Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8PzlIYa8l-UJyHR_wSnqRYtWrFE.roa
File: 8PzlIYa8l-UJyHR_wSnqRYtWrFE.roa (raw, json)
Hash identifier: ZGn7+EJa7dhokNgyvTerISiZC7wSI2puhsoRRlokn6o=
Subject key identifier: F0:FC:E5:21:86:BC:97:E5:09:C8:74:7F:C1:29:EA:45:8B:56:AC:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0250DD0C8A5B5F069BC8C0FFDEC3AAB3D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8PzlIYa8l-UJyHR_wSnqRYtWrFE.roa
Signing time: Fri 21 Aug 2026 16:00:57 +0000
ROA not before: Fri 21 Aug 2026 16:00:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.149.240.0/24 maxlen: 24
81.161.229.0/24 maxlen: 24
87.120.158.0/24 maxlen: 24
87.120.159.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
87.121.146.0/24 maxlen: 24
87.121.147.0/24 maxlen: 24
87.121.161.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:0d:d0:c8:a5:b5:f0:69:bc:8c:0f:fd:ec:3a:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 21 16:00:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0fce52186bc97e509c8747fc129ea458b56ac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:0c:5e:cb:c4:33:6c:dc:e3:e7:c7:ab:b4:
30:ca:f9:c8:81:0b:d9:e2:77:5b:82:83:b3:40:a3:
0d:00:d0:7b:6b:05:74:46:01:a1:e5:86:48:dd:cd:
ea:24:e0:bc:49:a6:f4:18:f2:22:c3:4d:df:df:03:
e2:20:9a:df:08:44:3c:98:15:58:8f:88:b6:32:33:
8e:c9:77:0e:68:9d:70:34:a9:6d:86:48:94:31:2b:
28:7d:94:c6:e7:00:ef:50:a8:1b:6a:6b:08:f9:09:
d4:6b:3c:72:45:34:dc:33:93:49:dc:54:8a:2e:a2:
e4:6b:b8:e1:83:a2:c6:be:ef:d2:82:69:8f:3b:c2:
6b:53:4c:7c:42:b2:60:46:07:a7:63:6f:fe:1c:93:
80:2d:cb:06:60:ad:26:1b:c5:8e:c9:51:e7:4b:1a:
78:24:d9:7b:3d:73:c2:4e:d4:2c:07:0f:2c:3d:c1:
8c:1b:16:37:26:62:3e:3d:90:b9:0b:fc:c0:e3:1d:
d7:20:77:3c:69:e7:1b:2b:7b:47:0b:f6:80:9b:40:
81:24:21:d3:2e:78:ca:44:7c:30:f6:15:13:4f:32:
96:40:55:fb:51:c1:70:0a:68:05:1a:71:c5:2e:34:
c8:cc:56:5d:66:8a:b0:ac:c2:f3:38:6b:06:38:0a:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FC:E5:21:86:BC:97:E5:09:C8:74:7F:C1:29:EA:45:8B:56:AC:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8PzlIYa8l-UJyHR_wSnqRYtWrFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
81.161.229.0/24
87.120.158.0/23
87.121.46.0/24
87.121.146.0/23
87.121.161.0/24
93.123.116.0/24
94.156.14.0/24
95.214.25.0-95.214.26.255
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:29:25:51:88:b1:71:4c:82:d2:4c:12:1f:9f:67:d0:4c:b3:
c3:3c:d8:12:0e:c6:9e:07:d9:e4:6a:d7:8a:8b:5b:46:f8:3c:
cb:94:37:cc:54:32:f2:17:e9:cc:49:1b:53:75:87:55:30:8d:
d3:b2:95:43:9d:6b:85:c4:fb:34:80:8a:05:4f:3b:d4:3d:e7:
aa:ae:2b:b6:47:e4:f4:9d:7b:b3:3c:10:0e:96:52:eb:5d:90:
c9:c8:c8:20:da:b2:a1:25:69:28:56:1e:e7:97:42:a4:c5:5e:
af:ee:bf:c2:86:d6:09:9a:21:0e:f9:f9:fa:74:d7:38:08:63:
9d:45:7f:c5:1c:ba:32:55:2a:b5:6b:ce:3a:44:e4:00:fa:00:
0f:ce:2a:7c:d9:cb:8f:37:97:17:51:7a:88:89:c8:b2:c4:1b:
aa:ec:99:bf:c2:f3:28:5a:35:73:f5:74:c8:1b:70:5e:70:d3:
5a:c6:64:41:d5:da:a1:0d:98:ec:6d:2d:76:c5:31:bb:bd:02:
29:03:7a:f3:c9:9f:31:86:1b:fe:8e:5d:58:1f:02:c8:98:f5:
ff:ae:80:cf:1a:18:38:0d:61:a1:0e:49:a1:8e:b3:61:07:85:
90:21:46:0d:bb:13:a2:dc:59:50:5f:e3:ec:78:22:14:a8:b9:
d9:a3:be:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 21 20:01:13 2026 by rpki-client