Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/0B4uZYhhW1R6jgcvcPIhqtGXEt8.roa
File: 0B4uZYhhW1R6jgcvcPIhqtGXEt8.roa (raw, json)
Hash identifier: C92osDmEis3+s0x4aFP3i1QSSHDTDUBWBwGEbISRoUM=
Subject key identifier: D0:1E:2E:65:88:61:5B:54:7A:8E:07:2F:70:F2:21:AA:D1:97:12:DF
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019E1CBD6D499C4BE201963B7394240A5263
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/0B4uZYhhW1R6jgcvcPIhqtGXEt8.roa
Signing time: Tue 12 May 2026 15:10:36 +0000
ROA not before: Tue 12 May 2026 15:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 88.218.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:bd:6d:49:9c:4b:e2:01:96:3b:73:94:24:0a:52:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: May 12 15:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d01e2e6588615b547a8e072f70f221aad19712df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ce:83:11:a8:6c:46:b8:1c:96:0f:f6:a1:47:
96:8d:62:31:d6:4b:76:68:80:e5:fe:b3:cd:a9:e4:
b6:c5:ab:ea:35:27:f0:e9:bf:db:80:da:36:47:83:
dc:12:7a:79:53:58:b4:d2:81:5b:25:dc:83:f6:fb:
01:8c:85:36:e1:18:97:4e:eb:28:5f:4f:e6:f3:49:
f0:36:06:58:14:5c:5a:dd:20:ee:cf:a2:0c:ce:9d:
4d:7a:91:9d:13:74:de:91:6a:f1:a2:72:e6:91:5f:
70:81:d8:34:5b:3b:e8:63:6c:81:f3:b4:17:6c:67:
aa:28:91:7e:9c:14:4c:67:2e:2d:fb:e0:7f:a7:f0:
e0:f1:1c:ac:9b:41:97:85:33:50:2e:9d:e2:2f:86:
3f:d5:59:39:80:2a:91:1d:08:af:ae:a0:c5:b7:c4:
2a:bb:3b:11:17:52:bd:84:9c:6c:d4:0b:e7:2d:4e:
02:56:5c:73:bd:86:49:c4:24:db:3a:c0:ef:c4:93:
64:ab:75:50:2a:49:42:f9:f5:2e:16:fc:5d:6f:ba:
d4:f7:ca:f4:ee:c4:c8:4c:a0:c6:66:d8:14:f6:54:
22:6f:9f:dd:3b:83:00:c4:5e:17:d9:b9:75:50:4d:
ce:1e:7e:d7:3d:38:9c:29:36:e9:ab:ae:f6:76:06:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:2E:65:88:61:5B:54:7A:8E:07:2F:70:F2:21:AA:D1:97:12:DF
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/0B4uZYhhW1R6jgcvcPIhqtGXEt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.172.0/22
Signature Algorithm: sha256WithRSAEncryption
66:4f:e1:0b:99:ce:67:5e:69:3f:59:8c:a0:6c:2c:01:05:91:
10:fe:1f:93:81:22:f0:12:67:df:74:9d:e4:9e:c1:a4:8f:41:
2e:e1:a1:ec:30:98:46:48:dc:ea:4d:05:9c:fa:7a:11:1f:56:
e6:74:27:0f:06:2e:4e:41:c9:48:f0:1f:3c:ef:57:d1:49:4a:
3e:db:75:f5:65:e2:cb:5b:78:1f:48:5f:c8:c8:e8:47:ed:3f:
21:e2:72:21:68:e1:2c:24:93:71:c2:8a:b8:73:6d:e0:f3:ee:
41:f0:7a:0a:41:72:54:33:aa:3b:d7:f9:25:ec:ba:e7:23:fc:
2f:5e:bf:54:91:9f:e1:3b:e2:ef:e2:97:07:a5:74:e4:e1:da:
96:0a:38:02:0a:b4:a9:20:44:26:23:2f:1c:2f:15:a5:e8:fe:
42:74:22:14:34:b0:af:20:fd:fb:4a:99:a7:e1:48:30:d0:79:
f7:9b:f3:4d:37:1a:f2:3b:91:b9:f3:02:8c:96:20:09:c7:68:
21:6a:c1:f2:5a:cc:b0:58:c9:89:12:47:31:de:54:a5:9e:91:
db:b8:1e:89:82:f4:73:ef:06:d6:42:a3:ef:62:80:72:34:d6:
6f:39:82:5d:cc:97:39:38:58:a0:f5:02:52:ae:07:5e:fd:b3:
f5:c2:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:34 2026 by rpki-client