Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/8q-W0PKPLsEOkor_JxfKbFGGeP0.roa
File: 8q-W0PKPLsEOkor_JxfKbFGGeP0.roa (raw, json)
Hash identifier: hZ6qaGb2hmEL20Q3/hvqbyvlZuoL2wX3NWTGSH0Pkz8=
Subject key identifier: F2:AF:96:D0:F2:8F:2E:C1:0E:92:8A:FF:27:17:CA:6C:51:86:78:FD
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 01A15476425E7C290B34C02612A497C7BFF1
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/8q-W0PKPLsEOkor_JxfKbFGGeP0.roa
Signing time: Mon 19 Oct 2026 13:59:58 +0000
ROA not before: Mon 19 Oct 2026 13:59:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203500
IP address blocks: 185.178.184.0/24 maxlen: 24
185.178.185.0/24 maxlen: 24
185.178.186.0/24 maxlen: 24
193.25.200.0/24 maxlen: 24
2a07:6780::/29 maxlen: 29
2a0a:6680:bee::/48 maxlen: 48
2a0a:6680:ec0::/48 maxlen: 48
2a0a:6680:1000::/36 maxlen: 36
2a0a:6680:1979::/48 maxlen: 48
2a0a:6680:2000::/36 maxlen: 36
2a0a:6680:b300::/40 maxlen: 40
2a0a:6680:bee1::/48 maxlen: 48
2a0a:6680:bee5::/48 maxlen: 48
2a0a:6680:bee6::/48 maxlen: 48
2a0a:6680:cc91::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:76:42:5e:7c:29:0b:34:c0:26:12:a4:97:c7:bf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Oct 19 13:59:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2af96d0f28f2ec10e928aff2717ca6c518678fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:7f:53:2e:2a:7a:00:07:5c:39:d7:e2:10:
93:2e:23:01:1a:d8:48:ff:db:ed:93:0b:41:08:bd:
53:aa:2c:3f:c4:39:ba:a0:d2:dd:33:f4:f4:32:5b:
72:0c:77:6e:ff:19:8e:c6:70:2b:1c:36:9a:44:94:
46:fc:4f:7f:9f:af:55:31:5f:43:94:bf:c1:c6:2a:
34:2e:2d:8b:90:29:39:02:d0:c9:2f:0f:d8:e4:8d:
e0:35:81:43:6d:d5:1f:7b:40:f1:3f:77:1d:02:8c:
93:7f:ce:e8:67:0c:10:4d:75:05:2b:df:a8:72:68:
cf:0b:46:93:0f:b9:00:10:15:ee:68:5a:56:22:32:
63:f7:d2:bd:d3:a1:d2:e2:7c:b1:a0:01:a4:08:fc:
a7:2e:86:5a:76:b0:3b:f4:91:95:2f:d6:03:8b:6e:
d8:38:21:06:8e:a8:07:2f:d8:c2:f3:f0:e2:14:b8:
29:c7:83:fd:5d:2b:0e:33:d3:8c:77:c5:6c:d9:34:
70:d3:c1:b8:40:19:36:b1:ce:d6:73:c3:5e:71:40:
bc:29:17:ac:d8:00:74:cb:00:c8:e2:12:2c:1a:e7:
ef:0f:46:56:42:ab:e9:b3:5b:1e:e1:7d:a2:70:30:
59:5a:be:e2:4f:ca:18:12:f2:4a:b6:2f:bf:9c:c4:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AF:96:D0:F2:8F:2E:C1:0E:92:8A:FF:27:17:CA:6C:51:86:78:FD
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/8q-W0PKPLsEOkor_JxfKbFGGeP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.184.0-185.178.186.255
193.25.200.0/24
IPv6:
2a07:6780::/29
2a0a:6680:bee::/48
2a0a:6680:ec0::/48
2a0a:6680:1000::-2a0a:6680:2fff:ffff:ffff:ffff:ffff:ffff
2a0a:6680:b300::/40
2a0a:6680:bee1::/48
2a0a:6680:bee5::-2a0a:6680:bee6:ffff:ffff:ffff:ffff:ffff
2a0a:6680:cc91::/48
Signature Algorithm: sha256WithRSAEncryption
83:3f:3f:47:50:e1:af:9e:01:ec:aa:cc:19:05:06:7d:7d:79:
df:ae:6b:c2:52:65:01:21:cc:40:ff:d5:f3:64:67:ae:72:0d:
78:03:f5:9e:9d:25:94:ef:03:44:4d:e9:26:cd:25:b5:2f:c0:
86:d8:a6:f2:f9:5d:c5:14:6e:0a:c5:79:20:8d:27:7d:de:6e:
1d:09:e7:9e:b1:40:d8:ac:fa:6b:17:8c:96:9e:54:68:d7:6e:
f3:99:c5:5e:44:27:95:76:a2:76:e8:41:c1:8b:60:cc:19:c4:
82:7e:fd:f1:09:cb:9d:f3:95:aa:ec:c5:12:7d:a5:1c:c1:6d:
49:f1:c3:88:2c:50:24:86:d2:66:21:9f:44:2b:2c:84:8e:89:
43:30:7d:a9:39:26:77:fa:25:f2:ee:72:9b:1a:66:46:57:3e:
ad:70:cb:d7:4c:a3:31:e1:06:ba:0a:0c:f3:9e:10:db:63:8c:
5a:15:ed:ad:9b:50:b4:a1:32:a3:ce:10:f0:18:37:df:fb:0c:
d2:44:dc:88:00:a4:e7:f1:4d:c9:c4:f8:79:32:64:02:f7:a5:
61:c8:8e:f6:6a:e5:f7:d7:e0:42:b5:9b:92:f7:22:ef:5d:24:
99:a5:89:b7:23:80:96:e0:e0:9d:8a:df:72:90:fe:5a:79:d6:
df:37:43:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:18 2026 by rpki-client