Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/xS8E-QjHw2dzPf1KkLqn10hE7LM.roa
File: xS8E-QjHw2dzPf1KkLqn10hE7LM.roa (raw, json)
Hash identifier: 5/fVJMfp+DX4M6I9ZjhWtgFG3senFJ4L1a5dgOE8EkY=
Subject key identifier: C5:2F:04:F9:08:C7:C3:67:73:3D:FD:4A:90:BA:A7:D7:48:44:EC:B3
Certificate issuer: /CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Certificate serial: 019F8478256BD9B90A916BE72F5422857E11
Authority key identifier: 8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/xS8E-QjHw2dzPf1KkLqn10hE7LM.roa
Signing time: Tue 21 Jul 2026 11:38:14 +0000
ROA not before: Tue 21 Jul 2026 11:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12608
IP address blocks: 89.207.155.0/24 maxlen: 24
2a13:3300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:78:25:6b:d9:b9:0a:91:6b:e7:2f:54:22:85:7e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Validity
Not Before: Jul 21 11:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c52f04f908c7c367733dfd4a90baa7d74844ecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:8f:6a:4b:ac:61:9d:b4:31:c7:e7:82:d9:
81:d1:fa:15:0d:15:45:67:66:2b:d4:72:9a:29:e4:
a9:b9:90:96:ed:66:3c:54:e9:53:04:68:78:d4:e1:
ce:f4:fd:35:29:59:05:56:26:b9:ea:e4:d5:69:05:
5d:00:0c:df:ac:de:0c:a8:c5:c3:0e:ba:c3:3c:96:
e5:e7:ad:ac:bc:47:bc:b6:12:85:38:99:d5:57:eb:
dc:90:50:6d:6f:7e:db:fe:e6:fa:43:92:e1:75:ab:
0c:8f:f3:ae:cf:09:3c:53:93:15:5e:f7:15:e5:d0:
a2:5e:18:10:28:43:7a:b3:87:cd:db:8d:7e:0e:52:
43:b6:04:59:a8:4d:ce:2d:80:7d:3b:2f:ec:a4:2f:
71:da:10:83:f1:78:2d:ef:af:62:9b:34:27:69:6f:
36:55:14:6c:16:2c:cf:7b:4e:9c:73:09:4b:18:a3:
fe:6b:00:2d:3d:53:a8:e7:35:38:9c:fc:c9:61:74:
f9:0b:f2:94:15:5c:22:ef:1d:28:00:4e:ec:3b:e6:
cc:0c:68:91:86:ae:d1:35:51:3a:41:29:97:e0:d4:
70:65:05:d2:04:33:49:db:2a:e6:89:0c:10:ab:64:
99:71:fd:e2:54:73:84:b2:81:9d:bc:9a:c9:cd:86:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:04:F9:08:C7:C3:67:73:3D:FD:4A:90:BA:A7:D7:48:44:EC:B3
X509v3 Authority Key Identifier:
keyid:8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/xS8E-QjHw2dzPf1KkLqn10hE7LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.155.0/24
IPv6:
2a13:3300::/29
Signature Algorithm: sha256WithRSAEncryption
59:00:ba:57:ca:4a:a4:b3:01:8f:51:97:57:56:7a:32:92:68:
31:d4:2a:0a:1d:03:58:8c:38:fd:08:c0:a8:b5:70:ed:5a:d0:
d4:a1:87:67:5c:a9:59:66:7c:6a:ec:32:ce:6b:72:12:aa:df:
d0:bf:1d:70:8f:3c:b0:ab:af:41:dc:2e:b9:75:51:a4:a5:87:
03:1d:78:1b:e3:14:fa:02:f0:37:52:c3:3b:af:28:c7:8d:af:
f8:10:88:4b:9b:72:0f:d0:79:ca:2f:d8:f2:a4:be:60:ea:03:
04:f8:ab:50:3a:ae:e9:93:a7:bd:54:63:d6:e1:db:b7:b0:55:
df:27:1f:9c:54:27:a0:81:6f:32:cb:f9:8b:05:92:74:f0:05:
0a:8b:93:7c:fb:b9:bf:d2:9b:a4:70:7e:31:c9:61:04:d3:48:
ce:76:ab:41:d6:a2:e1:8b:c1:5e:42:69:22:e6:e8:e0:e9:12:
fd:2d:c8:5a:b9:04:33:a5:2f:db:e4:df:fa:8c:35:42:f1:cc:
d5:1f:eb:a7:90:a9:9c:7d:f7:82:84:47:49:29:9f:d0:b7:7e:
28:39:65:34:f0:6d:75:0b:81:87:2b:c2:19:fd:e1:12:5a:ae:
b2:03:22:db:80:aa:af:95:b4:cd:8d:8e:d3:61:ed:c5:ae:71:
f6:64:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:07:20 2026 by rpki-client