Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/8dtoZcVA82_bFoICfbYGeSr6QLE.roa
File: 8dtoZcVA82_bFoICfbYGeSr6QLE.roa (raw, json)
Hash identifier: zj9vEtiqk32dRZWAG047WGx6N1C5sZIlxGfiVzIU5cA=
Subject key identifier: F1:DB:68:65:C5:40:F3:6F:DB:16:82:02:7D:B6:06:79:2A:FA:40:B1
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A0F1F8A7378B4A23CE089A2E8D3349DF71
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/8dtoZcVA82_bFoICfbYGeSr6QLE.roa
Signing time: Wed 30 Sep 2026 10:59:59 +0000
ROA not before: Wed 30 Sep 2026 10:59:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 185.7.241.0/24 maxlen: 24
185.7.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:f8:a7:37:8b:4a:23:ce:08:9a:2e:8d:33:49:df:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Sep 30 10:59:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1db6865c540f36fdb1682027db606792afa40b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:9d:ae:95:d7:39:b0:fb:1c:39:b5:17:25:
28:1d:d9:c3:30:b1:d8:5b:b4:c4:8a:52:35:11:38:
36:c3:3f:48:00:53:0f:28:64:d4:50:ea:c9:12:3e:
33:ee:dd:18:a8:2c:c1:73:43:2f:15:0a:7a:4d:0d:
4e:9c:5f:70:bf:81:a9:d2:59:0e:be:17:de:69:61:
c7:9c:0a:60:52:9c:63:20:3c:99:13:06:c4:1d:ed:
44:e6:5a:56:37:ea:5b:f1:a1:bf:df:51:23:7e:94:
c9:b9:4f:c5:91:28:65:17:53:fd:a4:6e:b5:8f:02:
a8:24:cb:c5:e1:76:77:57:a1:22:90:b6:f4:95:93:
ec:80:70:df:12:cb:9d:8f:52:96:2a:19:bb:f0:73:
de:7d:81:a2:3c:e3:df:4c:41:4c:92:03:40:bb:82:
8e:fd:e1:b4:3d:86:b9:56:04:3e:66:ea:8f:90:0a:
08:1d:c1:d1:83:c9:b7:4b:58:09:4d:97:9d:64:1e:
aa:11:9f:e5:6a:13:d7:4e:c8:de:ee:f6:a3:2b:9e:
88:ac:c2:4a:8a:7f:e1:ce:fc:b5:71:c0:30:95:24:
a2:79:16:87:61:fd:c8:a6:c3:b4:33:89:5c:25:e3:
e5:ce:ea:54:91:c0:38:59:64:d9:2e:ef:bf:59:bd:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:68:65:C5:40:F3:6F:DB:16:82:02:7D:B6:06:79:2A:FA:40:B1
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/8dtoZcVA82_bFoICfbYGeSr6QLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.241.0-185.7.242.255
Signature Algorithm: sha256WithRSAEncryption
1c:43:1a:29:55:ff:65:d0:98:ce:5f:c7:a1:e9:85:52:b4:5b:
54:b8:c9:14:97:b9:15:88:ba:50:36:c0:d4:d7:b0:77:f1:eb:
a4:d8:09:e2:2a:bf:ec:72:6b:4f:8b:24:ef:80:d1:1f:92:1f:
ba:97:53:2d:0c:9e:49:63:8e:03:2b:40:8e:8f:04:84:37:4a:
7f:0a:91:15:4c:76:83:ce:a8:d5:a9:5a:2b:6b:21:4b:2a:60:
12:32:52:13:3c:b7:82:c3:12:31:36:72:da:fb:59:4d:ee:60:
33:94:26:df:cd:48:7c:12:b8:38:17:7d:a6:ba:72:cf:e6:4b:
57:0d:00:dc:ed:f0:11:bd:08:a2:14:7c:cb:56:f5:20:cc:bb:
8e:8d:58:f0:c6:a6:9b:33:e8:3f:25:69:71:d7:12:5e:10:1e:
4d:df:50:ec:f1:d4:dc:e5:ce:45:64:a3:ea:7a:47:d8:09:78:
18:e4:0c:7b:b5:fd:a6:81:5f:48:3b:5b:e4:26:91:1b:f0:df:
32:1d:e5:bf:8a:32:49:fe:eb:44:62:e4:ea:25:1f:c8:c5:c5:
37:2b:b0:42:9f:73:37:bd:0e:ab:a3:e4:7f:1a:2e:0b:73:7e:
15:e1:1a:65:ac:9d:65:d4:2a:ee:8b:23:43:e1:27:d4:11:54:
1b:14:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:39:52 2026 by rpki-client