Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Ho8zkqZKLkLA4effCVpP6TkX1-c.roa
File: Ho8zkqZKLkLA4effCVpP6TkX1-c.roa (raw, json)
Hash identifier: 2o4YqIFG5/X+kXM1QRZNRPqvc4hIDCgqt0sRRrbUsZU=
Subject key identifier: 1E:8F:33:92:A6:4A:2E:42:C0:E1:E7:DF:09:5A:4F:E9:39:17:D7:E7
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A07FB8018F7BD71EB0D694F62DAC264FD9
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Ho8zkqZKLkLA4effCVpP6TkX1-c.roa
Signing time: Tue 08 Sep 2026 06:32:40 +0000
ROA not before: Tue 08 Sep 2026 06:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63286
IP address blocks: 216.23.80.0/22 maxlen: 24
216.23.96.0/22 maxlen: 24
216.23.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:b8:01:8f:7b:d7:1e:b0:d6:94:f6:2d:ac:26:4f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 8 06:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e8f3392a64a2e42c0e1e7df095a4fe93917d7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:00:2a:03:17:30:1e:29:30:a8:97:67:7c:
08:d4:c2:9d:9b:ae:89:cd:1e:1f:0f:74:ad:32:24:
6d:5e:ab:d5:a5:57:c8:37:03:5e:b3:7d:d9:71:e8:
c6:8f:7b:9d:8e:80:22:ba:80:4e:d2:cc:01:5e:92:
f0:4c:b7:f1:a0:1f:d2:29:fa:f8:42:85:4e:30:c5:
e2:23:bd:1a:9c:43:e2:c9:d7:70:88:49:85:35:a3:
d0:f9:76:43:3d:12:27:df:ad:ed:16:8a:61:ab:db:
b1:68:8e:ae:7c:d8:66:26:fe:ab:3c:7e:c9:a3:92:
d1:31:40:a9:41:4f:14:42:19:53:e4:c5:4b:c1:89:
59:b8:62:66:86:9e:9d:d0:7e:79:2a:18:df:78:9d:
dc:9c:30:9d:4a:4e:f3:b8:78:34:71:82:07:6d:6e:
cc:5c:a8:b6:91:5c:d9:61:a8:4a:1e:b9:c0:5b:dd:
d3:2b:fa:01:de:b1:49:1b:09:91:52:ec:6a:2b:71:
03:0b:6b:0f:ea:15:8c:d8:c6:83:59:17:0b:68:88:
b5:c8:00:45:92:3e:03:fb:08:f1:4c:b3:ef:cb:6d:
41:7d:0b:52:65:ef:57:1a:45:36:84:b0:7b:a5:e0:
63:51:f2:63:9a:1e:af:c1:96:8f:4f:31:28:2e:a5:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:33:92:A6:4A:2E:42:C0:E1:E7:DF:09:5A:4F:E9:39:17:D7:E7
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Ho8zkqZKLkLA4effCVpP6TkX1-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.23.80.0/22
216.23.96.0/22
216.23.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:06:6a:86:2f:d1:9d:bc:1a:f1:7f:96:94:ab:10:05:68:d7:
8e:b7:e1:c2:3f:c2:14:28:06:7c:f2:e3:a4:b8:7e:59:fe:ae:
34:cd:3e:f3:28:41:04:4f:e7:b7:54:4a:16:c6:b6:b1:23:57:
ce:31:a5:ab:e8:67:bd:b1:e4:13:66:21:a0:c3:97:4d:ba:21:
8a:aa:61:61:f9:bc:fb:6a:37:53:ef:7b:f7:0c:79:41:09:25:
df:ab:e6:e6:56:9b:c7:98:16:25:16:07:97:76:82:3b:3d:cb:
ba:7e:63:d5:b3:d2:db:5d:19:d4:4e:c4:6b:5e:d2:64:3c:ed:
29:18:a4:43:bf:7a:91:89:e0:fa:e7:d7:01:77:60:a0:38:22:
b0:d4:fa:01:50:7d:2f:3c:3f:5a:2f:b9:aa:bb:c7:ad:ed:63:
4e:5d:42:bc:bf:2b:3d:b5:35:99:b3:2f:15:96:9d:9f:92:27:
ac:66:6c:e5:b6:da:a6:88:48:7a:49:82:17:67:c9:15:21:9b:
d7:0f:70:e3:5a:10:29:ad:80:af:d6:b0:4c:79:6c:80:83:45:
8c:15:9d:d2:fb:26:3d:93:9e:7f:08:7a:e0:15:de:62:00:eb:
4c:97:b2:be:1a:0e:96:8b:95:2c:91:81:1e:b3:37:36:38:18:
8f:d4:34:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:51:36 2026 by rpki-client