Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/08x_1XnVTdUDnd_pxmUDMarDZHE.roa
File: 08x_1XnVTdUDnd_pxmUDMarDZHE.roa (raw, json)
Hash identifier: XSMZJpOTpOAOuEd5PSr4zanMljcpoPfzZ5Tz1jYHxpw=
Subject key identifier: D3:CC:7F:D5:79:D5:4D:D5:03:9D:DF:E9:C6:65:03:31:AA:C3:64:71
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A145BE7EE47196730A93CA534B967772F8
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/08x_1XnVTdUDnd_pxmUDMarDZHE.roa
Signing time: Fri 16 Oct 2026 17:24:34 +0000
ROA not before: Fri 16 Oct 2026 17:24:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210751
IP address blocks: 200.163.81.0/24 maxlen: 24
200.163.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:be:7e:e4:71:96:73:0a:93:ca:53:4b:96:77:72:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 16 17:24:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3cc7fd579d54dd5039ddfe9c6650331aac36471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:e9:dc:5b:2e:54:c7:53:12:9d:04:e0:b3:
38:0c:18:69:71:f4:39:15:42:6b:db:64:f5:a9:fb:
7e:8e:28:6d:e3:4b:b6:19:76:12:be:90:21:f3:37:
82:e7:50:b0:14:88:55:c5:aa:b4:a1:53:18:ba:d3:
9f:3a:11:8f:84:75:7f:1f:37:90:7b:2e:14:e8:73:
c5:ed:70:1e:6c:04:ac:1b:80:3d:ef:67:24:c9:28:
f4:39:8b:59:7a:ed:4c:17:82:d7:89:2d:a6:28:de:
bd:36:f7:fb:27:02:a7:c8:91:d0:be:e1:d3:32:97:
7f:42:b0:af:21:d5:18:30:19:b1:66:6e:54:13:87:
7f:e5:c7:18:b2:94:6c:b1:e9:e0:10:f4:38:1d:ab:
5e:b8:ab:7a:a4:16:ee:c2:64:74:9e:18:1d:b5:b3:
6e:d2:ad:25:f9:7e:c4:88:a4:3b:af:9f:8e:d3:f9:
4a:cc:f0:5d:9c:d5:d4:b7:e2:62:6e:1d:15:70:9b:
4e:2d:cc:76:8f:57:c2:16:22:ba:4a:61:0c:88:22:
34:2f:0b:b0:7b:e0:82:a1:0b:3b:0c:02:0a:d3:94:
34:c8:a5:0b:b9:76:46:3a:a5:14:3f:7e:9d:1f:96:
f5:00:16:3a:0f:7f:86:3b:af:cd:79:ea:02:6c:a3:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:7F:D5:79:D5:4D:D5:03:9D:DF:E9:C6:65:03:31:AA:C3:64:71
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/08x_1XnVTdUDnd_pxmUDMarDZHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.163.81.0/24
200.163.85.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:df:02:0d:d9:6e:f2:a1:53:40:d4:14:a5:07:53:ae:08:5a:
59:3c:15:73:49:cb:e9:28:09:42:9f:2d:88:24:ae:4f:2c:e6:
09:ac:b0:62:62:2d:2a:39:ec:3c:4b:1a:d5:17:e8:17:0d:32:
39:7f:72:4d:73:e0:53:10:b2:df:3b:d5:c2:b6:dd:ca:38:f4:
7f:ba:7c:37:ed:84:a9:e5:89:36:a4:b8:57:0d:f9:b2:8c:6a:
67:75:df:3c:47:82:6b:90:d4:fc:43:97:bb:39:bb:46:45:ea:
37:89:eb:a5:40:de:62:ab:a3:36:7b:60:ab:b4:a5:d2:10:3c:
aa:76:67:23:8f:51:83:e6:e1:b3:ba:91:7f:07:77:4e:de:e2:
b4:f3:f4:66:18:26:df:c4:66:c7:79:89:5e:e5:7b:8b:44:07:
f7:d6:e3:9e:a6:f0:31:2b:69:e7:52:1f:ad:44:cf:5b:43:ec:
b3:f3:d4:4e:ae:db:55:5b:8d:5e:a3:25:05:7a:b5:64:b3:5e:
99:e6:a0:4e:b9:9c:c1:a4:22:7e:cb:5e:6a:60:25:b8:79:5a:
9f:02:1d:73:1f:27:15:05:2e:9c:2b:0a:45:dd:49:29:e4:2b:
bf:4e:06:b8:25:d5:d2:51:e4:0b:ef:9c:c9:d6:d6:fe:2c:9d:
39:8c:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:22:56 2026 by rpki-client