Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8bYObRFB01pymHy-hU3s2lIOAZY.roa
File: 8bYObRFB01pymHy-hU3s2lIOAZY.roa (raw, json)
Hash identifier: CLLgW+RCITOiPMaJ1vCuYrNQ9NPQAh1lGNQUczAFVFI=
Subject key identifier: F1:B6:0E:6D:11:41:D3:5A:72:98:7C:BE:85:4D:EC:DA:52:0E:01:96
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F88A0CB5985E3ECC2AF6251918A30E699
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8bYObRFB01pymHy-hU3s2lIOAZY.roa
Signing time: Wed 22 Jul 2026 07:01:06 +0000
ROA not before: Wed 22 Jul 2026 07:01:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 77.67.16.0/24 maxlen: 24
217.8.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:a0:cb:59:85:e3:ec:c2:af:62:51:91:8a:30:e6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 22 07:01:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1b60e6d1141d35a72987cbe854decda520e0196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:66:64:80:3a:14:88:ed:bd:d9:c3:f2:68:
f2:a1:a6:0d:d6:cf:00:7f:e0:93:99:ea:69:27:5d:
61:8c:ce:65:60:d9:b5:f3:8e:90:4e:b4:7d:07:76:
86:31:4f:f7:41:35:04:57:80:48:8b:70:7b:1d:88:
94:e9:3a:08:cc:5a:e4:65:f2:c1:8c:96:de:8d:11:
1f:c3:1d:ed:39:4c:6a:6d:87:f9:d2:15:4e:3c:1d:
1f:ef:25:2e:f6:f9:54:d6:24:f8:17:5a:08:13:25:
d1:d6:30:ea:6d:dc:2e:cf:8c:94:9c:03:c8:85:b6:
3d:a8:66:19:69:b7:95:bb:29:87:f8:57:e8:a9:d9:
97:ea:b9:03:cc:97:49:fa:81:f1:0d:ac:b3:41:85:
e6:58:e8:22:87:e6:7e:df:6c:14:05:79:5f:35:b1:
d1:e8:67:82:7d:21:3d:96:45:ac:8b:ad:3a:6d:96:
74:f8:8d:d6:51:4b:6b:9d:14:a0:63:fb:4e:d3:a8:
6d:3f:d5:62:07:52:ad:79:72:2d:c8:af:bf:2b:b4:
ed:72:e6:06:1f:97:c7:7a:5b:c3:03:3e:a3:bc:17:
6c:cc:a3:91:6f:1b:0c:1a:f5:cb:10:5d:ca:b1:61:
5c:4d:26:ab:de:14:dd:3a:a4:ab:41:93:1d:63:4a:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:0E:6D:11:41:D3:5A:72:98:7C:BE:85:4D:EC:DA:52:0E:01:96
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8bYObRFB01pymHy-hU3s2lIOAZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.16.0/24
217.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3c:6b:81:53:2c:b1:13:1f:c3:03:29:90:26:a1:3f:2f:b5:
43:17:51:2c:68:21:c6:5d:f9:39:bc:bd:6e:f6:a6:36:0e:32:
82:0c:20:a5:ab:a7:cb:7a:c7:f3:f5:38:a1:b3:2a:8e:9b:5c:
19:b1:f7:c1:3c:44:18:2f:63:f4:22:cc:c3:23:fc:72:3b:b6:
a7:ef:63:2b:cd:c7:d0:dd:c7:61:85:50:de:45:a6:84:6a:85:
22:2a:65:19:33:07:63:40:66:7b:21:04:f2:e0:1a:fb:ad:b3:
f2:b0:ea:69:66:4d:98:a1:c7:86:8e:25:f1:3e:d2:4c:fe:79:
61:d2:9d:26:1d:51:3a:9f:0a:de:9d:a3:f2:e1:5f:93:be:7d:
1f:42:1a:0f:2f:8a:a5:fe:55:f9:69:41:87:32:34:ab:dd:b9:
a6:2d:7a:2f:79:ea:eb:8d:a0:ca:4e:ba:13:f4:99:04:cd:ae:
7a:b2:c6:dd:6a:b6:d6:75:fe:ba:e0:c5:9c:29:d4:39:ed:1a:
c6:d4:28:8d:f8:fb:b0:e2:01:24:5b:09:09:ee:7a:59:d3:5f:
a1:99:4f:b8:99:6b:30:01:f8:95:21:40:50:ad:03:6d:ed:ec:
6d:36:27:a8:8b:8d:8c:11:1e:05:fc:9f:cf:7c:73:7e:44:65:
14:a6:3c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:21 2026 by rpki-client