:a1:9a:a2:70:79:8d:
02:ad:d3:11:f1:49:0f:a9:05:9c:05:44:37:52:6e:eb:b4:7c:
a8:00:5d:c2:1c:f0:d2:24:54:03:c8:6f:22:64:5d:7b:36:54:
90:ef:cc:36:2e:94:29:e4:59:74:b9:c3:18:ac:9b:84:1e:5f:
00:67:77:c1:8a:a2:6f:75:4b:76:ec:2a:02:47:90:20:af:24:
61:61:3d:37:17:9d:c2:56:60:3a:2f:9b:c4:fd:ef:0d:4c:89:
be:7e:ab:2b:1f:94:8b:a6:25:5e:f1:d0:80:26:5c:4e:17:35:
a5:5e:d9:6b:84:2f:e0:57:70:b8:e4:47:df:0f:3d:74:eb:85:
6e:98:b5:95:84:72:ea:3c:86:7e:3e:44:e7:f4:eb:67:b1:4e:
97:2a:0d:4e:b3:84:81:12:21:8e:18:48:f7:87:aa:bc:ce:93:
15:97:f7:11:ce:f6:30:5c:93:b6:58:8c:d0:20:4a:69:c3:37:
e3:a5:d7:de:35:c3:70:2c:17:5f:52:9b:93:45:53:ac:72:92:
4a:a1:28:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:39:18 2026 by rpki-client