Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8vDOKUXeXrXfB7FIVIEsoexlc_o.roa
File: 8vDOKUXeXrXfB7FIVIEsoexlc_o.roa (raw, json)
Hash identifier: KSylCaUKpGQXa3joZ6jUjIIRkIXsAz2dCj4F/Ps3lIU=
Subject key identifier: F2:F0:CE:29:45:DE:5E:B5:DF:07:B1:48:54:81:2C:A1:EC:65:73:FA
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019E8D270C5191CA3E68F6AC9338ACB55E71
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8vDOKUXeXrXfB7FIVIEsoexlc_o.roa
Signing time: Wed 03 Jun 2026 11:03:26 +0000
ROA not before: Wed 03 Jun 2026 11:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213137
IP address blocks: 189.13.150.0/24 maxlen: 24
189.13.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:27:0c:51:91:ca:3e:68:f6:ac:93:38:ac:b5:5e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Jun 3 11:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2f0ce2945de5eb5df07b14854812ca1ec6573fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:57:77:56:10:cf:ed:f4:35:33:87:04:2d:
aa:b1:94:92:04:e7:66:e0:2c:da:1b:a6:ff:ef:5e:
ff:01:25:09:d5:c6:ca:7b:1d:d7:75:e4:71:1b:1f:
4e:2c:2a:3a:aa:a7:9c:8a:73:9f:39:2e:2c:28:e2:
f7:c2:a6:02:75:9e:15:98:a8:96:ed:0e:0c:24:1f:
17:f9:13:4e:e7:70:55:4b:70:3a:44:65:82:a3:2c:
ad:70:50:f4:b3:11:c5:5b:06:c4:50:90:9e:3d:12:
8a:6d:36:28:75:61:d0:cc:06:60:ab:35:16:8b:48:
cf:4c:09:d3:04:cf:e6:21:9c:9b:b6:16:cb:6c:6d:
24:ad:55:c9:4f:57:5d:5e:b8:81:ca:2d:d2:ad:9e:
fa:74:d4:77:c0:bf:36:7a:f3:94:84:32:7e:05:b5:
fc:71:f4:d3:7b:29:ae:47:31:fc:ae:45:ad:13:d7:
b1:24:b6:16:a4:2f:fa:72:de:a2:c2:fa:0d:de:db:
79:d8:5d:a5:1c:fb:3b:bf:cc:9e:ef:e2:9b:6a:3e:
ae:95:ac:a6:d0:3c:7d:e4:f1:22:8a:74:49:0c:d2:
a9:8c:51:ab:a7:ad:34:08:4e:4f:7f:32:60:88:e8:
be:75:22:8c:36:c8:91:bf:c3:ee:56:97:4d:eb:4f:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F0:CE:29:45:DE:5E:B5:DF:07:B1:48:54:81:2C:A1:EC:65:73:FA
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8vDOKUXeXrXfB7FIVIEsoexlc_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.150.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:f8:64:46:2e:a1:d7:22:c3:fd:e8:d5:30:ce:7b:f2:6e:1a:
29:97:94:8e:ca:ce:fa:aa:8a:33:12:d2:c5:69:b4:1a:f4:31:
11:33:28:af:bf:11:67:5c:97:e4:e3:1a:b4:ba:73:45:c6:5c:
bd:ae:ba:a2:68:d6:4e:74:d6:f7:29:71:aa:5f:da:78:2c:6d:
cc:02:03:14:14:26:6b:6a:e6:ae:aa:83:aa:ef:7d:88:d1:c0:
0d:33:9c:5e:ed:03:b6:9f:28:cd:e9:32:87:0d:7f:17:93:43:
9c:84:1f:f9:7d:11:64:f1:6e:a6:a8:2e:d1:63:a5:66:6e:4e:
49:bb:71:ae:36:f5:01:32:7d:ef:ac:ce:8c:e3:8c:ac:0c:42:
e8:87:ed:7f:3d:db:ab:6e:ed:43:c9:92:27:db:c4:3a:91:5d:
36:6e:73:a1:7d:5a:90:1b:b7:1d:d0:ef:6f:a4:24:c6:54:02:
5a:15:6b:7a:4f:b8:02:ff:5b:3f:2d:07:a5:dc:e5:ad:a6:9e:
86:c1:d6:05:c6:e4:b4:94:0b:4a:da:8c:41:af:3d:22:52:3c:
ff:cd:f8:d6:4d:07:15:fc:4e:53:76:4a:b0:0f:31:ae:3b:55:
71:94:2f:e1:c4:3b:cd:cb:4b:d5:6e:0c:8a:ff:68:99:4b:8f:
d6:1a:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:38 2026 by rpki-client