Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/8HNqyROtCPcfRiv1Sx49M6ONZYg.roa
File: 8HNqyROtCPcfRiv1Sx49M6ONZYg.roa (raw, json)
Hash identifier: zFpstxzrvOg/IGEksLOhRDjWqdDtkzz+78pgZXkJ73Y=
Subject key identifier: F0:73:6A:C9:13:AD:08:F7:1F:46:2B:F5:4B:1E:3D:33:A3:8D:65:88
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019DDEA724D317C1010FE7E49390BB3CE30A
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/8HNqyROtCPcfRiv1Sx49M6ONZYg.roa
Signing time: Thu 30 Apr 2026 13:49:49 +0000
ROA not before: Thu 30 Apr 2026 13:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 109.237.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:a7:24:d3:17:c1:01:0f:e7:e4:93:90:bb:3c:e3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Apr 30 13:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0736ac913ad08f71f462bf54b1e3d33a38d6588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:bd:00:a8:fd:00:0c:a4:59:b1:e3:60:85:
9b:0f:db:f9:dd:79:69:bd:e9:8e:e5:e4:1a:97:1e:
d9:68:38:fc:5a:65:e0:1e:6a:18:00:11:2e:d8:89:
f5:de:09:3d:f4:46:ec:5d:6f:f6:04:9d:42:58:a3:
07:91:ab:6a:b9:ff:5d:76:38:7e:13:49:cc:52:22:
bc:cd:0d:ec:c7:77:61:6e:bc:ca:26:9c:b2:a6:b6:
15:54:53:12:19:ce:77:1e:45:46:eb:e3:f6:45:38:
8a:9c:af:5f:c4:2a:ed:ae:3b:77:c7:66:6c:e9:95:
fd:89:f3:56:92:9d:3a:82:4a:65:6f:ee:7c:2c:0f:
42:ae:4a:fd:13:11:c4:11:b9:70:b8:3d:12:ab:43:
39:f3:cb:e8:e6:f5:00:d7:9a:07:84:9e:5d:bc:d3:
10:56:b3:a6:e8:98:bf:75:59:68:18:a5:c9:6c:b5:
48:bb:45:a8:fb:96:91:d5:0e:bb:86:e5:7a:be:14:
8c:79:e6:67:88:d1:72:a9:60:5e:ac:8a:00:a3:d8:
01:cb:94:a1:2b:ea:24:04:31:ec:93:59:5f:d1:47:
d4:b8:b4:6c:01:fb:3a:a5:6e:6e:5b:b9:c8:5c:b6:
d7:8b:4c:d8:55:e1:a9:2c:94:03:ab:67:47:4b:75:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:73:6A:C9:13:AD:08:F7:1F:46:2B:F5:4B:1E:3D:33:A3:8D:65:88
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/8HNqyROtCPcfRiv1Sx49M6ONZYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:53:68:f8:00:de:e7:53:66:4e:85:b2:2e:c3:d0:df:d9:1b:
d4:57:90:8c:27:31:75:c7:a0:7f:51:52:5b:6f:e8:08:97:43:
8b:2b:6b:b9:50:27:5c:5c:90:d2:d8:44:b2:b5:ca:0c:d3:23:
d6:19:3a:9f:5b:e8:73:a7:3c:40:12:3c:44:ea:07:5a:00:09:
a1:cf:0c:93:82:8c:a1:49:e3:7b:09:f0:19:7d:1d:c9:09:bb:
2c:89:9f:e5:3d:c4:3f:7f:64:de:ad:42:ff:45:50:f1:df:f6:
f2:6e:96:0a:16:36:d1:ae:07:ec:be:da:51:29:49:3b:b7:9a:
99:b5:44:08:31:e2:83:cd:fb:09:6a:d0:c5:5a:16:be:bd:ca:
2c:7d:4b:d7:1f:f5:18:27:3a:99:d2:8a:bb:f2:04:e4:bb:d6:
8f:e2:dc:41:8e:f7:a6:1e:9c:f4:2b:0f:f2:82:ad:2f:b5:f2:
b0:a1:d2:67:54:46:aa:18:e1:4f:b8:fb:04:ac:93:cf:25:f4:
11:c4:c8:ac:38:db:1f:4d:8a:88:d4:1b:43:f7:aa:13:45:73:
3e:fc:28:0e:49:98:c4:4d:a3:14:bf:97:a5:87:ff:09:48:0a:
6f:df:e5:51:3d:59:d4:7e:6d:ec:25:39:71:4b:b2:6b:a5:e7:
6b:1d:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:48 2026 by rpki-client