Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8QHB34ymVJA_tpV3tfR0M0yCWbo.roa
File: 8QHB34ymVJA_tpV3tfR0M0yCWbo.roa (raw, json)
Hash identifier: NpJFv1HSyq6VwpGCmxlLcLjaYrJ+3TIp0WqeaHd8NKo=
Subject key identifier: F1:01:C1:DF:8C:A6:54:90:3F:B6:95:77:B5:F4:74:33:4C:82:59:BA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A03E7AC4A26DF3546BC0F4E19F01A7B9E2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8QHB34ymVJA_tpV3tfR0M0yCWbo.roa
Signing time: Wed 26 Aug 2026 14:30:28 +0000
ROA not before: Wed 26 Aug 2026 14:30:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 62.76.236.0/24 maxlen: 24
62.76.237.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
194.58.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.42.0/24 maxlen: 24
212.193.20.0/24 maxlen: 24
212.193.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:7a:c4:a2:6d:f3:54:6b:c0:f4:e1:9f:01:a7:b9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 26 14:30:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f101c1df8ca654903fb69577b5f474334c8259ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:99:d8:c6:4f:87:76:1b:01:55:cd:9c:be:
7e:46:36:ea:0c:36:b5:4a:e2:43:ed:ad:6e:70:9c:
20:9c:75:c4:b8:d3:b7:9d:de:78:64:2e:cb:9b:0b:
4c:23:dd:e9:fd:5a:10:a4:ce:af:91:f9:59:dc:45:
32:11:85:b1:5e:e0:41:0a:3a:71:62:19:41:1f:0c:
ad:a1:52:b9:39:52:d9:a5:1b:e4:52:42:7d:db:f7:
ee:bc:1b:37:57:7c:98:0c:5e:a8:85:3c:45:b8:5e:
e1:75:4c:62:1f:9d:80:e2:eb:dc:21:80:07:d0:d2:
c0:37:8a:be:2c:05:7a:de:bb:7c:55:ea:95:d0:c5:
4a:2d:bb:32:9d:44:58:23:a2:84:ba:37:ef:66:98:
e5:62:42:56:94:51:29:0a:ae:1c:71:e6:f2:31:93:
d6:ab:32:71:02:f9:3e:77:bb:48:0b:24:d3:09:de:
cd:98:66:b8:04:c9:ad:dd:3d:df:81:3f:59:df:04:
ce:62:a1:ad:45:1b:33:03:e5:5b:69:56:20:d5:59:
a4:c8:78:a8:ec:f3:fc:2b:6d:f9:09:f7:52:29:b0:
af:e4:d0:8a:ac:9b:34:07:0a:4e:05:f9:f3:18:ce:
a9:11:1b:bc:ff:4c:19:6f:08:9f:3a:f2:68:f9:40:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:01:C1:DF:8C:A6:54:90:3F:B6:95:77:B5:F4:74:33:4C:82:59:BA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8QHB34ymVJA_tpV3tfR0M0yCWbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.236.0/23
193.124.17.0/24
194.58.56.0/24
194.58.154.0/23
194.87.18.0/24
194.87.48.0/24
194.87.51.0/24
194.87.54.0/23
194.87.125.0/24
194.87.166.0/24
194.87.178.0/24
194.87.233.0/24
194.87.255.0/24
195.58.62.0/24
195.133.9.0/24
195.133.42.0/24
212.193.20.0/24
212.193.23.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e0:4e:82:b5:5a:3f:c6:1c:64:75:86:81:25:07:fb:ac:3b:
c1:4a:21:7a:6b:9a:c6:98:6b:98:1c:d9:c8:17:8c:7a:95:4a:
16:a0:5c:d4:40:37:9c:89:72:96:35:00:23:49:11:eb:76:84:
c9:e1:d3:fe:a5:a5:01:74:72:75:72:f7:b7:c6:8b:b1:8b:91:
4e:66:6c:fa:07:f8:fb:e5:01:28:b3:0e:ad:89:a2:76:ec:fb:
9b:87:50:28:45:51:9d:30:0a:30:ff:35:e4:f5:3f:c6:f0:9a:
d7:ad:47:e6:30:49:f3:ad:dd:8e:41:a5:7d:a0:3e:50:73:a9:
d7:04:8a:22:bc:71:07:dd:c2:74:fd:f5:34:30:8b:46:fc:bc:
eb:8e:fa:00:49:c6:c5:ab:3e:12:d5:59:c7:ce:ce:ca:64:f8:
9f:54:e9:75:76:c3:0f:d4:8f:d1:1f:05:2a:45:b0:72:21:5b:
b1:bd:d2:05:1e:1d:eb:30:01:b4:33:dc:99:4b:ab:46:ef:11:
19:cf:62:cc:7c:da:57:96:04:4b:7c:32:e4:3f:e3:78:ef:e9:
65:71:43:f0:0e:c9:9d:bb:46:24:5e:90:2c:16:b2:fe:81:84:
37:86:e1:6c:de:46:bf:cb:2b:bf:64:a8:a3:2c:b9:98:3b:bc:
be:af:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:00 2026 by rpki-client