Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/8GqgyuBEGgaxxoSISnrib6CW3Mc.roa
File: 8GqgyuBEGgaxxoSISnrib6CW3Mc.roa (raw, json)
Hash identifier: bEjUXEX5Pqm/nOdrF3XYPCSr/Iq3FxwuCHubprCAlnQ=
Subject key identifier: F0:6A:A0:CA:E0:44:1A:06:B1:C6:84:88:4A:7A:E2:6F:A0:96:DC:C7
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 019F2343A66B683A8E0186FA423D8E4FC76E
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/8GqgyuBEGgaxxoSISnrib6CW3Mc.roa
Signing time: Thu 02 Jul 2026 14:37:43 +0000
ROA not before: Thu 02 Jul 2026 14:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 5.253.184.0/23 maxlen: 23
45.81.161.0/24 maxlen: 24
45.81.162.0/24 maxlen: 24
45.81.163.0/24 maxlen: 24
45.130.33.0/24 maxlen: 24
45.130.34.0/23 maxlen: 23
88.214.0.0/24 maxlen: 24
88.214.1.0/24 maxlen: 24
88.214.2.0/24 maxlen: 24
88.214.3.0/24 maxlen: 24
185.114.204.0/24 maxlen: 24
185.219.160.0/24 maxlen: 24
185.219.161.0/24 maxlen: 24
193.111.184.0/22 maxlen: 22
193.135.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:43:a6:6b:68:3a:8e:01:86:fa:42:3d:8e:4f:c7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jul 2 14:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f06aa0cae0441a06b1c684884a7ae26fa096dcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:c4:52:2f:ac:93:48:58:d9:42:85:5c:55:
7f:c6:22:fe:2a:4e:c7:5a:11:ec:4f:24:49:f6:e2:
df:05:cb:d5:10:a0:34:16:72:fd:f4:fe:69:a9:3f:
94:ed:50:de:d3:ef:1a:5a:4a:6a:ae:db:e7:81:80:
7a:2a:08:ef:79:1c:18:63:02:72:fb:5e:27:07:36:
31:97:c9:28:f3:c1:5c:bd:b7:bf:3b:2e:16:07:94:
77:89:b9:39:83:ee:2a:14:83:7f:29:02:b0:6c:b1:
72:8c:06:af:33:4e:3e:02:77:3c:d3:fa:6a:aa:59:
27:c0:09:2b:b8:55:e6:87:2a:d9:da:8a:3c:bc:91:
e9:ee:18:8f:07:95:fa:ac:ea:69:0d:e0:a2:d4:7d:
56:a8:da:9d:35:c6:94:01:c3:03:d7:2f:72:7c:fc:
68:5e:97:bb:7b:b9:e5:22:e2:48:a6:9a:04:91:89:
a9:89:02:17:ef:7b:80:9b:55:3f:0e:dc:76:d1:89:
bc:fd:46:57:35:f9:b1:29:21:62:c7:e0:37:2e:85:
e1:7b:6a:79:d0:31:89:60:33:c8:65:29:c0:a4:e5:
84:be:a0:ca:00:4f:cf:99:93:7e:6c:b9:78:86:4a:
48:a0:9f:7c:a2:35:c3:8c:7d:e3:7e:d4:45:16:7f:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6A:A0:CA:E0:44:1A:06:B1:C6:84:88:4A:7A:E2:6F:A0:96:DC:C7
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/8GqgyuBEGgaxxoSISnrib6CW3Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.184.0/23
45.81.161.0-45.81.163.255
45.130.33.0-45.130.35.255
88.214.0.0/22
185.114.204.0/24
185.219.160.0/23
193.111.184.0/22
193.135.220.0/22
Signature Algorithm: sha256WithRSAEncryption
61:cd:7d:94:c3:bd:ab:ca:7e:00:19:d7:e6:e4:9c:fc:9c:4b:
fa:50:be:fa:10:4a:58:57:f0:05:59:0d:bf:a5:78:34:a9:19:
a9:75:c2:e9:a6:fb:38:41:89:db:fd:44:14:d8:ea:fb:63:49:
c2:1d:03:4a:b9:cc:82:f3:0e:60:64:95:38:f8:18:1f:e6:7b:
d1:04:3b:17:0e:ad:a7:36:5c:10:21:30:05:b5:31:d3:ad:19:
00:f6:b0:19:ce:74:f4:2f:0c:cc:4f:d7:ae:ad:53:ec:81:9e:
42:99:cf:49:b7:21:69:30:a1:81:ca:7e:5a:95:34:25:6e:c7:
ff:9e:f4:69:68:fa:60:60:d3:69:70:b4:ab:62:c1:70:1a:a8:
64:cb:83:12:ff:67:f0:9a:9f:d2:6c:bb:25:eb:eb:96:7e:1a:
1d:ab:5c:f2:cb:f5:2f:59:88:74:ec:30:c7:43:0b:c7:3c:c7:
de:44:96:e8:b1:ca:13:8f:6c:44:8c:7b:68:ac:47:53:be:ba:
a8:d3:b7:13:d4:2b:b0:0b:17:51:49:1e:43:e5:f3:de:08:c0:
81:30:83:0b:6d:8b:cb:98:f1:9b:92:4e:fc:9b:b9:fa:cc:2d:
ad:13:ef:28:b7:b1:81:57:bc:6a:2a:b5:78:cd:fc:d1:54:53:
89:91:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:23 2026 by rpki-client