Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/8Z5xmcdXQHfT5d7Ck0EDAXvpk2g.roa
File: 8Z5xmcdXQHfT5d7Ck0EDAXvpk2g.roa (raw, json)
Hash identifier: R1f4TY4NVLDBlI4mibWng28Ip80KPchDGU+0MuMj7zs=
Subject key identifier: F1:9E:71:99:C7:57:40:77:D3:E5:DE:C2:93:41:03:01:7B:E9:93:68
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019ED1436907750C4AC92B937A79D35D2B18
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/8Z5xmcdXQHfT5d7Ck0EDAXvpk2g.roa
Signing time: Tue 16 Jun 2026 16:28:36 +0000
ROA not before: Tue 16 Jun 2026 16:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56327
IP address blocks: 178.217.235.0/24 maxlen: 24
185.204.84.0/22 maxlen: 22
185.219.224.0/22 maxlen: 22
185.248.72.0/22 maxlen: 22
2a0f:78c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:43:69:07:75:0c:4a:c9:2b:93:7a:79:d3:5d:2b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Jun 16 16:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f19e7199c7574077d3e5dec2934103017be99368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:8f:e8:c5:0c:77:22:ca:d5:da:37:5d:c4:
89:c9:81:b4:e0:1c:8b:e5:ea:6c:3a:42:75:af:df:
bf:2b:c7:dc:3f:29:2e:1b:c6:45:e4:91:b9:26:d2:
1d:c5:ef:af:d1:5d:bc:49:b9:48:b9:d4:be:97:78:
0e:22:ee:48:e4:e7:e5:41:97:24:a0:cc:be:24:4c:
6f:51:06:53:d6:02:55:d7:0c:f2:e0:a5:60:59:a9:
8b:6c:cc:1e:1f:ad:5b:3a:5d:63:66:26:2c:d7:e2:
d7:84:1c:0c:a4:a1:b1:40:53:ea:e4:81:ba:7b:c2:
68:51:1c:b0:83:02:92:a0:7c:8c:de:c5:f6:bc:6a:
1e:3d:7a:e4:17:d5:48:01:5d:d4:83:e3:6f:83:cd:
79:a6:4a:cf:a0:c1:cc:5c:5c:aa:d9:5a:b2:da:bc:
12:b3:bf:9b:8c:c9:42:d3:a3:c3:5c:6f:b2:d6:be:
90:19:f2:76:5d:ac:5c:c7:6f:6e:06:55:5c:08:b8:
f0:7c:f4:a6:0d:70:5d:53:22:92:0d:89:40:52:ad:
63:1f:fa:b7:c3:89:d6:c6:1f:35:d7:be:9b:1d:bc:
18:74:a7:e5:92:a9:17:03:28:8e:c0:2b:95:1a:fc:
1f:34:eb:63:9d:0f:85:6a:2c:ce:06:d0:d6:7c:be:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9E:71:99:C7:57:40:77:D3:E5:DE:C2:93:41:03:01:7B:E9:93:68
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/8Z5xmcdXQHfT5d7Ck0EDAXvpk2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.235.0/24
185.204.84.0/22
185.219.224.0/22
185.248.72.0/22
IPv6:
2a0f:78c0::/29
Signature Algorithm: sha256WithRSAEncryption
28:47:31:46:94:86:00:83:59:1d:8c:16:53:b9:5b:f3:f1:e4:
01:a5:48:42:ba:10:de:7e:c4:0a:5d:23:01:be:8a:5c:9d:fb:
38:c2:db:6d:e0:cb:1f:d5:09:3a:36:90:dd:97:a5:04:31:4a:
e7:06:c2:87:af:9e:47:2d:13:7a:df:a4:6f:d2:25:43:f2:bc:
72:2e:f1:3d:38:38:5d:a3:8a:42:e7:90:1f:16:5f:bf:ce:98:
ce:94:09:0f:e7:e6:20:48:dd:47:6f:a1:d4:7b:81:a6:0c:cb:
6a:4a:2c:2f:8c:f4:10:44:4b:3e:cc:b3:b6:b5:66:15:cb:28:
1c:9e:76:a9:32:d3:9a:78:ba:8c:6a:2e:5d:91:c2:05:3a:9c:
21:bd:ec:f6:78:df:d7:b5:b9:ad:14:be:5e:18:9d:c5:b7:47:
ec:f9:af:17:87:3c:05:c2:20:f0:e1:9f:8b:01:01:1d:5b:1b:
8f:8d:bd:70:d4:58:73:21:d3:2a:6d:4d:ec:4d:1c:16:2a:70:
c4:88:8f:08:85:94:79:6d:f1:7e:eb:ee:d3:eb:db:03:2c:57:
c6:75:b7:e2:92:ee:4c:db:13:8b:8f:84:7c:fb:25:d5:dd:6a:
91:0b:97:5d:77:dd:0e:06:bf:1b:b3:71:1a:d4:0b:b7:0f:b7:
69:b8:78:dc
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ7RQ2kHdQxKySuTennTXSsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Nzg1MTE3OTg2YWRhYTQzN2JlYzMwYTJiZjlmMTU3YTky
NTdkZjIwHhcNMjYwNjE2MTYyODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTllNzE5OWM3NTc0MDc3ZDNlNWRlYzI5MzQxMDMwMTdiZTk5MzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwuP6MUMdyLK1do3XcSJyYG04ByL
5epsOkJ1r9+/K8fcPykuG8ZF5JG5JtIdxe+v0V28SblIudS+l3gOIu5I5OflQZck
oMy+JExvUQZT1gJV1wzy4KVgWamLbMweH61bOl1jZiYs1+LXhBwMpKGxQFPq5IG6
e8JoURywgwKSoHyM3sX2vGoePXrkF9VIAV3Ug+Nvg815pkrPoMHMXFyq2Vqy2rwS
s7+bjMlC06PDXG+y1r6QGfJ2Xaxcx29uBlVcCLjwfPSmDXBdUyKSDYlAUq1jH/q3
w4nWxh81176bHbwYdKflkqkXAyiOwCuVGvwfNOtjnQ+FaizOBtDWfL7ItwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPGecZnHV0B30+XewpNBAwF76ZNoMB8GA1UdIwQY
MBaAFAZ4UReYatqkN77DCiv58VepJX3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2Ut
ODRlZTQ4ODU2NmYxLzEvOFo1eG1jZFhRSGZUNWQ3Q2swRURBWHZwazJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2UtODRlZTQ4ODU2NmYx
LzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAstnrAwQC
ucxUAwQCudvgAwQCufhIMA0EAgACMAcDBQMqD3jAMA0GCSqGSIb3DQEBCwUAA4IB
AQAoRzFGlIYAg1kdjBZTuVvz8eQBpUhCuhDefsQKXSMBvopcnfs4wttt4Msf1Qk6
NpDdl6UEMUrnBsKHr55HLRN636Rv0iVD8rxyLvE9ODhdo4pC55AfFl+/zpjOlAkP
5+YgSN1Hb6HUe4GmDMtqSiwvjPQQREs+zLO2tWYVyygcnnapMtOaeLqMai5dkcIF
Opwhvez2eN/XtbmtFL5eGJ3Ft0fs+a8XhzwFwiDw4Z+LAQEdWxuPjb1w1FhzIdMq
bU3sTRwWKnDEiI8IhZR5bfF+6+7T69sDLFfGdbfiku5M2xOLj4R8+yXV3WqRC5dd
d90OBr8bs3Ea1Au3D7dpuHjc
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:55 2026 by rpki-client