Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8pBW8Tz2jO4PEJAs0IgtKIf4XyI.roa
File: 8pBW8Tz2jO4PEJAs0IgtKIf4XyI.roa (raw, json)
Hash identifier: jgd1TVjpO2+T8qDFIF+PyNCfSwL11amro/b1Vd3y6sM=
Subject key identifier: F2:90:56:F1:3C:F6:8C:EE:0F:10:90:2C:D0:88:2D:28:87:F8:5F:22
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F5FFA90750A3028753E725BA94275B739
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8pBW8Tz2jO4PEJAs0IgtKIf4XyI.roa
Signing time: Tue 14 Jul 2026 09:34:44 +0000
ROA not before: Tue 14 Jul 2026 09:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 45.134.184.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:fa:90:75:0a:30:28:75:3e:72:5b:a9:42:75:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 14 09:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f29056f13cf68cee0f10902cd0882d2887f85f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:59:11:e7:61:c8:51:6a:7b:e4:98:56:4e:
20:0f:31:02:4f:1f:6c:5f:d3:e3:bb:1a:a7:33:4d:
b1:fe:6d:2e:bb:50:11:55:5b:51:d9:ab:b1:99:d0:
2a:e1:0c:59:b8:c3:e1:26:12:af:cf:41:8f:a6:4d:
11:89:9a:de:2c:49:9b:60:3a:e4:8e:24:2d:31:a3:
1b:38:76:62:0d:9a:0c:64:fb:3b:39:2e:6b:69:c2:
98:72:5e:82:7b:72:54:5f:de:d0:e4:4e:72:a8:ec:
6c:05:73:8c:40:95:7e:a9:fa:4b:b3:81:08:2f:22:
6e:e7:70:6f:a6:f8:b8:7b:22:ae:9b:fb:41:aa:2b:
10:78:6f:59:4e:60:77:dc:9b:e5:2c:96:11:9d:5f:
08:45:b3:c6:80:26:5d:98:f0:ff:63:f2:b2:a9:83:
7c:69:14:85:16:eb:48:a2:11:70:c2:e6:44:b9:eb:
3a:ac:9b:88:36:af:b7:48:3f:b9:99:22:81:24:ee:
d0:d0:98:d6:4c:e4:34:0a:b2:d6:c1:7e:06:3b:53:
18:34:9a:b7:89:3e:fd:1e:ca:90:16:30:ff:52:cf:
ef:9e:82:13:9e:37:8b:11:4a:50:8b:67:68:9e:ef:
5b:ae:27:ea:4a:4e:9a:45:31:b4:6a:cf:58:57:cf:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:90:56:F1:3C:F6:8C:EE:0F:10:90:2C:D0:88:2D:28:87:F8:5F:22
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8pBW8Tz2jO4PEJAs0IgtKIf4XyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.184.0/24
195.66.26.0/24
195.158.192.0/24
IPv6:
2a0f:e7c4:10::/48
2a11:3500::/29
Signature Algorithm: sha256WithRSAEncryption
60:e6:9b:87:5f:51:13:56:cd:af:c0:bc:b0:52:e9:78:49:f2:
48:e4:63:b1:63:65:b5:14:21:18:d2:76:c9:53:8c:33:25:3b:
8c:20:d1:7c:1a:93:24:2a:75:b7:f5:5c:1e:94:11:ba:2d:04:
bc:97:a4:98:6c:8e:bc:3b:7a:22:86:13:5e:3b:56:5a:52:bf:
3e:2e:e1:46:6f:e1:02:0a:ce:31:40:9c:c6:d9:f8:57:7d:18:
ca:1a:e9:05:1e:0b:6d:e8:35:15:73:85:83:de:f2:a1:57:b9:
2c:20:60:dd:e1:32:c6:65:93:b2:42:85:d9:a6:82:3e:1d:28:
3e:e5:9f:9c:a9:44:d7:29:9f:8a:e7:ba:ef:53:62:80:d6:ae:
c6:df:5d:70:c1:ff:a2:60:cc:17:eb:39:fb:15:31:55:52:be:
a5:6a:2a:d8:27:29:a2:0d:dc:c1:e8:fa:34:e8:bf:06:4e:b7:
07:28:5c:98:7f:60:fe:a4:03:4c:8a:f1:87:18:b9:b9:ea:a4:
0f:27:e5:60:cc:32:0c:72:d5:c0:ec:3b:6f:6c:18:49:a3:1a:
41:11:be:44:b9:29:ca:66:77:b3:b7:e4:99:59:9c:f7:59:65:
17:f4:f2:ab:ea:cc:b8:67:5a:59:3f:ec:fe:67:01:e6:fe:7b:
38:5b:4c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:40 2026 by rpki-client