Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/heIPVricm_9KfgaSMAM56cW6WWE.roa
File: heIPVricm_9KfgaSMAM56cW6WWE.roa (raw, json)
Hash identifier: ilayuGcdr3ZY6/Ka0qZc4Z+V8KXaIYoIJz42K+DqEzs=
Subject key identifier: 85:E2:0F:56:B8:9C:9B:FF:4A:7E:06:92:30:03:39:E9:C5:BA:59:61
Certificate issuer: /CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Certificate serial: 01A0805AF7D807783E2D8D1D5B8F95D502AF
Authority key identifier: 2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/heIPVricm_9KfgaSMAM56cW6WWE.roa
Signing time: Tue 08 Sep 2026 09:30:40 +0000
ROA not before: Tue 08 Sep 2026 09:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 136.176.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:5a:f7:d8:07:78:3e:2d:8d:1d:5b:8f:95:d5:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Validity
Not Before: Sep 8 09:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85e20f56b89c9bff4a7e0692300339e9c5ba5961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:56:79:2b:30:a9:f3:a7:a0:39:de:36:a7:d9:
3c:50:d8:37:9d:c0:e9:ee:dd:c9:49:74:31:4b:b9:
d4:7b:39:4d:54:6a:d5:61:e8:ce:21:da:5f:d5:a6:
96:39:bd:a1:56:dc:bb:e8:9a:d6:d5:b4:48:fc:f1:
a8:15:66:f6:42:db:1f:0a:e3:21:74:82:e5:10:6e:
e4:e7:5e:a2:ab:76:bf:4f:c8:a8:ca:6c:5d:81:e7:
cb:db:90:36:e3:5c:96:26:56:16:5e:c9:d5:0f:16:
8b:86:a1:79:0b:20:8d:99:94:47:b1:67:1f:1c:43:
75:4f:64:b2:a2:0e:d8:de:0d:b7:97:bd:a0:24:14:
9a:88:45:d3:aa:24:e6:2a:db:9d:8c:46:53:1d:64:
cc:a1:15:bc:e7:d3:29:a4:3b:ba:c8:0a:cf:7a:44:
d1:29:ca:91:0b:bc:d7:9c:d5:97:2e:a0:4f:61:6c:
2f:73:81:47:fa:31:0c:ec:94:b4:75:40:28:c8:93:
74:ad:d4:ac:61:5b:92:1f:2d:ff:a7:00:eb:35:af:
12:d8:a4:b1:04:60:e9:c1:29:e9:ac:73:65:1a:33:
6e:56:30:0b:03:0f:5b:56:f5:d8:13:60:d1:73:24:
6a:3c:6b:ce:f7:ba:68:d8:80:3a:b2:e6:69:85:3d:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E2:0F:56:B8:9C:9B:FF:4A:7E:06:92:30:03:39:E9:C5:BA:59:61
X509v3 Authority Key Identifier:
keyid:2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/heIPVricm_9KfgaSMAM56cW6WWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.208.0/24
Signature Algorithm: sha256WithRSAEncryption
64:03:61:4f:d4:d7:a1:41:66:e1:c9:6c:3c:81:e8:62:8f:59:
df:05:27:31:80:11:bc:26:2c:14:5a:86:30:d1:41:1a:15:ea:
3b:57:19:d9:23:d4:94:24:12:3e:63:74:55:a8:50:44:83:76:
47:2f:5f:ce:92:aa:7d:75:1e:46:62:17:a2:72:43:48:2c:30:
d8:65:08:d6:25:af:f8:68:87:48:c6:5d:00:fc:ac:d8:15:00:
98:3e:50:91:83:8e:6f:9d:e4:87:78:70:3e:04:32:ab:7b:df:
43:e3:b8:41:26:b1:3f:8c:1c:26:0d:5b:33:ef:7c:fe:d6:e1:
0c:fc:83:d4:f2:b0:8c:f1:bb:1b:64:27:d1:52:6c:ed:94:bf:
65:f6:5a:0a:7d:f2:b0:5f:8c:c8:1e:80:bf:ec:71:e1:71:74:
6c:7c:de:ce:32:7b:8d:d9:a5:4b:72:85:1f:80:96:e7:46:07:
33:6f:cc:9d:f0:24:7c:35:0c:b8:c3:ed:f6:63:98:23:ca:fc:
d7:4a:a9:68:f9:ae:70:c1:36:52:b7:99:72:b7:32:f3:b5:fa:
e8:8a:27:b5:1a:26:b1:59:8e:9b:de:98:5d:f3:28:ec:e4:fa:
52:29:d4:43:8b:9e:0f:0b:03:27:c5:11:c7:d1:ce:d8:64:da:
d7:f1:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:03 2026 by rpki-client