Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8HFihh9Y55Uf5MctfqKSAvHPbGA.roa
File: 8HFihh9Y55Uf5MctfqKSAvHPbGA.roa (raw, json)
Hash identifier: ++B6h7NUN86CMKkaiP9o3Yh1S0BRmdY+giTr6rfYnk0=
Subject key identifier: F0:71:62:86:1F:58:E7:95:1F:E4:C7:2D:7E:A2:92:02:F1:CF:6C:60
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019C9E186D98E91E5402849368316C1E9A2C
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8HFihh9Y55Uf5MctfqKSAvHPbGA.roa
Signing time: Fri 27 Feb 2026 07:55:26 +0000
ROA not before: Fri 27 Feb 2026 07:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 88.214.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:18:6d:98:e9:1e:54:02:84:93:68:31:6c:1e:9a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Feb 27 07:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f07162861f58e7951fe4c72d7ea29202f1cf6c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d4:10:14:c5:83:90:24:8e:f1:6c:01:a9:05:
3d:39:d9:6f:59:46:71:ed:f4:96:50:fa:dd:09:1f:
b8:33:14:42:2b:4f:c5:e7:bf:8c:b8:03:47:2f:bb:
05:f2:30:ab:a3:67:a0:08:8c:05:62:e7:54:08:6f:
a4:69:a8:7e:1d:e8:d6:b5:3d:2b:70:8a:e5:a4:cb:
79:56:2d:9f:f4:ab:06:6d:fc:67:2d:cc:db:f4:f1:
bb:2b:99:09:47:3d:0c:a3:2e:49:95:cf:aa:09:7a:
de:79:1b:e1:cc:a7:c0:de:e7:31:ec:4d:a9:b5:5a:
61:62:fb:f4:af:af:32:4a:59:fc:e6:c4:60:34:75:
c7:c1:dc:be:40:ab:6f:7a:91:18:c7:1f:6e:fd:62:
03:ac:e7:87:59:25:f4:57:7f:4e:fd:18:2b:95:a2:
7a:d3:0b:62:62:a3:2a:9f:86:80:e5:20:5a:c4:ab:
88:4c:bc:cc:b5:1f:bc:46:64:38:6d:1c:50:47:be:
6c:0b:36:cb:d3:5c:ee:a0:c3:9c:e9:76:99:a3:01:
b8:67:43:7c:2f:a9:55:ed:47:e6:ef:f6:75:68:37:
3e:2a:46:27:c4:bc:29:e9:ee:80:29:07:f6:32:b6:
38:e6:2b:03:f0:4a:a5:b6:f1:58:ad:f5:8c:e9:c2:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:62:86:1F:58:E7:95:1F:E4:C7:2D:7E:A2:92:02:F1:CF:6C:60
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8HFihh9Y55Uf5MctfqKSAvHPbGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.52.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2a:f4:51:af:27:03:e2:9d:e2:f3:21:64:1a:78:b1:44:09:
fa:15:19:43:1c:d6:e9:3e:aa:50:29:dc:e8:d5:3b:d2:e9:e0:
98:7c:ee:fb:b0:ad:40:ab:85:79:60:73:a5:34:31:55:03:16:
d9:d0:9e:f5:4d:af:23:3b:7b:47:a5:79:94:dc:08:b6:a8:0d:
2b:71:3f:3e:ad:8b:4f:a2:37:a7:df:8b:50:da:97:d7:92:b1:
d4:e2:b5:01:0d:57:af:b4:45:1f:c0:b3:f5:b9:5c:f1:20:a9:
07:9c:61:83:f0:a3:7b:0e:56:d3:d5:f5:79:57:3e:a1:f9:b0:
9e:8e:74:b7:ac:b6:e9:c5:c9:53:a9:40:88:8b:07:14:6e:e1:
61:bc:3e:6e:2c:58:0b:9b:2b:bf:f9:81:92:75:35:20:c0:a0:
78:0e:47:78:a5:8d:f9:f2:ba:44:00:29:61:7f:59:e6:86:b3:
0b:a8:9f:45:13:63:67:4e:71:7a:35:d4:28:ef:ff:a2:c6:00:
c2:d5:f1:ee:f0:a2:1e:fe:7d:64:c5:d0:db:59:eb:24:57:bb:
b1:77:42:e3:3c:5d:40:3b:70:54:dd:88:a7:25:ae:8a:30:5c:
01:69:52:a5:82:09:7f:92:c7:41:ab:6a:53:9e:f2:d9:83:03:
75:52:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:01 2026 by rpki-client