Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/C8ER0RRJQnuzfF0-8I_ZWFmJWH4.roa
File: C8ER0RRJQnuzfF0-8I_ZWFmJWH4.roa (raw, json)
Hash identifier: YzvZzOnFDMIuCSDyv65Ylm05a00Y7llux3gDDzFYJ0w=
Subject key identifier: 0B:C1:11:D1:14:49:42:7B:B3:7C:5D:3E:F0:8F:D9:58:59:89:58:7E
Certificate issuer: /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial: 01A09F71726DA4F3438274D0C5F130E20E2D
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/C8ER0RRJQnuzfF0-8I_ZWFmJWH4.roa
Signing time: Mon 14 Sep 2026 10:23:27 +0000
ROA not before: Mon 14 Sep 2026 10:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218677
IP address blocks: 77.73.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:71:72:6d:a4:f3:43:82:74:d0:c5:f1:30:e2:0e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Validity
Not Before: Sep 14 10:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bc111d11449427bb37c5d3ef08fd9585989587e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:e6:7f:86:45:90:8d:b7:c0:5a:e7:b0:12:
60:69:08:3c:ae:80:f1:53:37:65:ed:8c:c1:e7:01:
e4:32:63:56:ce:ca:0d:df:09:d5:20:48:6c:90:ba:
01:5b:c6:b1:ad:26:6d:4c:98:a1:83:d7:ce:31:27:
69:61:13:4f:b1:fe:83:c0:92:35:23:31:89:52:73:
f8:b0:bc:6a:8a:4d:14:9c:6b:b5:2a:31:e1:65:9d:
10:e9:01:99:b8:c8:e7:25:d9:33:7f:7c:80:8c:64:
58:74:75:dd:60:d9:15:8a:e4:85:4f:92:48:00:55:
21:9a:72:42:43:44:d7:d9:49:c7:41:b9:05:06:33:
6b:17:f2:30:1b:6e:2f:4e:fd:17:87:19:67:bd:19:
0a:d4:0f:76:15:10:ef:c2:fa:25:51:5e:f0:b0:ab:
88:9b:0e:e3:75:41:30:0b:43:c2:83:b3:2b:7a:80:
a4:0a:9b:1f:dd:7b:ee:20:9e:b2:1a:4e:09:5b:1f:
f2:07:60:b0:d1:c2:50:b6:1d:5b:72:28:ec:3a:8c:
61:4d:18:99:cf:39:2c:28:91:b7:7a:e1:79:2f:d9:
44:3d:49:93:58:c1:0b:59:82:eb:92:82:9a:20:1e:
a6:25:69:fe:ae:fa:f2:75:4a:d1:38:ab:42:cf:d1:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C1:11:D1:14:49:42:7B:B3:7C:5D:3E:F0:8F:D9:58:59:89:58:7E
X509v3 Authority Key Identifier:
keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/C8ER0RRJQnuzfF0-8I_ZWFmJWH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9a:e8:26:98:76:df:36:92:ad:42:fa:92:6d:ad:37:c4:7c:
11:a9:56:7e:be:71:39:21:95:2a:88:1a:d6:d1:d2:32:5f:a2:
c3:5c:07:1e:a2:3a:d4:d1:11:87:f5:45:b6:c3:a2:c2:03:2c:
b1:21:52:88:92:57:1f:12:e2:ac:2a:b8:b5:0c:8c:50:29:f0:
5b:4b:eb:f2:77:ad:1e:70:9e:0e:ee:e0:6d:47:9b:9d:d6:bf:
2f:28:1e:2b:5c:34:7f:2d:bd:57:2b:9b:f7:d8:23:37:68:66:
aa:d7:4a:ad:25:d5:86:0c:8f:6d:fb:4e:d0:f2:1a:a1:c7:6f:
53:08:b1:ac:18:01:34:8a:dc:9d:d5:96:79:e0:ca:aa:df:4e:
4b:0d:41:97:23:92:c4:1f:ab:3f:29:4a:ed:7d:5a:7f:f7:43:
7a:66:29:8c:1e:5e:c4:d6:57:73:bc:f7:9b:eb:dc:cc:42:b5:
82:b1:3b:a0:94:6f:f9:2d:fb:b2:10:c2:ed:59:f8:dc:64:d8:
0e:a4:4f:84:59:31:15:02:bd:10:af:bc:12:c3:39:c8:5d:f2:
c5:f9:dc:7a:40:23:4b:ed:d2:58:b3:56:75:6d:e9:2d:67:ad:
00:5b:9b:cd:f5:86:1f:ff:1f:09:86:55:5d:c9:2e:d5:ef:81:
aa:99:a3:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCfcXJtpPNDgnTQxfEw4g4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YmQyNmRjZTQ4MTYxYzdmYmY5ZmY2N2I5MDdmMWU2MDVj
MjVhNjYwHhcNMjYwOTE0MTAyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmMxMTFkMTE0NDk0MjdiYjM3YzVkM2VmMDhmZDk1ODU5ODk1ODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1frmf4ZFkI23wFrnsBJgaQg8roDx
Uzdl7YzB5wHkMmNWzsoN3wnVIEhskLoBW8axrSZtTJihg9fOMSdpYRNPsf6DwJI1
IzGJUnP4sLxqik0UnGu1KjHhZZ0Q6QGZuMjnJdkzf3yAjGRYdHXdYNkViuSFT5JI
AFUhmnJCQ0TX2UnHQbkFBjNrF/IwG24vTv0XhxlnvRkK1A92FRDvwvolUV7wsKuI
mw7jdUEwC0PCg7MreoCkCpsf3XvuIJ6yGk4JWx/yB2Cw0cJQth1bcijsOoxhTRiZ
zzksKJG3euF5L9lEPUmTWMELWYLrkoKaIB6mJWn+rvrydUrROKtCz9EX/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvBEdEUSUJ7s3xdPvCP2VhZiVh+MB8GA1UdIwQY
MBaAFOi9JtzkgWHH+/n/Z7kH8eYFwlpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQt
NTBkZDNhNTgxNTRiLzEvQzhFUjBSUkpRbnV6ZkYwLThJX1pXRm1KV0g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQtNTBkZDNhNTgxNTRi
LzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUlyMA0G
CSqGSIb3DQEBCwUAA4IBAQBqmugmmHbfNpKtQvqSba03xHwRqVZ+vnE5IZUqiBrW
0dIyX6LDXAceojrU0RGH9UW2w6LCAyyxIVKIklcfEuKsKri1DIxQKfBbS+vyd60e
cJ4O7uBtR5ud1r8vKB4rXDR/Lb1XK5v32CM3aGaq10qtJdWGDI9t+07Q8hqhx29T
CLGsGAE0ityd1ZZ54Mqq305LDUGXI5LEH6s/KUrtfVp/90N6ZimMHl7E1ldzvPeb
69zMQrWCsTuglG/5LfuyEMLtWfjcZNgOpE+EWTEVAr0Qr7wSwznIXfLF+dx6QCNL
7dJYs1Z1bektZ60AW5vN9YYf/x8JhlVdyS7V74GqmaP2
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:46:06 2026 by rpki-client