Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Kc8ZHHbk_PBSGznngLuoCM598QE.roa
File: Kc8ZHHbk_PBSGznngLuoCM598QE.roa (raw, json)
Hash identifier: YQBcqN+Kh6CQlAY3/VB4fYON+e9pmHc9Jguh5FAoenk=
Subject key identifier: 29:CF:19:1C:76:E4:FC:F0:52:1B:39:E7:80:BB:A8:08:CE:7D:F1:01
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019E9C5B9F185FBB3025ADAF491A588E48B7
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Kc8ZHHbk_PBSGznngLuoCM598QE.roa
Signing time: Sat 06 Jun 2026 09:55:10 +0000
ROA not before: Sat 06 Jun 2026 09:55:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 88.80.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:5b:9f:18:5f:bb:30:25:ad:af:49:1a:58:8e:48:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 6 09:55:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29cf191c76e4fcf0521b39e780bba808ce7df101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:c0:e6:c3:a1:83:fe:d5:cb:44:84:2e:71:
fa:99:74:33:48:8a:89:6d:ec:cd:80:50:80:75:a6:
c8:c2:0c:a5:7c:31:82:40:47:eb:54:74:1e:e9:c0:
8e:72:7b:1e:15:65:87:27:fe:cb:c2:88:60:1a:31:
33:0d:0b:d2:39:92:b1:a2:4b:64:ea:11:88:8d:7f:
16:60:0c:4f:05:a9:a2:fd:ac:36:a4:6b:4e:92:ff:
83:ef:96:29:3c:17:84:94:99:09:0f:8c:f8:5f:0d:
62:89:d6:2b:ea:66:8f:e4:71:2f:3c:16:16:61:22:
0a:b5:22:33:25:74:c2:24:be:e8:3c:45:a7:32:81:
ee:9f:f3:5e:36:ff:8a:c6:94:7d:03:d9:da:5a:20:
53:8b:c8:9a:1d:40:bd:9e:1a:ed:89:1b:6f:be:2c:
82:67:4e:43:81:b7:81:b3:6b:c0:4e:26:76:6c:ca:
f2:89:78:c3:e4:15:ec:01:68:fe:ca:5e:1e:4e:96:
d9:f8:70:41:a9:31:8b:34:ee:50:f5:af:c3:54:16:
f9:c8:31:ab:28:b2:66:a1:32:51:69:8b:e3:4d:95:
b9:68:e2:a1:c1:72:b2:70:0c:f6:20:74:b5:8b:47:
ad:ef:35:dd:88:6f:e3:d3:27:94:f7:aa:01:5d:94:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:19:1C:76:E4:FC:F0:52:1B:39:E7:80:BB:A8:08:CE:7D:F1:01
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Kc8ZHHbk_PBSGznngLuoCM598QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e5:4f:d1:7d:34:91:f9:63:19:9e:b4:3d:2d:cd:11:53:2c:
e2:a9:ae:2e:7e:03:87:b1:51:2f:61:7f:d1:90:45:66:95:ef:
92:62:58:ad:c1:13:9e:c3:af:a7:2b:bd:8a:7e:6d:0f:f4:ff:
23:4e:4e:c9:52:07:e8:a8:f0:2e:90:5f:ac:13:15:52:96:b5:
85:27:20:8a:76:cd:4f:d9:20:32:21:f5:0f:c5:95:84:c3:ae:
48:81:a1:ff:57:d7:96:50:25:a3:a2:70:1c:24:e9:ae:cd:98:
72:5f:a4:5a:75:92:bf:0b:2d:fd:56:c6:23:14:13:6a:3e:4f:
de:f3:f3:c6:f4:9a:72:b9:b8:52:8c:18:34:d8:f9:0e:f3:bf:
f5:f3:33:88:e9:89:cb:ae:e8:78:5a:7a:c9:40:45:0c:0d:3b:
82:3f:c7:03:e3:d0:30:1d:0d:e8:4b:ec:6d:cc:c9:e1:13:6e:
7d:7e:7a:8b:c0:71:89:33:f2:8e:ed:bf:5c:51:32:93:eb:bb:
f8:d2:f7:0d:ac:84:8c:8e:c1:12:e3:f2:71:f7:d7:0c:08:6b:
89:0b:00:34:cb:f7:7b:f9:18:f6:b7:34:4c:62:7c:76:3d:8f:
95:df:3f:9a:e3:ab:6c:f5:59:85:95:98:02:df:94:51:a6:0c:
d7:c2:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:43 2026 by rpki-client