Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/8UcCO2rCLB3doWwj0_cnd72i3sk.roa
File: 8UcCO2rCLB3doWwj0_cnd72i3sk.roa (raw, json)
Hash identifier: 8wMVwllRWA2vkCvL+tKtJBtxlrqHB+VrRwSMnB1Man8=
Subject key identifier: F1:47:02:3B:6A:C2:2C:1D:DD:A1:6C:23:D3:F7:27:77:BD:A2:DE:C9
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A16D6EE2A0186096729008021DF9623E51
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/8UcCO2rCLB3doWwj0_cnd72i3sk.roa
Signing time: Sat 24 Oct 2026 10:22:25 +0000
ROA not before: Sat 24 Oct 2026 10:22:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42532
IP address blocks: 185.249.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:6e:e2:a0:18:60:96:72:90:08:02:1d:f9:62:3e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 24 10:22:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f147023b6ac22c1ddda16c23d3f72777bda2dec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:7b:4f:ff:9a:c9:2f:2d:84:2f:e9:96:22:
15:f8:14:73:d4:fa:d0:94:ef:e1:13:ce:9a:9a:d7:
cf:a2:2a:67:38:16:61:8a:ec:4e:ff:66:29:89:69:
84:90:e0:00:1e:87:6f:9c:23:87:b4:b7:68:30:fa:
69:2b:13:f3:52:da:98:83:a2:23:84:db:b6:b0:7a:
8c:99:07:b6:24:e5:76:e0:6b:33:85:b8:b7:9f:11:
d3:ee:33:0e:7a:9c:b4:c8:e1:bf:a6:ee:b5:a6:76:
b2:ec:cc:ac:34:0b:42:04:7a:ae:60:52:49:0d:41:
7a:32:7a:c2:02:4d:62:60:d8:d3:0a:14:80:74:62:
54:90:65:9c:75:52:ea:42:2d:b1:5f:f3:f9:81:82:
cc:52:83:f9:72:a4:7c:38:61:38:a3:e8:b4:23:27:
65:95:8a:dd:a1:8a:ef:db:d3:31:7c:a2:ae:70:95:
f3:31:8f:85:47:32:45:13:1e:a4:40:e7:cd:8f:e8:
ce:1d:f7:ed:5f:0b:50:c9:e5:c0:3f:45:e8:75:0f:
d8:f9:22:6c:b6:ae:48:82:0c:fe:e8:15:6b:13:9c:
4c:7e:c3:4c:b3:fd:9c:94:d7:82:b7:e2:10:db:1e:
a6:fc:16:12:bc:f2:ea:2d:c0:94:64:6c:cf:b2:9f:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:02:3B:6A:C2:2C:1D:DD:A1:6C:23:D3:F7:27:77:BD:A2:DE:C9
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/8UcCO2rCLB3doWwj0_cnd72i3sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.200.0/24
Signature Algorithm: sha256WithRSAEncryption
86:8a:6f:d9:b3:16:95:17:30:9b:a5:7a:bb:76:ea:ce:ed:2c:
3d:ee:8a:72:6e:b9:49:eb:6c:d9:1a:2b:e1:d0:81:65:d5:32:
d5:e4:51:84:d5:4c:26:4a:45:60:0c:88:3a:da:59:80:88:0a:
e4:61:fb:69:5d:cf:97:77:dc:d6:50:83:13:51:b3:e6:55:05:
53:32:00:0e:e4:90:1c:f5:5b:79:84:f1:41:02:2d:8a:c2:8e:
6a:2d:49:a1:b3:f5:d5:4b:a0:53:d4:6f:42:41:5a:46:cb:f7:
53:68:7b:c9:c5:c3:1c:b0:8c:b5:65:32:dc:48:d0:82:0a:a1:
24:49:5c:47:7a:c0:30:35:dd:45:6a:d1:c2:0b:31:3f:ab:aa:
3e:c3:53:3a:f3:05:40:8f:f5:fe:bc:45:e3:da:55:a4:6b:27:
5a:6c:34:76:97:76:7f:4b:75:66:0b:6a:25:87:a5:5f:36:d4:
5b:45:c0:e4:aa:1e:36:62:98:56:56:85:87:57:a2:28:8a:d1:
5a:05:3b:d7:eb:8a:15:e4:f4:07:d9:85:94:55:ea:27:9c:42:
4e:22:76:bc:3c:fd:2c:a9:df:95:12:09:d9:b3:b0:d3:a2:e8:
7a:ec:1d:1b:22:2b:be:e4:1a:dd:a6:ff:45:91:91:04:22:16:
d2:d7:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:09:46 2026 by rpki-client