Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/H8iBI3oxi9mzced7XKm6sNzu2b0.roa
File: H8iBI3oxi9mzced7XKm6sNzu2b0.roa (raw, json)
Hash identifier: Eg4AzBzQ/I1unxdwVQekHYusJF4JhPkZ22ij6AU935E=
Subject key identifier: 1F:C8:81:23:7A:31:8B:D9:B3:71:E7:7B:5C:A9:BA:B0:DC:EE:D9:BD
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019D8C1E29E36ED82275FB6CE3ABB9132984
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/H8iBI3oxi9mzced7XKm6sNzu2b0.roa
Signing time: Tue 14 Apr 2026 13:11:20 +0000
ROA not before: Tue 14 Apr 2026 13:11:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205548
IP address blocks: 216.23.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:1e:29:e3:6e:d8:22:75:fb:6c:e3:ab:b9:13:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 14 13:11:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fc881237a318bd9b371e77b5ca9bab0dceed9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:8e:3d:64:0a:fe:18:58:e2:b1:06:5f:83:
60:99:50:d1:1d:fe:d3:c1:82:bf:6b:81:46:10:2e:
51:e8:22:72:24:8d:b7:16:d0:83:5c:82:c9:c9:db:
78:ca:63:3b:24:39:2a:f6:9d:08:64:e6:97:86:a7:
99:d6:55:49:17:8c:01:95:db:8b:40:54:b5:04:0b:
67:90:0c:c5:d6:05:21:96:d9:2d:9a:5e:61:70:d9:
c2:d1:e7:8e:f1:7f:aa:6f:09:3e:b8:4b:b7:12:c1:
b8:11:a1:7e:bf:1d:8b:e3:96:9b:f6:8d:3c:fa:1d:
14:71:1b:f1:93:3f:63:4f:1d:ec:5a:8f:77:88:92:
cd:92:fa:d6:6d:11:15:e1:cc:2e:d7:b6:c0:fd:45:
49:52:e3:a3:f8:9f:ef:80:cd:9c:43:db:82:d0:d2:
e0:31:14:e2:61:c6:cd:c3:0c:27:14:df:28:6a:a3:
b4:87:26:b5:3f:1b:b5:c2:63:97:4b:df:42:4a:34:
6d:19:29:1c:d2:66:a5:a0:5d:2d:fe:14:d2:36:8a:
dc:25:41:1d:e0:35:28:3c:d7:87:ba:78:3e:51:03:
19:db:17:52:1a:8b:7e:ef:41:99:98:89:75:bb:61:
58:27:83:e5:4b:d0:6c:d3:c6:83:dd:a5:d8:00:29:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C8:81:23:7A:31:8B:D9:B3:71:E7:7B:5C:A9:BA:B0:DC:EE:D9:BD
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/H8iBI3oxi9mzced7XKm6sNzu2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.23.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:f5:f1:be:47:01:f1:b4:94:60:d9:33:54:21:04:07:b7:f3:
18:a9:11:93:59:6f:08:bf:76:44:77:a8:e3:85:74:e4:58:98:
2a:1e:93:70:bd:2f:c0:b2:1b:ff:89:ca:25:ab:f5:2c:8c:6f:
ea:68:18:64:35:9e:b9:a4:08:0a:23:ce:35:26:73:7b:e7:eb:
8e:a4:e5:01:3d:b6:f7:21:2d:04:f1:78:8d:55:9c:84:f9:16:
1e:76:83:b5:3c:09:9c:5d:18:09:6a:0d:2c:24:1c:ac:d1:f8:
11:8e:e6:9f:d4:01:33:4f:50:57:64:10:29:51:f6:6e:da:b7:
eb:84:bb:93:b5:ed:16:cd:52:98:0e:63:c0:17:2f:c9:9d:c5:
8c:d7:af:3a:bb:ce:bc:91:65:4a:b0:58:08:af:56:dc:98:a9:
b7:55:80:fa:90:68:52:f7:5b:91:3d:a9:5f:56:b0:93:23:fa:
f5:c3:ea:2c:0b:05:b3:3f:ef:fd:79:3e:ef:64:52:b6:9f:bc:
20:c5:8e:99:d3:4a:a0:6d:8b:32:81:40:d2:1a:f1:db:63:54:
68:72:68:2b:ac:5b:29:f7:76:8b:1b:66:4d:42:f3:2a:0a:5d:
fd:e1:da:c2:85:40:03:f0:95:2a:00:4b:52:cc:37:eb:4d:6c:
ec:1c:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:35 2026 by rpki-client