Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8UYK_0oEUPtNFnVuOYZPrnJ40Nw.roa
File: 8UYK_0oEUPtNFnVuOYZPrnJ40Nw.roa (raw, json)
Hash identifier: bLiJIRWf42wknYVFIR7J4VFWpbcFbv+m74PgBwrmsco=
Subject key identifier: F1:46:0A:FF:4A:04:50:FB:4D:16:75:6E:39:86:4F:AE:72:78:D0:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FEBD54B896F87A49D26E5F7AF4D8D14AB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8UYK_0oEUPtNFnVuOYZPrnJ40Nw.roa
Signing time: Mon 10 Aug 2026 13:20:51 +0000
ROA not before: Mon 10 Aug 2026 13:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.13.224.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 13:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:d5:4b:89:6f:87:a4:9d:26:e5:f7:af:4d:8d:14:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 10 13:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1460aff4a0450fb4d16756e39864fae7278d0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:c2:df:03:62:60:5c:4a:cd:46:9a:a9:1b:
6b:0f:95:42:28:aa:6c:18:91:46:19:66:a0:b2:ce:
7a:de:47:1d:66:6b:fd:97:e9:85:23:a2:b2:11:d9:
c2:d9:27:e4:44:65:cf:dc:98:7e:90:be:28:98:72:
b7:54:0a:90:d6:8b:8d:fd:9e:69:d2:1e:d2:f2:54:
76:34:d2:19:f8:75:84:60:c3:43:bc:04:5a:a1:87:
82:2a:b5:3a:c7:6a:f7:08:39:95:ec:2e:b3:30:05:
6b:d8:fb:7f:07:c8:a0:c3:ab:d5:05:04:cb:fd:c6:
d8:c2:73:07:0c:6c:c2:6e:d2:07:8b:3b:e3:83:d8:
64:a5:66:14:31:46:38:4b:03:03:66:3d:76:f0:58:
b2:51:24:38:ee:bc:e2:13:c6:82:e1:c1:e8:67:d2:
2a:4d:f1:6f:e3:14:88:d9:87:02:df:a2:fe:0d:6f:
97:c9:54:9e:1e:f9:c4:95:c7:9f:f2:ef:4c:2b:c9:
63:89:49:2d:84:87:d6:f2:a6:67:40:4a:a0:e8:58:
3d:50:30:73:01:69:c3:9d:be:c8:8a:0d:81:e4:c4:
d9:21:f9:d0:4f:ff:53:b6:52:5a:84:86:02:9b:cf:
e8:55:4f:3f:fb:ea:8a:4a:5c:01:ae:d4:56:1b:ea:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:46:0A:FF:4A:04:50:FB:4D:16:75:6E:39:86:4F:AE:72:78:D0:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8UYK_0oEUPtNFnVuOYZPrnJ40Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.143.113.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.55.224.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1f:f8:6f:d1:44:d9:8d:d9:82:1c:32:00:80:c3:7c:ee:1a:
d0:81:1a:fa:b2:4b:5f:9e:fa:1a:c0:20:3e:c6:4a:60:bd:f0:
e0:58:bd:bf:28:f2:8b:53:aa:41:16:70:d5:d2:65:0a:9b:2c:
0d:66:9d:f2:f4:b1:c2:a4:d9:de:c5:0e:9b:5b:09:dc:da:1e:
7c:63:67:8b:2a:19:46:78:31:50:41:5a:fe:93:c7:11:86:f4:
0d:08:71:bf:62:ca:9f:19:52:ee:e1:ff:b3:7e:8a:81:2f:95:
00:b6:db:15:60:07:f6:c5:ba:10:96:da:27:3e:ec:23:63:aa:
3c:60:b0:95:d5:7b:eb:22:fd:25:79:9d:9d:a9:c2:2d:a8:c2:
1c:e5:cc:05:7e:d2:f0:f9:82:b8:12:3b:f8:9d:9f:7c:bb:6e:
a2:d7:30:2d:8a:dc:d1:71:66:4c:e0:73:6c:a3:9c:02:6a:8c:
28:40:e8:03:f7:4a:96:aa:26:13:14:d2:04:69:ac:0e:e9:3c:
31:ab:7b:cc:52:cf:eb:75:a5:c2:1e:c6:2b:b7:a8:36:76:d3:
23:a4:c7:85:33:77:1f:70:c2:63:c9:cf:06:03:35:58:15:62:
6b:ee:09:92:09:22:04:0e:12:87:9a:99:93:97:fe:a2:84:c8:
29:b5:27:01
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZ/r1UuJb4eknSbl969NjRSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODEwMTMyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTQ2MGFmZjRhMDQ1MGZiNGQxNjc1NmUzOTg2NGZhZTcyNzhkMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDnC3wNiYFxKzUaaqRtrD5VCKKps
GJFGGWagss563kcdZmv9l+mFI6KyEdnC2SfkRGXP3Jh+kL4omHK3VAqQ1ouN/Z5p
0h7S8lR2NNIZ+HWEYMNDvARaoYeCKrU6x2r3CDmV7C6zMAVr2Pt/B8igw6vVBQTL
/cbYwnMHDGzCbtIHizvjg9hkpWYUMUY4SwMDZj128FiyUSQ47rziE8aC4cHoZ9Iq
TfFv4xSI2YcC36L+DW+XyVSeHvnElcef8u9MK8ljiUkthIfW8qZnQEqg6Fg9UDBz
AWnDnb7Iig2B5MTZIfnQT/9TtlJahIYCm8/oVU8/++qKSlwBrtRWG+qM9QIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFPFGCv9KBFD7TRZ1bjmGT65yeNDcMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvOFVZS18wb0VVUHRORm5WdU9ZWlBybko0ME53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4DBAAf
DeADBAAli4ADBAAtQuQDBAAtQucDBAAtWfcDBAAtW8IDBAAtgVUDBAAtjZ4DBABP
bjIDBABRoe4DBABTj3EDBABVHy8DBAFV2YIDBABXeFcDBABXeH4DBABXeKYDBABX
eMADBABXeU8DBABXeXIDBABXed0DBABc+TIDBABde20DBABenLwDBACTTmUDBAC5
3qADBAC5/LEDBADCN7oDBADCN+ADBADCqa8wDQYJKoZIhvcNAQELBQADggEBAGgf
+G/RRNmN2YIcMgCAw3zuGtCBGvqyS1+e+hrAID7GSmC98OBYvb8o8otTqkEWcNXS
ZQqbLA1mnfL0scKk2d7FDptbCdzaHnxjZ4sqGUZ4MVBBWv6TxxGG9A0Icb9iyp8Z
Uu7h/7N+ioEvlQC22xVgB/bFuhCW2ic+7CNjqjxgsJXVe+si/SV5nZ2pwi2owhzl
zAV+0vD5grgSO/idn3y7bqLXMC2K3NFxZkzgc2yjnAJqjChA6AP3SpaqJhMU0gRp
rA7pPDGre8xSz+t1pcIexiu3qDZ20yOkx4Uzdx9wwmPJzwYDNVgVYmvuCZIJIgQO
EoeamZOX/qKEyCm1JwE=
-----END CERTIFICATE-----
Generated at Mon Aug 10 19:14:22 2026 by rpki-client