Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/8hx1gAb9JQ9Jt_adfPfauV83-lw.roa
File: 8hx1gAb9JQ9Jt_adfPfauV83-lw.roa (raw, json)
Hash identifier: 5Yu25cs4dK7+vmfRVz+5LCQcuI9l90lTLui83bcVIAU=
Subject key identifier: F2:1C:75:80:06:FD:25:0F:49:B7:F6:9D:7C:F7:DA:B9:5F:37:FA:5C
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019F36DAE8F27967F6B713323D599C0910BD
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/8hx1gAb9JQ9Jt_adfPfauV83-lw.roa
Signing time: Mon 06 Jul 2026 09:55:43 +0000
ROA not before: Mon 06 Jul 2026 09:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214431
IP address blocks: 79.143.85.0/24 maxlen: 24
79.143.87.0/24 maxlen: 24
2a03:9382::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:da:e8:f2:79:67:f6:b7:13:32:3d:59:9c:09:10:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jul 6 09:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f21c758006fd250f49b7f69d7cf7dab95f37fa5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:55:9f:4e:75:ef:ff:9a:35:b1:4c:f4:31:
7f:a2:72:da:b8:3f:56:e5:2a:bf:fb:66:b5:f6:2c:
37:b9:9f:05:44:02:c3:41:82:8f:3c:7f:78:96:7a:
79:90:b9:67:36:77:ea:70:19:3a:d4:5e:76:b9:35:
27:4c:ed:6a:98:f3:e4:a2:13:3d:de:53:e7:ed:09:
a8:8b:b3:be:87:1f:ef:88:2d:0b:a1:ec:69:57:eb:
9e:64:2e:05:86:d2:78:0f:25:92:3d:3b:29:bb:3b:
45:67:2d:ca:cc:00:cf:f0:48:81:df:28:2e:a3:2f:
c5:f4:3d:9a:83:63:40:62:07:3b:79:95:3e:32:88:
f8:56:65:79:6a:13:57:01:36:2b:15:1b:68:1d:59:
28:ef:61:22:84:bf:7a:9b:5f:33:b5:f5:09:78:49:
c7:3d:b8:42:a1:e1:cf:cc:92:aa:92:98:38:ea:38:
ae:f4:bb:0a:ae:8d:40:ac:80:23:02:df:c6:50:d5:
22:54:e5:41:a6:e7:33:aa:15:04:b2:8f:47:75:9d:
0d:6a:ba:3a:21:31:7f:11:ed:78:3f:e0:7a:4a:33:
cc:23:e2:e8:35:bb:a3:74:49:82:fa:4d:2f:7f:48:
0c:8a:7f:4e:19:a3:9d:f6:d6:83:78:21:5f:78:46:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1C:75:80:06:FD:25:0F:49:B7:F6:9D:7C:F7:DA:B9:5F:37:FA:5C
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/8hx1gAb9JQ9Jt_adfPfauV83-lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.85.0/24
79.143.87.0/24
IPv6:
2a03:9382::/48
Signature Algorithm: sha256WithRSAEncryption
6d:d5:55:d0:97:96:95:08:3f:23:d8:c3:01:12:5b:f9:11:f4:
38:16:47:88:bd:96:ee:e8:5f:15:04:01:36:30:da:ba:ea:98:
3d:d7:b8:c1:3a:c0:36:e8:84:b6:2f:b4:2b:84:a0:23:84:eb:
33:12:23:3f:42:c2:d8:af:0b:36:06:f4:38:1f:aa:5b:2d:9c:
6c:44:36:2b:bc:80:35:2c:05:f5:7f:ea:ee:60:15:ca:6d:28:
f8:9f:1c:84:bf:af:f2:ed:99:7b:6a:a0:d4:4d:e2:28:9a:07:
e5:0c:ee:6e:1a:ef:8a:11:6a:f3:41:d2:d9:3f:68:de:8b:ae:
25:af:b2:b2:02:7b:d6:c4:f4:7a:6e:de:bf:77:7d:fc:15:fb:
17:7a:00:b3:03:33:df:f3:2b:86:c8:93:b0:ca:e7:ae:e4:fe:
3b:8c:69:27:86:b0:90:ee:f3:79:59:1d:a9:78:50:27:8a:9b:
59:bd:2b:76:f8:df:f1:16:24:48:a9:51:cf:b8:ea:9e:18:af:
37:97:5c:48:5e:a9:b3:10:cc:85:95:96:76:c4:26:0e:bf:70:
00:b1:c7:71:75:33:8f:b2:cd:a1:38:9f:ee:44:d0:88:7a:f6:
ae:4a:27:8f:9a:7f:85:ff:98:41:f4:b9:90:09:63:7f:ab:42:
d2:b2:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:41 2026 by rpki-client