Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa
File: 8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa (raw, json)
Hash identifier: v/1+49rt+1xmD87nJbTdyd9Pwk6XUeag3Zc7Vhx+XuE=
Subject key identifier: F2:AC:85:AB:42:70:DA:F5:79:8C:49:56:49:2F:41:74:48:8C:1D:92
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 019CAF53706D85BF4AC1627431A12EE23803
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa
Signing time: Mon 02 Mar 2026 16:13:26 +0000
ROA not before: Mon 02 Mar 2026 16:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26380
IP address blocks: 185.96.136.0/23 maxlen: 23
185.96.136.0/24 maxlen: 24
185.96.137.0/24 maxlen: 24
185.96.138.0/24 maxlen: 24
185.175.204.0/23 maxlen: 23
185.175.204.0/24 maxlen: 24
185.175.205.0/24 maxlen: 24
185.175.206.0/23 maxlen: 23
185.175.206.0/24 maxlen: 24
185.175.207.0/24 maxlen: 24
185.199.60.0/24 maxlen: 24
185.199.61.0/24 maxlen: 24
217.149.105.0/24 maxlen: 24
217.149.106.0/24 maxlen: 24
217.149.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:53:70:6d:85:bf:4a:c1:62:74:31:a1:2e:e2:38:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Mar 2 16:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2ac85ab4270daf5798c4956492f4174488c1d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:73:85:18:b4:94:12:16:3e:43:e3:f7:c0:
a8:93:58:0b:e1:68:16:97:e9:78:37:ac:37:b3:b6:
10:ff:10:b2:d6:b3:6f:a4:d8:38:77:2e:cc:b0:87:
db:e7:a2:64:d7:24:d8:03:3f:07:d2:5e:cd:57:03:
8f:e1:09:69:89:19:75:4b:24:08:a4:f8:57:3c:51:
68:e3:0d:9f:54:b1:19:53:92:a5:05:88:b6:f9:4b:
91:c2:e0:cc:9c:cc:e1:6d:cf:65:49:08:ef:72:93:
84:96:23:fd:98:c7:09:f6:b7:cb:8a:84:21:13:bf:
2e:28:93:01:be:aa:90:89:74:0c:a7:06:a6:ed:89:
53:ee:92:36:29:1c:8c:ea:91:fb:9e:1a:74:7b:a3:
43:3f:6a:e7:f3:53:ae:fc:fb:7a:11:e1:ff:c2:52:
7a:34:04:d6:9d:3a:e5:5f:24:c6:f7:26:79:42:6f:
ae:dc:49:16:38:63:39:7c:fe:7a:91:1f:11:11:c3:
55:b2:da:fb:b6:b6:0a:f2:2c:55:79:2c:5b:12:7e:
da:7e:15:b6:39:bf:3f:cb:65:79:6e:55:5c:c0:e2:
a9:dd:59:19:e9:b6:35:07:e1:c8:db:e5:c9:48:85:
6a:6b:76:56:dc:29:97:68:37:9e:95:c0:a5:06:c2:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AC:85:AB:42:70:DA:F5:79:8C:49:56:49:2F:41:74:48:8C:1D:92
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.136.0-185.96.138.255
185.175.204.0/22
185.199.60.0/23
217.149.105.0-217.149.107.255
Signature Algorithm: sha256WithRSAEncryption
32:dc:32:fc:44:0b:85:8e:6e:4c:aa:99:89:f0:37:19:f9:a2:
69:c2:13:fa:b0:23:ea:24:cf:bb:99:97:4f:c7:f4:6a:71:61:
17:16:32:77:36:3f:c6:7c:90:50:89:f4:91:00:7e:a7:e8:f0:
9c:e7:05:5b:a6:93:45:7f:0e:b2:71:78:fd:b0:de:75:d9:26:
3c:76:05:10:16:7b:bd:65:5f:c8:83:ff:b2:3b:34:79:a9:f5:
3b:74:fb:bd:a3:5b:34:2d:90:97:b3:38:34:59:8c:3c:73:45:
0e:ce:0d:c9:72:9c:e0:5e:2b:3d:09:23:b1:e4:87:6c:33:42:
fc:ef:af:a9:bc:c6:37:54:12:94:67:65:89:e7:68:f5:2d:6b:
ee:2b:21:07:c1:05:ed:0a:35:99:3b:9f:1e:6b:62:64:3c:9e:
cf:1c:af:37:f5:f3:dc:5b:0f:5e:f6:4a:52:5e:68:9c:09:3e:
d8:19:18:cd:74:6a:ee:62:03:e4:6f:79:0c:c0:18:5e:a2:b0:
2b:e0:46:29:50:0e:1e:6d:e1:23:64:7a:4a:e1:7d:cd:6e:c5:
d1:3c:d5:42:62:e5:7d:48:7a:55:49:dc:e4:17:69:65:00:de:
5e:52:a8:42:79:4f:bd:2c:4d:06:61:92:ad:ab:c3:6f:4f:47:
71:7a:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:10:55 2026 by rpki-client