Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/8bHzMmkjwt_yLAGYCvMNqkW2FzA.roa
File: 8bHzMmkjwt_yLAGYCvMNqkW2FzA.roa (raw, json)
Hash identifier: 8QaTUHJyXu6B1zsCrAVs6lorOrcroP37WqlcGmictGo=
Subject key identifier: F1:B1:F3:32:69:23:C2:DF:F2:2C:01:98:0A:F3:0D:AA:45:B6:17:30
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F23687E22CD6A99996744F66F3634D1FE
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/8bHzMmkjwt_yLAGYCvMNqkW2FzA.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214743
IP address blocks: 45.91.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7e:22:cd:6a:99:99:67:44:f6:6f:36:34:d1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1b1f3326923c2dff22c01980af30daa45b61730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:00:e7:79:ff:89:5f:5a:ec:d4:29:98:40:
e8:0c:2c:a8:40:49:ac:63:27:c4:78:95:e3:41:68:
78:f5:d1:bc:30:77:12:d6:6d:47:62:38:06:ae:9f:
4a:37:88:bc:a6:be:ab:4c:4f:6e:48:fd:29:1c:2e:
6f:e8:09:e0:6b:16:13:de:1c:11:be:fb:c9:19:92:
f0:59:cd:00:ed:10:ff:2c:7d:d2:ce:a2:19:1f:ec:
ab:97:fe:43:25:6b:0d:82:ae:11:a4:b7:f3:36:13:
f4:cf:b9:40:fa:b8:26:54:ca:1a:04:ba:d5:90:a5:
5c:d9:00:58:3b:e9:6f:73:2d:af:1f:36:ec:75:58:
77:45:9f:8c:b5:1b:8f:6b:d2:95:26:57:30:09:35:
f2:3a:46:7f:06:50:29:cf:f3:d0:cd:07:51:56:4a:
84:9f:3f:66:60:a1:c4:4b:65:02:22:2c:3e:b7:fc:
cb:48:6e:9b:ca:22:58:0b:79:0b:76:b4:f5:1f:9c:
34:48:00:3c:b9:58:0c:69:60:cc:3e:e2:c1:7f:09:
3f:a0:b1:05:55:e1:b1:11:9e:1d:b7:e5:a5:62:52:
7f:14:9e:76:86:c4:34:4c:40:ea:65:40:8f:75:40:
f7:65:59:4e:a6:a5:8d:fe:b5:19:6c:57:36:57:82:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:F3:32:69:23:C2:DF:F2:2C:01:98:0A:F3:0D:AA:45:B6:17:30
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/8bHzMmkjwt_yLAGYCvMNqkW2FzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.224.0/24
Signature Algorithm: sha256WithRSAEncryption
16:bd:32:f9:71:54:04:eb:00:d5:ba:19:c4:97:80:f5:45:cb:
b8:2d:43:b2:32:6d:43:5f:4c:76:94:07:a0:a5:7e:f4:b5:53:
24:3a:e9:79:ad:92:2e:00:a8:55:20:e8:85:7c:3f:be:81:49:
2f:ac:eb:31:a4:fb:7d:59:23:a4:73:95:9c:b9:a7:f4:d4:48:
4b:61:b7:c6:51:c3:6d:e6:0f:00:65:3b:91:ac:a8:bd:93:5c:
53:65:cb:8b:ff:b3:c1:86:52:67:49:8f:eb:f5:b5:80:f1:ad:
d2:41:0d:4d:c3:96:ce:72:03:dc:54:9c:af:d1:3f:48:1d:0c:
59:43:be:ca:3d:5b:08:f7:ca:23:a6:b3:2f:43:47:85:08:9e:
25:1f:4f:a0:dd:70:04:16:dd:2a:ae:e2:28:e0:1b:33:e5:b9:
e5:c6:90:52:88:d6:34:00:5b:f5:95:eb:91:35:e4:7e:1f:22:
87:06:40:4d:a5:d3:f3:89:78:42:58:98:63:05:dd:06:b7:f6:
7b:81:48:af:da:28:f9:10:bd:ab:39:50:97:92:7d:1d:ab:18:
e7:ae:03:26:e2:8f:1c:11:74:f6:64:15:34:cc:aa:d3:16:0a:
97:21:52:41:67:44:8d:ff:bc:db:7a:42:dc:00:2a:bb:3d:eb:
fe:56:f2:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaH4izWqZmWdE9m82NNH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDQ1NmUxMWI3N2JmMmU0ODIwZGZiNjk1NDFkNGJlMGVh
OTRlN2MwHhcNMjYwNzAyMTUxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWIxZjMzMjY5MjNjMmRmZjIyYzAxOTgwYWYzMGRhYTQ1YjYxNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RoA53n/iV9a7NQpmEDoDCyoQEms
YyfEeJXjQWh49dG8MHcS1m1HYjgGrp9KN4i8pr6rTE9uSP0pHC5v6AngaxYT3hwR
vvvJGZLwWc0A7RD/LH3SzqIZH+yrl/5DJWsNgq4RpLfzNhP0z7lA+rgmVMoaBLrV
kKVc2QBYO+lvcy2vHzbsdVh3RZ+MtRuPa9KVJlcwCTXyOkZ/BlApz/PQzQdRVkqE
nz9mYKHES2UCIiw+t/zLSG6byiJYC3kLdrT1H5w0SAA8uVgMaWDMPuLBfwk/oLEF
VeGxEZ4dt+WlYlJ/FJ52hsQ0TEDqZUCPdUD3ZVlOpqWN/rUZbFc2V4KJVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGx8zJpI8Lf8iwBmArzDapFthcwMB8GA1UdIwQY
MBaAFNNEVuEbd78uSCDftpVB1L4OqU58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvOGJIek1ta2p3dF95TEFHWUN2TU5xa1cyRnpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVvgMA0G
CSqGSIb3DQEBCwUAA4IBAQAWvTL5cVQE6wDVuhnEl4D1Rcu4LUOyMm1DX0x2lAeg
pX70tVMkOul5rZIuAKhVIOiFfD++gUkvrOsxpPt9WSOkc5Wcuaf01EhLYbfGUcNt
5g8AZTuRrKi9k1xTZcuL/7PBhlJnSY/r9bWA8a3SQQ1Nw5bOcgPcVJyv0T9IHQxZ
Q77KPVsI98ojprMvQ0eFCJ4lH0+g3XAEFt0qruIo4Bsz5bnlxpBSiNY0AFv1leuR
NeR+HyKHBkBNpdPziXhCWJhjBd0Gt/Z7gUiv2ij5EL2rOVCXkn0dqxjnrgMm4o8c
EXT2ZBU0zKrTFgqXIVJBZ0SN/7zbekLcACq7Pev+VvIU
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:46:21 2026 by rpki-client