Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8uCWMBaWAfKrOPaxucU0CJPP8RM.roa
File: 8uCWMBaWAfKrOPaxucU0CJPP8RM.roa (raw, json)
Hash identifier: 8TbK/6lzE8XJo6X13VzuN3zdyGNywLk9SzbZ334PGyI=
Subject key identifier: F2:E0:96:30:16:96:01:F2:AB:38:F6:B1:B9:C5:34:08:93:CF:F1:13
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019FD1118A0009F8C26418D9DA2428A4E0BB
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8uCWMBaWAfKrOPaxucU0CJPP8RM.roa
Signing time: Wed 05 Aug 2026 08:36:55 +0000
ROA not before: Wed 05 Aug 2026 08:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149606
IP address blocks: 189.13.162.0/24 maxlen: 24
189.13.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:11:8a:00:09:f8:c2:64:18:d9:da:24:28:a4:e0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Aug 5 08:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2e09630169601f2ab38f6b1b9c5340893cff113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:ec:8a:d8:1e:25:73:94:e3:1c:ce:cc:f8:
e2:0c:b6:49:17:8e:12:dd:6f:ca:dc:22:e4:fd:e6:
30:58:6f:7b:11:4c:43:60:1a:11:f2:22:9f:2c:2a:
90:93:13:88:28:52:6e:dd:81:91:be:9c:89:bf:ce:
82:7c:d4:93:50:d8:26:06:53:a8:d0:5c:90:db:ae:
9a:ed:a1:3e:41:10:e9:7a:1a:ab:52:42:ce:a4:28:
51:d8:e4:b9:03:f1:83:62:3d:5c:00:ed:93:6b:28:
1f:55:3d:43:25:7e:07:58:83:7f:0b:13:c3:60:ae:
44:ce:38:de:08:2e:cf:73:b4:dc:5c:3c:eb:ed:83:
2b:ec:97:10:c5:42:21:52:d2:78:48:71:27:a6:43:
7c:d4:37:91:43:ea:6e:f1:58:9d:5d:31:2e:a9:41:
22:4c:4a:31:ad:63:99:2d:a2:3e:d1:a1:4a:f9:11:
af:83:9c:e8:f2:ae:60:08:a7:e9:59:b2:3e:32:fc:
9f:c0:a2:51:6e:2d:63:2f:cd:b3:4d:5f:6f:55:19:
68:2c:b1:92:ce:26:0f:b2:de:5d:71:0c:bc:35:a4:
ad:df:67:ea:ed:45:88:9b:a6:ab:1a:cc:5f:57:b6:
df:43:5d:84:1a:61:04:ca:48:25:e9:7b:71:91:ad:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:96:30:16:96:01:F2:AB:38:F6:B1:B9:C5:34:08:93:CF:F1:13
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8uCWMBaWAfKrOPaxucU0CJPP8RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.162.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:de:e8:30:92:8c:c4:37:85:f5:d0:38:14:2f:fa:95:0b:ea:
b5:d2:f2:57:94:b4:3f:48:c4:fe:6a:eb:ad:56:99:08:d3:f1:
dd:d4:1a:41:16:e6:37:f7:04:b1:30:38:49:ce:b2:24:f2:6b:
2f:6d:42:cc:6c:e1:74:b6:9a:e7:d0:9d:30:f1:10:43:5f:8c:
1d:3d:0f:dc:4f:14:89:7d:5e:f4:2c:df:d0:81:a8:5e:a7:ee:
f9:74:ac:6c:c5:37:fc:59:14:df:c5:96:2b:0d:00:7e:a4:30:
c6:6d:3e:f2:c5:99:91:67:1c:5c:a6:2a:86:21:5a:79:83:f2:
25:0d:07:ab:0e:85:c9:f6:93:39:6f:0e:f6:5e:ca:15:e5:e9:
7a:00:1c:d3:1b:b7:ff:b9:07:a0:37:b8:20:b4:ae:06:0d:97:
39:0f:4c:79:a5:55:ab:ca:2f:4c:68:cb:e3:4c:3f:56:a1:d5:
06:14:86:d6:9c:33:bf:34:15:3c:97:9d:e4:37:bb:bd:e5:72:
55:3d:6a:17:a7:ea:e9:c6:eb:0e:2d:68:23:8c:9d:fc:76:9d:
13:6d:0e:53:1e:f1:13:f6:48:7a:5a:79:65:e6:9b:01:b9:67:
0f:20:04:4f:d9:92:a6:94:65:5a:a1:87:41:df:cb:b9:b5:74:
94:ba:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:03:18 2026 by rpki-client