Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8BaKECW8J34ef6uRgIk-a1zmxu8.roa
File: 8BaKECW8J34ef6uRgIk-a1zmxu8.roa (raw, json)
Hash identifier: aRKY/H6stlwG1Y5EVglTkzrCG7iMrYsRkBazQPH0rwI=
Subject key identifier: F0:16:8A:10:25:BC:27:7E:1E:7F:AB:91:80:89:3E:6B:5C:E6:C6:EF
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EF43B6C7AEF186C24587C7743D47D71DF
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8BaKECW8J34ef6uRgIk-a1zmxu8.roa
Signing time: Tue 23 Jun 2026 11:26:35 +0000
ROA not before: Tue 23 Jun 2026 11:26:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212335
IP address blocks: 79.110.238.0/24 maxlen: 24
185.244.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:3b:6c:7a:ef:18:6c:24:58:7c:77:43:d4:7d:71:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 23 11:26:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0168a1025bc277e1e7fab9180893e6b5ce6c6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:5a:a0:84:7d:c4:56:48:b9:69:12:17:1f:
51:04:36:98:42:a0:6f:cb:30:55:16:f5:1c:5e:71:
e1:0a:fe:02:13:f3:9d:ad:a0:7a:3d:80:30:70:81:
66:bf:73:ce:8c:77:d0:89:da:81:45:b7:f0:d9:4e:
c8:f5:dc:fd:5f:59:68:38:eb:7f:37:76:ff:20:a1:
2c:08:f6:6b:3a:88:89:0a:4f:dc:89:af:a9:15:87:
14:5b:80:f4:c2:c4:ec:28:d1:bd:dd:06:fa:0d:ac:
98:44:2e:e9:6c:97:57:45:88:3c:d7:47:c1:8b:08:
4c:fa:43:05:4b:c3:71:ea:77:d9:2f:f7:57:e1:20:
00:7e:e5:f6:a9:9d:6a:c4:b7:6c:0b:44:dd:60:f5:
4a:28:ca:5a:d4:88:b1:3f:4f:51:3e:66:83:45:e8:
e7:6a:f2:10:07:06:7d:bb:b8:b9:d8:be:67:c4:10:
e7:62:ee:28:de:8c:13:c7:ec:1c:e2:2b:18:cd:f6:
92:3b:fc:1e:43:2c:a5:b7:4b:55:64:fc:04:e3:07:
30:4c:31:28:2d:76:d9:fc:80:5a:86:35:6f:7b:b4:
fe:ad:61:a6:07:03:89:f6:46:0e:45:83:d8:da:1f:
7c:31:f4:fa:a2:a3:de:3f:cc:eb:a1:2d:f6:d8:4a:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:16:8A:10:25:BC:27:7E:1E:7F:AB:91:80:89:3E:6B:5C:E6:C6:EF
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8BaKECW8J34ef6uRgIk-a1zmxu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.238.0/24
185.244.107.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d8:20:92:c5:03:23:b4:b6:2b:d8:0e:76:b6:08:e4:6a:12:
d0:16:f0:7c:6e:13:11:1c:18:ac:ef:0a:3d:92:41:53:32:5e:
78:49:11:b0:a5:95:0a:0e:a9:99:c7:3c:b3:0f:59:a7:91:4d:
69:f0:a2:43:58:5a:47:af:68:1a:cd:ce:71:54:b8:8f:fb:fb:
7d:83:53:9f:9a:e5:43:27:7f:f2:a8:61:15:1b:a3:95:75:7d:
a3:6b:96:f3:a7:3b:7f:a5:91:5e:ee:a6:65:f4:d3:86:24:71:
e4:c5:b5:e2:7c:3a:62:15:cd:53:85:5d:a5:86:f8:ca:be:0c:
ee:c1:14:62:2c:1a:69:06:98:7b:0b:10:ee:de:29:dd:14:50:
24:a4:0a:ee:4c:0e:cb:c1:a2:f8:4c:15:8b:6e:66:90:3f:cd:
55:dd:9f:09:2f:0f:4c:3a:69:8e:84:34:e3:8b:af:56:8f:9d:
7f:4d:de:29:f6:a1:db:89:7b:f2:da:70:41:d8:6b:63:b7:4d:
3c:d5:9f:11:8c:09:bf:d5:18:81:ec:5e:8a:6e:94:66:88:c1:
23:af:81:02:21:e1:3d:2b:64:17:d9:c1:3e:46:af:b7:20:0e:
89:5b:48:9f:5c:9a:00:62:4b:62:a4:9c:3f:e2:59:5b:71:dc:
4c:a4:b1:77
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ70O2x67xhsJFh8d0PUfXHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNjIzMTEyNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDE2OGExMDI1YmMyNzdlMWU3ZmFiOTE4MDg5M2U2YjVjZTZjNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrhaoIR9xFZIuWkSFx9RBDaYQqBv
yzBVFvUcXnHhCv4CE/OdraB6PYAwcIFmv3POjHfQidqBRbfw2U7I9dz9X1loOOt/
N3b/IKEsCPZrOoiJCk/cia+pFYcUW4D0wsTsKNG93Qb6DayYRC7pbJdXRYg810fB
iwhM+kMFS8Nx6nfZL/dX4SAAfuX2qZ1qxLdsC0TdYPVKKMpa1IixP09RPmaDRejn
avIQBwZ9u7i52L5nxBDnYu4o3owTx+wc4isYzfaSO/weQyylt0tVZPwE4wcwTDEo
LXbZ/IBahjVve7T+rWGmBwOJ9kYORYPY2h98MfT6oqPeP8zroS322EqPAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPAWihAlvCd+Hn+rkYCJPmtc5sbvMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvOEJhS0VDVzhKMzRlZjZ1UmdJay1hMXpteHU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT27uAwQA
ufRrMA0GCSqGSIb3DQEBCwUAA4IBAQC42CCSxQMjtLYr2A52tgjkahLQFvB8bhMR
HBis7wo9kkFTMl54SRGwpZUKDqmZxzyzD1mnkU1p8KJDWFpHr2gazc5xVLiP+/t9
g1OfmuVDJ3/yqGEVG6OVdX2ja5bzpzt/pZFe7qZl9NOGJHHkxbXifDpiFc1ThV2l
hvjKvgzuwRRiLBppBph7CxDu3indFFAkpAruTA7LwaL4TBWLbmaQP81V3Z8JLw9M
OmmOhDTji69Wj51/Td4p9qHbiXvy2nBB2Gtjt0081Z8RjAm/1RiB7F6KbpRmiMEj
r4ECIeE9K2QX2cE+Rq+3IA6JW0ifXJoAYktipJw/4llbcdxMpLF3
-----END CERTIFICATE-----
Generated at Fri Jun 26 04:24:16 2026 by rpki-client