Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/8h_XNpqDTZUXMcG4YYSzrurjIaY.roa
File: 8h_XNpqDTZUXMcG4YYSzrurjIaY.roa (raw, json)
Hash identifier: Z+biiLj0oh1wh52f4vctnKBOmRazU+uQI6DA+l2VcmU=
Subject key identifier: F2:1F:D7:36:9A:83:4D:95:17:31:C1:B8:61:84:B3:AE:EA:E3:21:A6
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01A0499D7A84B50DB4C3520DF6FBA50E3006
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/8h_XNpqDTZUXMcG4YYSzrurjIaY.roa
Signing time: Fri 28 Aug 2026 18:24:12 +0000
ROA not before: Fri 28 Aug 2026 18:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 136.176.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:9d:7a:84:b5:0d:b4:c3:52:0d:f6:fb:a5:0e:30:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Aug 28 18:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f21fd7369a834d951731c1b86184b3aeeae321a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:ff:c4:b0:18:ec:29:f0:7e:48:94:08:e6:
60:1a:04:ba:8c:d6:02:2b:e4:20:87:9c:71:1a:f4:
f3:41:bd:9a:37:7c:c2:2f:e7:0a:8e:d2:a4:ae:b4:
fc:34:e9:87:b9:f1:b7:8c:18:2d:96:5c:4b:84:4d:
d3:85:39:e9:d6:6b:bb:d7:97:62:32:81:c5:f0:62:
c8:bb:7a:0e:10:60:79:91:ac:82:db:64:38:a0:cd:
b3:52:de:9e:e8:e2:20:86:c5:f0:c4:f6:3a:17:5f:
c6:8d:b9:54:5c:31:c3:e9:12:27:19:65:48:e6:e7:
d7:e3:31:57:19:70:da:8f:a3:84:c0:76:57:5e:7c:
2d:1d:9e:34:ef:7f:7d:b3:62:15:c3:f6:04:a0:98:
b2:48:25:b9:3a:8f:b8:92:95:cf:4e:4f:35:3b:84:
34:ad:df:ab:99:1e:f8:f8:d4:a0:e1:3b:93:a8:53:
e7:93:96:73:35:23:ca:3e:cd:72:f9:a2:2d:15:dc:
98:1d:4b:eb:25:dd:2c:e1:f4:2c:a7:e5:ae:72:4f:
db:2e:9b:1e:77:24:bb:30:ab:8a:e7:fc:38:76:c7:
30:c0:ad:e5:98:ff:3d:e5:62:b7:b0:b9:d3:b4:58:
0d:71:84:1e:fe:4d:58:01:4b:39:fc:5f:f0:93:23:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1F:D7:36:9A:83:4D:95:17:31:C1:B8:61:84:B3:AE:EA:E3:21:A6
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/8h_XNpqDTZUXMcG4YYSzrurjIaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ef:b1:39:af:6f:e2:5e:f6:fe:f6:51:63:dd:89:17:cd:fa:
5a:4b:45:7d:56:46:99:e5:39:cf:9c:d3:30:c1:f3:d8:1c:96:
f9:f8:24:60:db:9c:36:8a:d4:25:21:5b:d8:18:a2:12:0f:c1:
74:94:c3:9e:81:34:e5:4c:19:6e:38:68:db:26:2b:f1:7d:da:
2e:d2:f7:fc:aa:a1:b0:2a:ad:52:15:de:58:51:c4:7b:ec:56:
86:3d:07:21:19:75:4b:c5:71:5b:2d:af:83:57:09:58:76:2d:
3b:20:b7:81:fa:f4:00:9f:6d:b9:a0:84:9d:47:76:1e:e5:3f:
fb:ef:1d:b2:1c:82:ad:ec:7e:69:b1:da:35:8a:5b:a9:48:60:
be:b6:7b:8f:43:d5:ff:95:58:28:a5:c8:2c:36:6e:b3:d0:ff:
81:81:6b:db:ed:61:f2:06:d7:3a:19:eb:26:06:05:fd:86:ce:
d9:35:f5:4c:df:dc:0f:80:1f:70:0c:13:1b:24:35:10:2f:7d:
48:80:c4:ab:cb:72:05:53:0d:86:cf:e7:20:ec:56:d5:2e:8b:
1f:5a:73:46:b9:cd:c1:2b:85:4b:1b:6a:65:0b:59:4f:d7:94:
3a:22:43:19:aa:85:d9:ad:d2:18:1f:82:e5:41:00:c1:ea:2f:
ad:73:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:58:36 2026 by rpki-client