Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/B8NWIS0qgjWvxdwNizeWF9UM7Ps.roa
File: B8NWIS0qgjWvxdwNizeWF9UM7Ps.roa (raw, json)
Hash identifier: rzUDRmnrB+1AGVp6cfXX8ddQrRKFt7AAPLkq6j+Xitc=
Subject key identifier: 07:C3:56:21:2D:2A:82:35:AF:C5:DC:0D:8B:37:96:17:D5:0C:EC:FB
Certificate issuer: /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial: 019F4741842E012942CAE345DFE256E24666
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/B8NWIS0qgjWvxdwNizeWF9UM7Ps.roa
Signing time: Thu 09 Jul 2026 14:21:43 +0000
ROA not before: Thu 09 Jul 2026 14:21:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208464
IP address blocks: 185.204.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:41:84:2e:01:29:42:ca:e3:45:df:e2:56:e2:46:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Validity
Not Before: Jul 9 14:21:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07c356212d2a8235afc5dc0d8b379617d50cecfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:26:52:ac:2f:8b:65:d4:49:c6:3c:d3:40:
50:8c:72:8f:6a:62:e1:b6:2e:23:a0:50:38:78:da:
f8:35:24:d2:d9:c8:2c:39:07:5d:61:11:09:d6:ba:
85:54:24:5e:ff:ee:05:33:42:a5:23:98:59:ae:63:
db:1b:f6:2a:cd:57:ca:a2:54:b8:a2:7b:99:32:77:
fa:1b:12:cf:d6:13:72:a2:0d:78:f6:e5:19:5d:ae:
f7:20:ef:c1:e0:52:97:ac:fd:82:64:71:b2:e8:29:
aa:dd:29:47:a6:4a:0b:5b:b8:bb:1b:9f:9f:2a:9d:
bb:ca:4e:32:0a:c0:0b:14:72:86:4a:3c:31:03:34:
a3:f9:9c:70:59:9b:45:0e:d7:99:fc:a4:33:88:7f:
bc:25:2d:96:45:8e:36:c1:a1:8f:c7:df:3e:01:d4:
c3:f5:b4:4e:af:74:07:7a:2b:ad:3a:fe:25:83:06:
c1:78:74:69:53:5c:1f:46:05:de:76:11:61:4e:c1:
90:21:8e:b2:6a:a9:43:d6:19:b6:b7:0f:10:55:e9:
e5:ee:3e:5a:b8:f4:7b:7c:4e:04:c9:1a:bc:b1:92:
36:75:5e:0b:37:f4:44:51:49:fa:bf:78:2a:88:60:
e0:15:dc:af:fb:01:11:78:6e:41:e2:2d:e1:45:fd:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C3:56:21:2D:2A:82:35:AF:C5:DC:0D:8B:37:96:17:D5:0C:EC:FB
X509v3 Authority Key Identifier:
keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/B8NWIS0qgjWvxdwNizeWF9UM7Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.188.0/22
Signature Algorithm: sha256WithRSAEncryption
74:30:1c:f4:08:2e:fc:99:6d:4d:91:cf:a6:ac:2d:c0:30:9c:
e3:31:7c:21:39:4e:63:2f:ce:f1:5e:43:aa:f5:9d:6b:89:49:
70:40:80:93:70:e8:25:3f:3c:f9:26:69:3d:cb:94:10:30:1d:
36:78:60:72:eb:9e:90:1f:2a:f9:e7:85:2c:e3:1a:fa:80:75:
8c:a8:15:70:c5:08:8b:05:d9:c4:dd:ef:4d:84:8b:fb:3a:33:
ef:f6:d3:60:4a:56:66:bb:fa:a6:15:9f:25:39:4c:84:e9:76:
d2:99:d5:24:95:48:b3:7b:82:22:ab:9d:90:f5:3f:97:0d:0f:
40:97:69:8d:44:79:7c:55:39:04:cb:5c:1b:7d:94:1c:b8:59:
e8:bc:17:24:7c:4c:1e:e7:41:61:42:af:a7:ff:37:f7:23:62:
4a:da:80:18:8d:b3:4d:32:86:94:0a:00:c8:19:a8:92:50:3c:
56:0a:01:8b:87:da:8e:d6:0f:6a:df:45:52:bd:45:04:98:22:
0b:d2:e0:2c:eb:54:d2:ec:69:0d:ab:68:af:0b:5b:0c:d7:31:
ff:db:ea:9c:af:6f:31:06:2a:51:bd:69:93:3a:6d:1c:9f:fd:
79:d3:1a:ac:b7:54:92:70:43:9a:f3:d3:17:05:ec:c5:09:49:
df:7e:16:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:31:55 2026 by rpki-client