Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/8ulFZTCMH-8Z2V1MvZjo68TuuU8.roa
File: 8ulFZTCMH-8Z2V1MvZjo68TuuU8.roa (raw, json)
Hash identifier: rLmDnBUEAsApTEhkzWGAMBfFfEDUO8E2ZWcjmGGupPE=
Subject key identifier: F2:E9:45:65:30:8C:1F:EF:19:D9:5D:4C:BD:98:E8:EB:C4:EE:B9:4F
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A086FEE84916D87ABEB284C7991EDB6F1A
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/8ulFZTCMH-8Z2V1MvZjo68TuuU8.roa
Signing time: Wed 09 Sep 2026 16:27:27 +0000
ROA not before: Wed 09 Sep 2026 16:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 109.64.136.0/24 maxlen: 24
109.66.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:fe:e8:49:16:d8:7a:be:b2:84:c7:99:1e:db:6f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 9 16:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2e94565308c1fef19d95d4cbd98e8ebc4eeb94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:f1:3d:49:b7:93:b8:fa:cd:97:35:de:64:
bd:d0:58:1a:3e:06:b6:ef:32:a7:51:8d:eb:63:56:
98:4a:05:fe:ea:d1:e1:81:05:8d:ed:d6:9b:7d:13:
39:4e:1d:83:8a:e9:2e:a4:ba:45:00:70:0d:cf:ea:
c9:ab:55:eb:c1:33:72:1b:c5:8f:30:f5:ee:c5:2a:
4e:a1:f2:11:2b:7b:9a:21:ec:58:7f:e5:7b:5f:43:
c1:01:ea:11:a4:f5:10:b4:26:fa:65:cd:36:b8:1a:
c5:20:2b:32:80:e8:56:dc:e8:8d:8e:f0:a5:44:9d:
9b:3f:d3:2d:b2:b0:40:89:88:6b:17:da:a7:18:20:
e7:59:1e:91:13:72:ae:2e:94:45:6a:46:08:cc:b7:
e8:8a:fd:bf:67:5d:c0:6c:b7:dd:6e:e4:13:9c:17:
5a:36:94:33:3f:78:47:a0:29:4b:29:ad:36:04:53:
7e:bb:b3:7d:0d:be:5e:61:1c:68:7e:4f:47:34:ca:
72:96:27:2e:40:79:fe:8c:61:a8:38:9f:e0:9a:4d:
bd:6c:4b:a5:fd:3f:34:67:e5:49:65:60:a4:4a:ad:
ba:e4:9e:6a:2a:d0:49:5b:80:e4:a1:bc:73:36:c8:
11:44:0f:57:27:a1:b7:1e:79:4b:78:c6:6f:b0:95:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E9:45:65:30:8C:1F:EF:19:D9:5D:4C:BD:98:E8:EB:C4:EE:B9:4F
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/8ulFZTCMH-8Z2V1MvZjo68TuuU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.136.0/24
109.66.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f7:f2:04:a6:a6:69:4d:4c:f2:00:8d:c0:3b:2f:a3:03:ba:
ec:ec:ce:4b:02:6c:4d:5d:af:aa:62:e6:24:5e:27:fd:91:27:
75:be:c9:b9:6d:53:c1:22:27:e0:e4:32:e5:8c:76:ba:b4:42:
0f:26:4c:f1:b2:53:99:d7:99:9e:6a:07:48:14:42:ab:56:04:
fd:32:1f:cb:35:db:95:4e:c8:40:4d:1c:c2:8f:d8:12:67:a9:
9b:ab:cd:46:a3:bf:38:fb:36:85:d1:59:4e:07:04:c3:73:34:
d3:46:c6:af:ac:02:f7:72:cc:62:84:51:bb:71:b1:50:24:7f:
ed:21:ba:ed:aa:57:81:b9:11:e2:05:79:d4:59:5f:e2:e5:5f:
bc:7a:92:c4:29:28:50:70:11:cc:24:28:ee:9a:73:62:b5:ad:
ad:92:2f:79:32:c3:9b:39:7e:86:71:a3:56:f1:77:2c:47:6b:
55:00:f5:92:17:68:43:e0:57:9a:45:bd:c9:4c:ba:b6:79:f1:
64:97:9c:91:51:d4:73:88:19:26:aa:74:95:5e:93:64:3a:c9:
87:8b:a5:8e:08:4e:50:77:61:8d:60:cb:ec:be:60:f8:7e:5a:
8c:93:80:f5:b7:10:cf:66:9c:e2:2b:94:c7:97:b2:d8:6e:1a:
e6:7f:de:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCG/uhJFth6vrKEx5ke228aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTA5MTYyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmU5NDU2NTMwOGMxZmVmMTlkOTVkNGNiZDk4ZThlYmM0ZWViOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqknxPUm3k7j6zZc13mS90FgaPga2
7zKnUY3rY1aYSgX+6tHhgQWN7dabfRM5Th2DiukupLpFAHANz+rJq1XrwTNyG8WP
MPXuxSpOofIRK3uaIexYf+V7X0PBAeoRpPUQtCb6Zc02uBrFICsygOhW3OiNjvCl
RJ2bP9MtsrBAiYhrF9qnGCDnWR6RE3KuLpRFakYIzLfoiv2/Z13AbLfdbuQTnBda
NpQzP3hHoClLKa02BFN+u7N9Db5eYRxofk9HNMpylicuQHn+jGGoOJ/gmk29bEul
/T80Z+VJZWCkSq265J5qKtBJW4DkobxzNsgRRA9XJ6G3HnlLeMZvsJV9EQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPLpRWUwjB/vGdldTL2Y6OvE7rlPMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvOHVsRlpUQ01ILThaMlYxTXZaam82OFR1dVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbUCIAwQA
bULQMA0GCSqGSIb3DQEBCwUAA4IBAQA99/IEpqZpTUzyAI3AOy+jA7rs7M5LAmxN
Xa+qYuYkXif9kSd1vsm5bVPBIifg5DLljHa6tEIPJkzxslOZ15meagdIFEKrVgT9
Mh/LNduVTshATRzCj9gSZ6mbq81Go784+zaF0VlOBwTDczTTRsavrAL3csxihFG7
cbFQJH/tIbrtqleBuRHiBXnUWV/i5V+8epLEKShQcBHMJCjumnNita2tki95MsOb
OX6GcaNW8XcsR2tVAPWSF2hD4FeaRb3JTLq2efFkl5yRUdRziBkmqnSVXpNkOsmH
i6WOCE5Qd2GNYMvsvmD4flqMk4D1txDPZpziK5THl7LYbhrmf97M
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:23 2026 by rpki-client