Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8eQRzcXvlRGjIz2J2UkRZZofOLI.roa
File: 8eQRzcXvlRGjIz2J2UkRZZofOLI.roa (raw, json)
Hash identifier: k6xOHXcUdliK6IZCfuZUikjqpgsCXJZgpSj1ShS/Ws8=
Subject key identifier: F1:E4:11:CD:C5:EF:95:11:A3:23:3D:89:D9:49:11:65:9A:1F:38:B2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019EB5B7A441BCFF0F5EA65D766BC251F678
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8eQRzcXvlRGjIz2J2UkRZZofOLI.roa
Signing time: Thu 11 Jun 2026 08:06:11 +0000
ROA not before: Thu 11 Jun 2026 08:06:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198487
IP address blocks: 88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b7:a4:41:bc:ff:0f:5e:a6:5d:76:6b:c2:51:f6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 11 08:06:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1e411cdc5ef9511a3233d89d94911659a1f38b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:01:d8:f1:a2:26:d1:30:4f:71:4a:e7:b6:
6c:c9:12:fa:e2:ce:81:6f:c2:d7:3e:c5:24:76:46:
b6:6d:4d:73:56:e4:02:0b:fc:20:4d:cc:76:2e:24:
1e:90:e7:f2:09:9e:4c:37:4d:12:65:ec:a4:ea:22:
47:ea:49:1d:a5:c7:51:c3:e8:0e:98:b6:db:f1:34:
1d:f8:b6:83:22:fe:25:07:aa:92:b0:7f:0c:ba:77:
83:8a:8d:12:9f:1a:0a:98:65:ca:4f:e2:e4:06:59:
a4:66:88:e3:62:a1:f2:68:84:6e:38:0c:90:92:dd:
26:c6:08:e5:c5:41:98:9a:d3:d8:7c:ad:4b:fa:44:
6d:ad:e1:0f:4f:89:89:a5:0a:c7:bc:b5:fd:94:a5:
2a:2a:dc:8a:d2:1d:0f:17:83:42:49:46:1a:00:83:
32:90:a3:e0:8b:47:c5:21:b3:f5:77:4c:77:45:43:
8e:e7:ee:29:c8:7b:3e:da:31:89:96:b9:73:b1:fa:
c7:6e:27:b0:21:b6:3e:31:b0:c7:37:5b:e8:72:05:
8f:dd:5a:be:6a:70:1d:c3:cc:41:83:e6:90:02:45:
8c:90:e5:bb:7b:a4:c6:06:83:7f:d5:8b:f0:f7:4b:
a1:ea:a8:23:a9:c5:09:bf:2b:5b:bd:c1:c4:65:7d:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:11:CD:C5:EF:95:11:A3:23:3D:89:D9:49:11:65:9A:1F:38:B2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8eQRzcXvlRGjIz2J2UkRZZofOLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:aa:31:94:4b:db:29:cd:bb:ae:1d:e2:c0:96:0b:0b:c1:97:
f6:e8:bc:6b:d5:d0:7f:be:a7:c5:2b:93:57:34:bd:37:ad:25:
c8:72:54:f6:fa:41:5d:1f:11:eb:11:01:aa:b2:72:21:4e:be:
9e:c7:1d:9b:99:b0:d9:50:4e:8f:9c:db:6e:7e:ea:16:2d:81:
82:34:45:78:0b:57:04:66:8c:83:c8:5c:ec:11:ff:a1:fd:72:
9b:80:7e:8e:24:54:d4:2a:6b:21:48:00:87:b3:ae:c2:24:77:
2e:f5:f7:85:2e:e4:2a:a3:40:38:50:b8:54:88:36:c3:3e:44:
9b:f9:0a:00:31:9c:ce:8c:48:da:74:e1:04:c2:50:6d:43:78:
00:66:3f:ea:dd:b7:50:16:b7:22:41:34:19:a8:58:c0:34:f9:
12:80:0e:0b:96:fe:1a:b7:a2:9c:e9:68:2f:dc:f5:52:fb:3c:
4e:a4:de:27:b1:59:c3:ce:97:b9:23:97:1a:a0:13:f1:ab:22:
3e:ae:6a:99:d8:26:6b:87:aa:e2:d5:80:5a:48:91:33:c0:82:
0f:14:b8:ca:52:92:60:cb:10:fa:c5:70:ac:4d:6f:d4:8e:26:
90:ff:b6:43:88:55:57:09:71:0f:d4:b2:66:8b:48:88:76:bf:
03:fb:0b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:08 2026 by rpki-client