Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/SP8L2dVaDJxt4XOTwpJMW0cuceE.roa
File: SP8L2dVaDJxt4XOTwpJMW0cuceE.roa (raw, json)
Hash identifier: S2SGnySe9Cy9weM0WVxwbLjf6UNYLuCBrQG1j1p0yfw=
Subject key identifier: 48:FF:0B:D9:D5:5A:0C:9C:6D:E1:73:93:C2:92:4C:5B:47:2E:71:E1
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A00A06B9A3E9716BD0C21FDF2901ECC40C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/SP8L2dVaDJxt4XOTwpJMW0cuceE.roa
Signing time: Sun 16 Aug 2026 10:03:27 +0000
ROA not before: Sun 16 Aug 2026 10:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402799
IP address blocks: 91.210.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:06:b9:a3:e9:71:6b:d0:c2:1f:df:29:01:ec:c4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 16 10:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48ff0bd9d55a0c9c6de17393c2924c5b472e71e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:1d:d9:61:dc:de:fe:36:42:52:7c:6f:15:
d5:fd:ce:6e:f6:72:c5:c1:4d:82:27:48:e1:32:9c:
b0:6e:62:65:e7:6e:17:04:79:c4:4a:66:86:4e:f6:
f9:4d:11:06:c3:39:4f:59:7e:a3:9a:22:0e:29:6b:
87:30:3f:c1:c2:82:67:d3:fb:9b:30:a1:f3:8e:8a:
68:5e:cd:ae:9e:51:c8:56:56:70:0e:49:7a:7d:50:
00:e6:df:a6:1f:06:0c:52:31:7a:74:c9:9e:a9:ef:
f7:0a:ff:c9:7e:2d:a2:50:92:ec:b3:31:22:9d:c3:
3d:1f:48:91:2f:ac:86:d8:56:54:73:92:7c:55:9e:
5b:ce:61:5a:e6:6d:72:df:fb:ca:07:82:84:d6:94:
4f:df:96:ef:40:22:a8:ca:4c:5c:73:b3:fe:ba:3b:
d1:f6:53:26:c3:bf:ba:28:de:c6:b1:54:1a:65:55:
73:0d:35:92:15:08:99:a1:88:4f:fc:bd:98:47:a0:
d2:b8:71:58:06:f7:6f:37:27:34:d0:ef:98:2b:ce:
7a:56:d5:b1:54:4f:b1:a4:31:36:92:e6:0a:3d:e1:
5a:91:2a:b3:0f:f9:74:c4:b9:3d:2c:fe:81:ee:4f:
4d:79:5a:52:c5:23:ea:e2:0f:b8:ac:c1:b9:27:53:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:0B:D9:D5:5A:0C:9C:6D:E1:73:93:C2:92:4C:5B:47:2E:71:E1
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/SP8L2dVaDJxt4XOTwpJMW0cuceE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.145.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0c:ed:77:ae:ae:70:4c:c6:3a:2d:3e:84:c2:ef:76:f4:b1:
01:8e:0f:e5:9b:63:60:7b:f0:ae:18:c1:54:2e:b3:bd:94:1e:
ef:66:81:40:a0:6b:2c:f1:75:3f:0d:22:53:82:28:33:49:c5:
98:ec:47:d3:5f:72:59:b7:bc:aa:a1:1a:dd:d3:6c:99:ee:3c:
a2:a4:09:be:4a:c2:43:bc:5e:93:77:37:48:0f:cf:7c:8e:56:
ee:55:99:da:4c:ba:ee:6a:92:78:64:e8:ea:c7:4c:0f:ad:37:
6f:2a:55:81:f5:34:83:88:52:0e:aa:cc:43:b3:d8:85:f7:5c:
a6:6e:6f:42:af:fa:51:ca:32:71:d8:bf:a3:8a:99:1b:76:53:
fd:31:52:0d:bb:21:26:42:f5:ed:23:2e:89:1b:b6:f8:f9:b9:
7d:d0:bd:ae:23:21:b0:ad:a2:d8:09:8e:41:15:ba:9d:fc:d5:
5f:8b:b1:5d:8d:ec:30:38:7f:d2:8f:f9:37:dd:35:7c:d0:37:
86:ac:4b:1e:8c:4c:b3:f4:b4:5a:2d:e7:3c:2e:fc:60:77:7c:
e4:cc:ef:03:d9:15:23:05:80:ce:d4:ef:92:1a:68:57:ff:75:
ff:02:67:89:c3:e4:5c:be:ca:8b:f6:06:d0:8d:6d:de:8b:d2:
b0:97:f2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:17 2026 by rpki-client