Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/GguuW88MnDxZQtxHShToCWmzycw.roa
File: GguuW88MnDxZQtxHShToCWmzycw.roa (raw, json)
Hash identifier: 9LiCFQ3pp2hU10ub1i0PEMHsFPnBj2LSUbi4TOl8/q4=
Subject key identifier: 1A:0B:AE:5B:CF:0C:9C:3C:59:42:DC:47:4A:14:E8:09:69:B3:C9:CC
Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial: 019F12B4A455437A01E0CAB0F8698CF76794
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/GguuW88MnDxZQtxHShToCWmzycw.roa
Signing time: Mon 29 Jun 2026 09:27:36 +0000
ROA not before: Mon 29 Jun 2026 09:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48185
IP address blocks: 85.8.228.0/24 maxlen: 24
2a02:2b8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:b4:a4:55:43:7a:01:e0:ca:b0:f8:69:8c:f7:67:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Validity
Not Before: Jun 29 09:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a0bae5bcf0c9c3c5942dc474a14e80969b3c9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:6b:2a:03:f1:bf:5d:0e:0d:9a:83:cc:d3:
74:85:58:d2:1a:0f:e5:ed:ef:77:cf:3c:34:da:25:
74:c2:c8:9c:ba:5a:a2:bb:a3:bd:11:0e:e3:80:7e:
f9:53:1e:bf:53:f9:a7:73:a1:c4:a6:ca:ca:35:c7:
6b:9e:66:49:4b:a5:c3:eb:ba:b6:25:70:af:52:7a:
33:46:48:7a:3c:bc:79:3b:b8:04:57:16:d1:bc:58:
be:6d:e4:f6:bf:42:72:55:7b:c9:88:32:9a:e9:90:
31:17:7e:55:92:99:da:ce:c7:2c:d1:5e:09:25:b5:
66:77:94:3c:a8:e0:99:ab:d3:52:c6:6e:c6:75:47:
6a:f6:7d:b9:84:f3:2e:14:75:30:76:c9:4a:4c:50:
d9:94:62:dc:98:ab:9f:6d:f4:5a:4b:fd:c1:82:25:
05:d7:e7:a0:f9:be:49:6c:d2:0a:57:64:5f:f9:a3:
de:a1:59:49:81:31:08:9e:6c:06:57:ef:b1:ed:e2:
6f:5a:d2:1b:ba:9a:21:51:09:10:2e:19:01:a8:ed:
9f:df:b2:90:6c:ff:2f:ec:04:d9:dd:60:ff:f9:f1:
8f:d7:94:8b:31:fc:59:fb:a7:9c:31:15:84:75:5b:
30:86:88:79:3b:c6:ed:96:db:05:e7:a3:21:61:7c:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:AE:5B:CF:0C:9C:3C:59:42:DC:47:4A:14:E8:09:69:B3:C9:CC
X509v3 Authority Key Identifier:
keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/GguuW88MnDxZQtxHShToCWmzycw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.228.0/24
IPv6:
2a02:2b8::/32
Signature Algorithm: sha256WithRSAEncryption
96:da:13:45:ea:dc:6e:1d:5b:b6:43:65:a1:c7:b1:00:d1:99:
69:8e:3b:c7:05:a0:fa:37:3f:41:cf:2d:45:1e:69:07:3c:69:
ce:8f:3f:49:e8:48:bc:ed:f1:df:75:36:15:68:78:25:50:1a:
8a:1b:4c:df:e1:4f:1f:5c:96:b5:e1:62:0d:ae:dd:f2:d5:0b:
1d:31:4d:f0:38:6c:14:f5:b5:3d:64:76:0f:c6:e7:0a:a2:f7:
80:62:bc:69:07:33:ab:2d:34:0a:9c:40:c2:78:81:02:22:56:
3d:92:c7:da:cc:1e:c2:33:a1:c3:44:08:8f:84:06:ff:a1:be:
4d:29:74:e4:cd:fc:b8:21:f5:90:c6:c6:7e:97:29:a5:ca:72:
4c:98:49:8e:17:35:eb:4f:f8:da:a4:1c:d0:b2:cd:74:bf:82:
f2:3d:a0:d8:aa:ae:1d:1c:03:e2:11:c3:f9:aa:f5:f9:02:32:
ec:a3:7f:dd:25:1b:b4:0c:be:00:4f:a0:c9:26:8f:0a:31:47:
f0:4b:36:5b:c0:ad:f0:b3:f2:4a:5a:c0:dd:40:0a:f7:52:da:
8e:b5:5f:fc:8e:26:a9:f5:6d:f1:2a:fe:cb:93:ca:2b:f3:00:
8e:34:c6:b0:d3:d1:94:87:3a:80:1a:f4:93:f4:d8:2d:9b:5e:
4e:3b:46:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:43 2026 by rpki-client