Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8npED36F9mbChe0pEXHb6TSCjt8.roa
File: 8npED36F9mbChe0pEXHb6TSCjt8.roa (raw, json)
Hash identifier: 9THO8AyP8aLpQ0s1infZ7piSFkycp/X19vPabVVaNYc=
Subject key identifier: F2:7A:44:0F:7E:85:F6:66:C2:85:ED:29:11:71:DB:E9:34:82:8E:DF
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A0F8BDBEC8B7D90774A672983FBCF76331
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8npED36F9mbChe0pEXHb6TSCjt8.roa
Signing time: Thu 01 Oct 2026 18:32:59 +0000
ROA not before: Thu 01 Oct 2026 18:32:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394457
IP address blocks: 185.252.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:bd:be:c8:b7:d9:07:74:a6:72:98:3f:bc:f7:63:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 1 18:32:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f27a440f7e85f666c285ed291171dbe934828edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:e6:03:53:cd:27:00:b7:c2:c8:0c:5a:b6:
65:5c:a1:f1:ce:d3:35:63:c9:cd:d2:c3:5c:2b:0f:
a3:c5:5e:76:08:52:f0:50:cf:9e:34:55:1c:46:f3:
b8:ea:82:90:5b:7f:06:94:fe:7c:80:f1:b7:b7:2f:
03:93:99:41:cc:9a:dc:1c:e0:a0:7d:3b:8d:bc:08:
fc:ff:6d:12:56:6b:70:cf:04:5c:a5:74:bd:b4:fd:
4f:2b:61:aa:a0:27:ab:1d:6b:db:7a:8c:23:6e:48:
39:f1:74:11:e8:f0:06:f5:5c:46:67:4a:1c:7f:b5:
62:c8:e2:31:55:c1:e3:c6:7b:1c:ce:f5:0f:78:b4:
ef:dc:a2:32:db:06:5d:b8:45:69:77:f5:e3:a5:e6:
4f:d7:ad:6b:e5:b7:f4:6b:20:ac:0b:8a:a2:f5:68:
d6:09:38:5e:f5:80:07:99:32:0a:81:cf:ac:22:f9:
ac:d2:28:9a:d4:53:da:e8:aa:29:ea:71:5d:46:1c:
69:89:02:7c:2d:dc:bb:92:5f:00:b2:bd:8a:0c:b6:
f0:64:eb:4c:67:ea:4c:e8:ef:48:b3:7a:01:af:e7:
25:db:6d:19:8e:53:7c:5e:4b:ba:4a:97:aa:e2:da:
0b:f9:0a:24:a3:55:d7:a7:a6:d5:a7:4c:2a:95:2b:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7A:44:0F:7E:85:F6:66:C2:85:ED:29:11:71:DB:E9:34:82:8E:DF
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8npED36F9mbChe0pEXHb6TSCjt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.193.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7c:4b:7d:e7:47:32:8c:b9:9a:b3:6a:bc:88:37:0b:4c:a3:
f9:03:77:40:57:58:11:4f:6b:f0:3f:90:f3:ee:da:e1:cd:81:
71:c2:17:54:ee:26:4e:e1:e0:55:d2:fc:5d:f6:1e:34:79:84:
9a:f9:09:9f:16:29:67:0c:82:26:61:11:8e:78:20:68:f5:d3:
63:8e:d2:24:88:d5:ac:13:08:95:15:f8:69:d3:bf:7c:9f:5b:
2d:71:c0:6d:49:79:7a:27:b0:9e:84:0a:bb:79:21:d6:a4:2c:
63:92:c4:db:80:f5:20:5e:1c:e7:e1:50:e5:6d:3a:a3:7b:d1:
9c:12:fc:b9:82:cc:95:27:11:43:9b:15:b5:c6:0e:b9:d3:38:
91:38:2b:a8:ec:86:16:87:3f:f8:7e:22:be:5f:24:de:97:1b:
b0:46:43:82:7b:d7:13:f1:70:01:7f:d7:92:d1:dd:98:9f:7d:
07:0d:6d:db:5a:1d:63:b4:52:b4:b9:b1:af:32:1f:5c:39:60:
6f:f1:90:a4:e7:c2:03:8a:36:8a:99:f7:16:70:dc:7e:cc:a8:
9d:e1:00:b4:5b:ec:90:19:f6:fa:d2:62:a2:84:d0:39:07:11:
b9:bf:3e:96:f1:d5:fc:4a:04:84:05:4c:11:45:4e:8d:36:c5:
9a:b8:44:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD4vb7It9kHdKZymD+892MxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYxMDAxMTgzMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjdhNDQwZjdlODVmNjY2YzI4NWVkMjkxMTcxZGJlOTM0ODI4ZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9LmA1PNJwC3wsgMWrZlXKHxztM1
Y8nN0sNcKw+jxV52CFLwUM+eNFUcRvO46oKQW38GlP58gPG3ty8Dk5lBzJrcHOCg
fTuNvAj8/20SVmtwzwRcpXS9tP1PK2GqoCerHWvbeowjbkg58XQR6PAG9VxGZ0oc
f7ViyOIxVcHjxnsczvUPeLTv3KIy2wZduEVpd/XjpeZP161r5bf0ayCsC4qi9WjW
CThe9YAHmTIKgc+sIvms0iia1FPa6Kop6nFdRhxpiQJ8Ldy7kl8Asr2KDLbwZOtM
Z+pM6O9Is3oBr+cl220ZjlN8Xku6Speq4toL+Qoko1XXp6bVp0wqlSuSiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJ6RA9+hfZmwoXtKRFx2+k0go7fMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvOG5wRUQzNkY5bWJDaGUwcEVYSGI2VFNDanQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufzBMA0G
CSqGSIb3DQEBCwUAA4IBAQAjfEt950cyjLmas2q8iDcLTKP5A3dAV1gRT2vwP5Dz
7trhzYFxwhdU7iZO4eBV0vxd9h40eYSa+QmfFilnDIImYRGOeCBo9dNjjtIkiNWs
EwiVFfhp0798n1stccBtSXl6J7CehAq7eSHWpCxjksTbgPUgXhzn4VDlbTqje9Gc
Evy5gsyVJxFDmxW1xg650ziROCuo7IYWhz/4fiK+XyTelxuwRkOCe9cT8XABf9eS
0d2Yn30HDW3bWh1jtFK0ubGvMh9cOWBv8ZCk58IDijaKmfcWcNx+zKid4QC0W+yQ
Gfb60mKihNA5BxG5vz6W8dX8SgSEBUwRRU6NNsWauESc
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:56 2026 by rpki-client