Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_-o8S4ltXugf7_SsjaDPkCrGV0Y.roa
File: _-o8S4ltXugf7_SsjaDPkCrGV0Y.roa (raw, json)
Hash identifier: CAeqH2b1AiuzwK16bjBH3TYjyw81+9hDH1lc71nmMZA=
Subject key identifier: FF:EA:3C:4B:89:6D:5E:E8:1F:EF:F4:AC:8D:A0:CF:90:2A:C6:57:46
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019F5CBE03B101AE9BD0898EA05EBDBC70DC
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_-o8S4ltXugf7_SsjaDPkCrGV0Y.roa
Signing time: Mon 13 Jul 2026 18:29:44 +0000
ROA not before: Mon 13 Jul 2026 18:29:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 147.45.88.0/21 maxlen: 21
147.45.120.0/22 maxlen: 22
147.45.127.0/24 maxlen: 24
147.45.205.0/24 maxlen: 24
193.233.60.0/24 maxlen: 24
193.233.62.0/24 maxlen: 24
193.233.124.0/22 maxlen: 24
193.233.170.0/24 maxlen: 24
193.233.236.0/24 maxlen: 24
193.233.237.0/24 maxlen: 24
193.233.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:be:03:b1:01:ae:9b:d0:89:8e:a0:5e:bd:bc:70:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 13 18:29:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffea3c4b896d5ee81feff4ac8da0cf902ac65746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:09:c3:a8:a0:41:c5:ca:40:b7:7d:9e:3b:
69:8d:37:4a:89:0b:29:4d:e8:4e:f4:05:53:1d:d2:
1e:80:76:a2:7d:60:be:66:ac:d2:61:ef:1a:ca:be:
50:43:07:2b:3a:55:ad:95:f0:91:8a:18:d6:a1:79:
a2:ce:54:c1:03:32:e8:6d:0f:e4:2e:d0:8b:61:91:
9d:a3:44:4c:67:22:20:eb:1d:81:a2:fc:9f:b9:09:
2e:b7:f7:f3:22:b4:8c:90:a6:ae:7f:0c:3b:b6:e1:
29:8b:92:7c:13:82:4f:a6:2f:40:c1:d1:aa:d7:75:
7e:4f:7d:c0:ce:e8:49:b1:ab:73:e3:98:1b:80:91:
0b:13:42:35:54:c1:b4:86:31:f2:0b:91:f8:d2:fa:
ec:e2:a2:f1:e1:2f:99:65:52:f9:5b:88:d1:6c:93:
6e:f2:18:2b:60:2c:d8:3e:34:6d:7c:aa:f1:b9:f0:
61:ba:31:ae:52:51:1a:92:bb:3f:2f:c9:bf:1d:e9:
69:5b:ae:ca:c3:ff:58:9b:31:b4:14:df:7f:a1:fc:
e3:4c:14:00:90:55:ad:07:ac:f7:67:cf:b5:63:b9:
1f:b2:b3:2b:8f:e1:eb:df:ed:f3:da:a1:71:84:c9:
52:b0:19:a7:99:42:67:82:9b:19:9b:8d:7d:d0:87:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EA:3C:4B:89:6D:5E:E8:1F:EF:F4:AC:8D:A0:CF:90:2A:C6:57:46
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_-o8S4ltXugf7_SsjaDPkCrGV0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.88.0/21
147.45.120.0/22
147.45.127.0/24
147.45.205.0/24
193.233.60.0/24
193.233.62.0/24
193.233.124.0/22
193.233.170.0/24
193.233.236.0/23
193.233.239.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8e:8f:50:d7:93:bc:ab:ac:3d:dd:6d:68:00:07:c7:c2:10:
45:6b:f7:d8:06:df:d6:b4:c7:79:63:d8:de:31:5f:79:0a:52:
d4:15:43:af:2b:cf:a4:09:ae:5d:b4:f5:f8:0d:a7:53:3d:83:
f5:02:65:8d:0b:26:8d:c5:a8:f0:8a:e0:c5:12:54:7c:9a:4a:
c9:92:f2:31:5e:db:bf:a2:dc:a2:36:f8:a8:de:92:41:c1:ca:
bd:10:db:96:5b:69:ee:be:c5:37:21:75:f7:02:55:84:e9:06:
05:80:45:3b:07:24:b7:a9:bb:a0:21:fb:cc:c4:a2:48:94:36:
06:0e:78:3d:46:66:80:83:4f:21:0d:56:38:eb:43:71:bd:2e:
d2:4e:57:33:cc:5d:ac:ea:fc:07:1b:04:33:10:f2:2c:92:28:
f3:d8:69:02:ac:d8:b9:34:f4:f1:d4:8e:3c:c8:47:cc:a5:c9:
1d:b1:13:37:82:13:67:17:50:0f:7a:e5:e1:76:94:39:dc:65:
2f:ff:2c:57:e2:e0:a3:b2:ac:10:e3:87:f1:55:c3:15:86:de:
a6:ff:b9:d7:00:74:5d:9a:80:85:85:1b:28:de:fa:52:01:dd:
91:df:17:10:2b:b0:41:b1:86:51:b2:5d:d0:a1:6f:25:95:65:
cc:bd:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:38:25 2026 by rpki-client