Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/8wJajmmjUEb-TQ-91rAIwfqJveM.roa
File: 8wJajmmjUEb-TQ-91rAIwfqJveM.roa (raw, json)
Hash identifier: hr08/A+CJnzd8js+ks8UtuWRDUtcgHd10B9xLGRyBrI=
Subject key identifier: F3:02:5A:8E:69:A3:50:46:FE:4D:0F:BD:D6:B0:08:C1:FA:89:BD:E3
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A0BC0C7282BA27F9BFE47B587C6B5EDCCB
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/8wJajmmjUEb-TQ-91rAIwfqJveM.roa
Signing time: Sat 19 Sep 2026 23:42:07 +0000
ROA not before: Sat 19 Sep 2026 23:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 195.211.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:0c:72:82:ba:27:f9:bf:e4:7b:58:7c:6b:5e:dc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Sep 19 23:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3025a8e69a35046fe4d0fbdd6b008c1fa89bde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:ff:47:fc:66:c7:b4:28:f7:c9:7e:f2:d9:
5e:d3:40:e8:57:90:77:8a:0a:f9:d5:f2:83:68:88:
7c:15:01:8a:3e:c1:85:64:2c:84:b2:f4:9e:44:da:
83:a9:ff:36:2c:aa:be:18:27:58:37:86:8e:b3:5e:
a0:ed:43:1b:94:cd:8e:d7:0c:61:a4:fc:16:ee:dd:
63:3d:ee:29:b1:e2:aa:4d:6e:0e:fe:ea:e9:1e:74:
f6:97:9d:6f:55:2f:11:f7:e9:3a:09:65:84:32:19:
54:08:b5:6c:3a:d3:56:fe:84:33:94:15:2e:67:3d:
0c:52:93:83:3c:84:5f:ad:81:06:90:29:53:8a:d3:
d5:dd:01:5c:f9:57:a9:7a:42:cd:4f:07:0a:19:05:
b3:2d:7e:8a:14:6d:cb:b8:d2:f5:fd:17:15:72:bf:
75:c0:f2:46:4c:76:ae:d2:29:e6:e5:75:42:16:3c:
7f:db:58:21:63:43:00:6d:66:df:38:fe:96:b7:10:
07:ac:11:be:5c:db:86:60:bf:38:3f:73:e3:3f:a4:
12:1d:07:52:16:29:a5:6f:ff:e5:56:82:7a:23:3d:
0d:33:1e:4c:cd:1d:03:20:17:84:6b:d9:52:26:f6:
db:b0:1d:5a:8a:ba:3a:aa:09:9f:1b:7e:c3:7b:e6:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:5A:8E:69:A3:50:46:FE:4D:0F:BD:D6:B0:08:C1:FA:89:BD:E3
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/8wJajmmjUEb-TQ-91rAIwfqJveM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cd:50:0c:3e:e9:f6:ae:28:c7:01:bf:7d:2d:b7:6b:e1:fb:
f6:c0:57:8a:46:7b:2e:2d:c0:19:07:e5:fe:2d:c4:cb:0c:09:
f6:46:ca:56:13:75:d1:13:8b:ea:0e:bb:6a:e2:0b:43:01:23:
c6:34:17:e7:5d:4e:71:5f:c8:5a:5c:dc:f6:fe:d7:b5:a3:fb:
69:9b:24:e3:ee:19:05:72:c0:6a:ac:79:81:ed:b6:7a:93:24:
33:3a:1d:6e:3a:b9:8b:4d:c3:a2:cd:96:57:9c:5a:73:a3:36:
ff:5e:ce:5c:0b:35:68:2d:19:c2:33:54:92:54:83:9f:7e:63:
b9:8e:7a:c4:d1:69:cf:90:a3:9d:99:fb:50:18:d3:e6:ed:e5:
5d:e7:d2:2c:db:66:d5:ac:17:82:95:64:20:56:2b:22:3e:47:
c7:23:2f:85:89:fa:52:db:f1:07:b2:af:65:27:a4:8f:df:16:
cc:45:8d:dc:db:7e:0a:15:c2:1f:eb:29:a3:2f:8a:2e:73:8a:
4b:24:8e:58:bb:f3:68:ab:49:9f:39:db:02:16:b6:bc:44:98:
22:50:3c:c2:1d:fa:f2:a3:ac:b5:ac:74:f4:e3:fd:64:f8:15:
10:bf:27:73:36:cd:b2:dd:c2:9b:5e:01:cb:5f:0a:bc:27:ff:
80:1d:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:53:20 2026 by rpki-client