Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/8B0Xvmidug3oJBFQNiVZ03LjllY.roa
File: 8B0Xvmidug3oJBFQNiVZ03LjllY.roa (raw, json)
Hash identifier: P1kj5JyGbpjO7k/9XiZFP26S2h0cS9e/Ah5VKAIZkgI=
Subject key identifier: F0:1D:17:BE:68:9D:BA:0D:E8:24:11:50:36:25:59:D3:72:E3:96:56
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 019F88DE3F173EE6F3C4A93AEC050B49F23F
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/8B0Xvmidug3oJBFQNiVZ03LjllY.roa
Signing time: Wed 22 Jul 2026 08:08:14 +0000
ROA not before: Wed 22 Jul 2026 08:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199669
IP address blocks: 194.38.10.0/24 maxlen: 24
194.38.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:de:3f:17:3e:e6:f3:c4:a9:3a:ec:05:0b:49:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jul 22 08:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f01d17be689dba0de8241150362559d372e39656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:30:f3:97:08:24:c9:be:ed:96:8d:78:ba:
79:de:ff:24:73:1d:39:9e:1c:4e:7f:5e:e4:92:f3:
d7:c9:ed:e7:ec:dc:aa:d8:9d:74:5e:a7:4e:cc:de:
e7:65:fc:ba:0e:09:4d:30:36:ec:20:5c:35:89:40:
dd:9a:68:55:ff:80:2d:2a:a6:bb:ed:cd:0d:ab:53:
38:ce:4d:27:bb:10:67:16:10:cc:8f:d8:f5:9a:46:
98:17:bb:e2:63:cb:80:ec:94:29:10:6c:8c:6d:58:
1e:b1:9b:59:51:cd:a8:5e:8c:e8:29:7e:e8:9d:55:
3d:c1:11:2b:d0:83:ce:9c:22:f3:22:70:d0:2f:2b:
b6:ea:a9:e9:34:b9:3f:50:6e:e9:48:78:4a:a9:19:
09:2c:4a:1e:ce:88:c3:a5:77:20:06:1b:2b:48:5f:
b0:98:2f:7e:d5:d8:e9:21:6c:38:06:64:8d:35:14:
8e:c0:b1:46:6f:c1:35:22:88:35:b2:a3:cd:ed:6b:
f9:77:47:36:c9:17:70:9d:35:74:0e:53:09:66:45:
4b:49:09:b9:a6:34:9d:09:10:25:64:17:9d:5e:af:
4d:9a:49:3b:d9:ae:ce:c1:54:d3:6c:d4:01:ad:df:
7d:14:b9:db:88:cb:9c:e5:a8:2f:8c:d0:ab:9b:1c:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1D:17:BE:68:9D:BA:0D:E8:24:11:50:36:25:59:D3:72:E3:96:56
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/8B0Xvmidug3oJBFQNiVZ03LjllY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.10.0/23
Signature Algorithm: sha256WithRSAEncryption
79:8c:ee:cf:34:ea:a2:0a:f7:e0:46:99:fb:39:0e:2f:ab:3e:
5d:a4:e8:b3:3f:e2:49:af:d4:c7:af:31:6e:b4:99:fa:85:9b:
4f:79:46:d7:24:f3:92:6d:6f:2e:fa:19:45:f9:fc:0a:51:c4:
32:c9:73:ed:9f:a5:85:7e:66:2b:e0:74:56:79:e1:7f:68:3c:
20:90:1a:7a:a9:4d:4c:3e:e8:e6:44:0a:46:44:2c:58:7e:99:
36:7b:c0:18:45:57:88:73:dd:40:f3:65:bb:7e:c1:6c:d9:a1:
42:2a:9f:fc:0f:76:a4:f0:d2:d1:19:04:98:3f:74:e3:5a:ea:
49:a1:08:79:fe:3c:95:c1:76:98:47:08:9f:e2:9b:d4:25:bc:
7d:6d:87:3a:0f:7d:69:0d:f0:fe:52:a2:b9:26:18:c5:51:b0:
12:17:19:09:74:9c:f5:10:c9:b6:5c:cd:b2:2c:b7:5c:e8:5a:
b7:f1:e3:0f:3a:aa:7d:24:ca:d8:5a:19:0f:50:c9:eb:d2:1a:
ca:ad:81:f1:95:2f:ba:d6:e2:57:6d:98:89:c2:d3:43:be:52:
73:5f:92:51:15:57:e7:9a:8d:cf:bb:78:cb:36:be:04:f6:96:
3e:fc:7c:30:3f:b7:53:ac:46:59:94:d5:95:e4:8f:3a:36:07:
12:ef:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:18 2026 by rpki-client