Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/REp8AFKGns5xiYXkDqFGd2SbJUU.roa
File: REp8AFKGns5xiYXkDqFGd2SbJUU.roa (raw, json)
Hash identifier: tlQAtFV34/SZMwY/TuTVauUOXrAR3Dodz+yvtAKxe5o=
Subject key identifier: 44:4A:7C:00:52:86:9E:CE:71:89:85:E4:0E:A1:46:77:64:9B:25:45
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A08CF343CFE2A92882F67D239A9F1C7168
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/REp8AFKGns5xiYXkDqFGd2SbJUU.roa
Signing time: Thu 10 Sep 2026 20:12:27 +0000
ROA not before: Thu 10 Sep 2026 20:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 194.38.50.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:f3:43:cf:e2:a9:28:82:f6:7d:23:9a:9f:1c:71:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 10 20:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=444a7c0052869ece718985e40ea14677649b2545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:89:08:6f:f7:56:f8:db:0f:ed:19:f3:78:
08:79:fc:99:55:da:19:f1:ba:bb:00:7d:2c:b2:a6:
8d:c1:5b:a9:c5:4d:c8:8c:fc:be:96:c7:c2:8c:9a:
4f:47:2d:2f:60:fe:cc:b6:e1:49:54:dc:e4:00:5b:
13:3e:b0:54:11:84:a0:8c:0b:03:d3:cb:a0:12:25:
18:43:5a:d2:2b:4b:84:7a:96:a2:a3:bf:62:f8:77:
da:f7:ef:34:bb:6c:05:98:1e:d2:18:a2:7a:c2:66:
bb:cb:fa:a0:ac:47:cc:2a:21:29:eb:01:b5:69:47:
df:d8:13:9a:a4:40:73:d3:57:14:0e:49:95:bb:00:
a5:f9:0c:6e:9d:db:91:59:4e:a4:50:d5:c5:49:79:
d9:4a:92:6f:63:0f:60:4f:06:a2:d7:3f:1f:68:4e:
ed:fb:e4:d2:96:46:6f:8a:47:57:9d:e0:a8:89:ea:
43:29:be:a2:8f:cf:b0:cf:83:71:c1:58:4b:ba:53:
0c:9f:0c:e8:1f:26:98:0a:e7:b0:b5:9b:1e:6a:62:
4d:ac:51:d1:c0:9a:f8:00:2d:a0:3d:09:50:91:b0:
83:23:9e:04:f5:ff:48:a8:3b:37:4e:df:e8:ba:9d:
a4:2e:e9:d3:db:b7:2b:67:04:8a:f7:68:b0:dc:49:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:7C:00:52:86:9E:CE:71:89:85:E4:0E:A1:46:77:64:9B:25:45
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/REp8AFKGns5xiYXkDqFGd2SbJUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:9f:79:fc:71:b7:e9:b1:83:8d:1a:ad:c1:b8:14:15:dd:1d:
81:45:56:ea:de:8d:13:10:9e:5b:c0:97:a4:7b:31:ca:97:9d:
ad:08:6d:88:9b:50:f2:66:31:d8:ce:35:f9:ef:1d:5e:8f:60:
a5:5e:3f:71:14:7c:d5:ec:13:6a:f8:8a:93:7b:0b:48:44:fa:
75:d9:9c:20:00:b8:5c:f3:44:c9:64:33:e6:58:45:e5:d4:ae:
8b:a8:72:50:f9:89:ca:ba:1e:5b:04:a9:23:a6:9e:d2:1b:ef:
df:dd:b7:ee:af:a2:c6:7a:7e:dc:db:a9:0d:88:34:6c:87:df:
e9:a5:81:c6:d1:39:f6:77:b8:2f:73:31:63:b9:1a:6f:c8:c4:
61:20:9c:0f:37:15:a8:ef:96:ae:c4:49:b0:f0:f5:64:9a:ab:
55:4b:9d:76:54:8d:f4:b0:5f:bb:92:ec:c8:b5:76:4b:dc:fe:
82:c6:22:98:2b:2b:04:c8:1b:72:36:94:39:bc:c6:f7:f7:d8:
92:52:b8:ba:8e:46:5a:81:ea:6e:88:03:d3:31:86:04:be:f2:
20:ad:6e:02:19:43:e8:bd:b2:70:16:22:e3:7a:62:fb:b1:a5:
32:0a:9d:b2:8a:7f:bb:13:47:98:9a:c6:c7:3a:ee:24:b5:0f:
54:18:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:27:49 2026 by rpki-client