Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/8EFr4zmSfzqdm57D9xgzSL6HFtU.roa
File: 8EFr4zmSfzqdm57D9xgzSL6HFtU.roa (raw, json)
Hash identifier: E2H7x7svspORsUyoZUb5Yy6dDt0MFzs6hrI962lU9pw=
Subject key identifier: F0:41:6B:E3:39:92:7F:3A:9D:9B:9E:C3:F7:18:33:48:BE:87:16:D5
Certificate issuer: /CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Certificate serial: 019F2368DC337F7F361C47242ABF934CBEE9
Authority key identifier: 94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/8EFr4zmSfzqdm57D9xgzSL6HFtU.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 147.189.18.0/24 maxlen: 24
147.189.19.0/24 maxlen: 24
147.189.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:33:7f:7f:36:1c:47:24:2a:bf:93:4c:be:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0416be339927f3a9d9b9ec3f7183348be8716d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:da:57:b1:99:dc:12:1f:21:0b:e1:04:bb:
21:a3:85:c4:b4:9c:e0:72:32:cd:b4:8c:56:77:dd:
3f:df:50:4a:78:96:a6:8d:06:fb:bd:62:2c:ce:d8:
72:72:39:65:32:5d:83:04:db:9e:ca:3b:58:42:80:
9a:15:c5:85:3f:7a:a2:71:bf:10:85:78:6c:cc:f1:
5b:88:83:3d:f3:69:e2:6b:a9:e4:1d:48:fa:33:25:
8a:aa:72:bb:73:8c:38:20:78:f2:37:8a:be:ec:1d:
88:0d:96:7e:60:cb:a6:d2:d7:3c:cb:ce:19:45:e1:
94:ac:89:c6:b7:d6:ac:46:02:a3:c3:af:84:e6:05:
d9:5a:c6:07:cf:49:f1:1f:02:58:85:26:b2:bd:70:
7f:6a:32:97:cd:71:90:3c:60:5c:86:05:cf:74:9e:
27:65:a2:2b:bc:8d:10:cc:d4:14:b0:a9:2e:bc:83:
c6:b0:dd:16:59:74:3f:e0:44:82:07:bf:ae:a5:0c:
2e:c8:19:4e:83:bb:13:2b:d2:49:38:88:82:ed:4f:
7f:84:6a:af:d3:04:fb:c9:74:e4:2a:bf:5e:d2:f7:
cc:82:1e:c7:c8:42:69:c0:3d:5d:f5:11:58:c6:d9:
ba:5b:a7:e9:5f:3c:5f:6e:98:43:cf:b2:20:a8:f3:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:41:6B:E3:39:92:7F:3A:9D:9B:9E:C3:F7:18:33:48:BE:87:16:D5
X509v3 Authority Key Identifier:
keyid:94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/8EFr4zmSfzqdm57D9xgzSL6HFtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.18.0-147.189.20.255
Signature Algorithm: sha256WithRSAEncryption
78:99:f2:18:36:f2:3c:f3:70:03:d1:2b:1f:f2:64:43:ab:ae:
5f:71:37:bb:ef:63:54:d0:b1:a5:9d:92:a9:f8:c2:38:aa:81:
31:3a:61:7a:15:ab:8c:f8:8c:75:a2:d3:2d:2d:4b:43:b4:0f:
26:72:72:8e:ce:01:17:b3:47:e3:9f:68:bc:2a:81:f6:1b:81:
19:3d:a4:14:b5:25:e5:1c:c3:45:54:de:22:08:66:42:55:ec:
9b:22:58:d9:a9:53:c7:54:b9:1d:8c:a4:b1:1b:e8:31:2e:0e:
54:1b:7e:ec:7c:35:31:8e:c7:bc:0c:4b:28:36:f2:8b:43:cf:
98:22:2b:a1:3f:af:e0:7a:5b:ec:b0:05:0f:ac:91:02:e8:40:
1c:58:79:b5:d3:87:4b:2e:1f:cc:fe:46:7e:97:d1:58:e7:67:
58:7f:8a:8d:87:60:e8:e8:1b:da:c7:a0:05:99:a3:e3:f6:2f:
ee:5e:c1:1e:89:54:eb:86:21:47:32:30:e3:fd:0b:91:28:d2:
20:b5:74:21:10:0a:39:97:a3:2f:f1:6e:e0:24:24:29:f2:e7:
a2:b1:75:27:13:9e:cb:36:56:88:5a:7e:e0:7d:c7:a4:fe:69:
3a:b8:be:1d:25:27:be:6d:53:89:e1:52:2a:e3:be:fd:75:7b:
77:34:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:03:39 2026 by rpki-client