Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/C8UfE0IBgOfa82iiaROrfI3V4Xc.roa
File: C8UfE0IBgOfa82iiaROrfI3V4Xc.roa (raw, json)
Hash identifier: TcuXg8S+SstfBTo+BPKj9cktm49XEEJIOwMTVogMNKQ=
Subject key identifier: 0B:C5:1F:13:42:01:80:E7:DA:F3:68:A2:69:13:AB:7C:8D:D5:E1:77
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019F89754E89A9C2AEB8A5C1A08D832951FA
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/C8UfE0IBgOfa82iiaROrfI3V4Xc.roa
Signing time: Wed 22 Jul 2026 10:53:14 +0000
ROA not before: Wed 22 Jul 2026 10:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 80.86.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:75:4e:89:a9:c2:ae:b8:a5:c1:a0:8d:83:29:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jul 22 10:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bc51f13420180e7daf368a26913ab7c8dd5e177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:10:d1:c4:c3:1c:dc:7a:f0:fe:aa:6c:15:
43:21:4f:5a:fa:90:b3:31:ec:94:33:16:3f:ce:78:
a7:0f:cb:74:19:7e:1c:6f:25:a1:a7:97:aa:7c:86:
ab:12:3e:b3:32:4a:d0:d7:f5:d8:5b:14:97:91:f1:
cc:43:cf:1e:f7:16:f9:2c:65:63:d0:e9:5c:4a:30:
b4:7c:d6:67:28:e1:8d:7f:57:66:7c:28:03:42:fb:
4a:9c:3f:18:07:fe:4f:df:50:77:66:54:aa:55:b5:
57:e2:b0:02:e4:e6:88:e3:25:36:44:d1:42:bf:84:
62:a7:fe:bb:4d:bf:9a:13:f9:a8:51:c4:e8:a3:12:
72:9c:c2:3a:71:04:aa:22:b1:39:d8:70:fd:04:ea:
ef:b3:b6:9a:82:1a:4f:fb:0c:81:a5:db:0b:97:64:
09:1a:8a:96:47:4e:ab:9d:13:f0:51:2e:60:aa:62:
3d:e6:70:b9:1e:0f:cf:c4:5f:f1:ce:20:05:93:7b:
c9:a7:5b:a5:ee:7c:c5:b9:8e:df:91:d4:9b:a1:ec:
70:ef:25:40:a0:66:74:96:0e:4a:7a:f3:6c:09:ef:
f8:97:c1:43:17:51:9a:7e:0a:33:62:b4:30:88:5f:
da:d3:95:4b:ba:1e:35:40:e1:8f:ec:f2:e1:bc:f2:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C5:1F:13:42:01:80:E7:DA:F3:68:A2:69:13:AB:7C:8D:D5:E1:77
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/C8UfE0IBgOfa82iiaROrfI3V4Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.209.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9d:ac:3d:c2:84:a0:9c:67:54:c8:08:5c:40:45:36:c1:73:
a3:56:91:cf:93:90:86:86:99:62:cf:ca:2a:af:95:be:eb:49:
06:da:51:53:7f:9b:ff:e0:ad:5f:8d:5f:4d:7d:ff:46:0d:ac:
88:6b:a2:4e:be:00:9a:c2:c7:2b:c1:92:fd:66:59:21:c2:76:
c6:a8:35:30:ec:a6:2e:fa:5d:03:96:d3:aa:54:55:ed:98:2b:
47:16:d8:96:cc:c6:ce:00:c9:9d:e1:97:9b:17:9b:2a:24:34:
63:fa:87:10:63:a6:8d:c0:c8:f8:1d:7c:91:19:86:f9:2d:97:
94:fa:94:fb:cb:25:e8:d1:ce:3c:c6:ac:fb:4e:b4:e7:ea:ba:
71:c8:ce:81:da:13:9c:31:b6:34:a6:34:95:dd:bf:3f:2b:77:
80:96:d0:bc:4f:30:86:b4:8f:92:a3:be:e4:d2:7e:88:be:e2:
b9:a3:5f:cf:30:a8:9c:f1:99:01:d6:f9:c0:30:6b:1b:9a:69:
94:89:03:7f:30:25:4e:22:d1:3c:be:48:72:19:c0:b7:65:26:
cc:f1:7f:54:bb:3f:1a:32:43:fd:e4:95:d9:4f:d0:34:c6:6e:
f1:af:ca:b1:b2:ab:9b:a4:35:00:b3:8e:cf:4b:ce:d8:48:b9:
6a:0b:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:06 2026 by rpki-client