Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8IF18_kePMiw9STE8xSM83DiLxs.roa
File: 8IF18_kePMiw9STE8xSM83DiLxs.roa (raw, json)
Hash identifier: l/aghe8iiBbCRUqhxU77qVjtoNN7oa/e4veiuWOJ3Os=
Subject key identifier: F0:81:75:F3:F9:1E:3C:C8:B0:F5:24:C4:F3:14:8C:F3:70:E2:2F:1B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A16613F962DF29FA17C33C687649152FA1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8IF18_kePMiw9STE8xSM83DiLxs.roa
Signing time: Fri 23 Oct 2026 00:05:47 +0000
ROA not before: Fri 23 Oct 2026 00:05:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 62.192.110.0/24 maxlen: 24
77.67.92.0/24 maxlen: 24
194.77.3.0/24 maxlen: 24
194.77.78.0/24 maxlen: 24
194.77.219.0/24 maxlen: 24
195.162.248.0/24 maxlen: 24
212.189.113.0/24 maxlen: 24
212.222.171.0/24 maxlen: 24
217.8.194.0/24 maxlen: 24
217.8.197.0/24 maxlen: 24
217.8.199.0/24 maxlen: 24
217.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 13:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:13:f9:62:df:29:fa:17:c3:3c:68:76:49:15:2f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 23 00:05:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f08175f3f91e3cc8b0f524c4f3148cf370e22f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:50:ba:57:45:6d:34:50:c9:b1:fe:2e:6d:
71:5c:29:38:7f:bd:69:6e:b6:16:91:e0:24:40:ff:
5f:b6:f1:d5:41:16:c1:a5:e8:e0:73:e4:25:c0:87:
7f:f7:1d:cc:25:60:ef:cb:f7:50:d7:f9:39:0f:d7:
98:59:f1:9e:c3:6f:32:ca:dd:b5:1c:54:da:bb:73:
f1:ab:a2:e7:e2:cb:e4:33:96:67:e0:5d:c5:2b:83:
b0:35:7a:ec:98:0d:ff:24:2c:24:cd:b0:1c:df:da:
c2:a1:82:2d:31:44:a1:9c:4d:6f:4d:a0:03:bd:ba:
7b:48:10:3c:db:09:76:a6:65:c4:e5:10:9d:76:44:
34:cc:0b:d4:98:d7:5b:12:3c:fa:96:31:63:1c:fc:
8d:43:30:7c:64:e2:49:d0:a2:92:76:ef:f8:79:d0:
7c:55:53:60:29:73:3d:92:20:d7:7c:8d:20:8a:54:
6a:2d:00:d8:ed:bf:4a:9d:a4:74:64:e4:12:a0:ad:
0e:0f:67:8b:db:2f:d6:30:8b:0e:24:5e:e7:22:cc:
f7:8f:c2:69:1b:04:59:84:e3:1e:06:da:8f:4c:2d:
61:62:83:bb:75:b6:bf:8c:42:69:9a:20:ff:55:89:
05:f0:8d:3b:bf:9a:1c:9e:5c:94:e8:1a:7d:0b:3d:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:75:F3:F9:1E:3C:C8:B0:F5:24:C4:F3:14:8C:F3:70:E2:2F:1B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8IF18_kePMiw9STE8xSM83DiLxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.110.0/24
77.67.92.0/24
194.77.3.0/24
194.77.78.0/24
194.77.219.0/24
195.162.248.0/24
212.189.113.0/24
212.222.171.0/24
217.8.194.0/24
217.8.197.0/24
217.8.199.0/24
217.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:30:96:40:b3:eb:15:c3:46:3a:df:86:5e:a1:67:44:de:22:
e4:bb:d8:ae:f3:00:ad:47:68:0b:be:87:e3:70:96:8b:96:df:
6e:ae:15:5b:64:56:40:5f:4e:06:c1:07:d5:d5:e2:b3:85:e8:
45:bf:1d:c7:b2:48:f5:be:5f:72:1f:9b:ce:34:fd:69:d0:b2:
20:c8:58:f5:ec:e7:d1:af:28:47:e9:76:89:10:ac:24:66:70:
03:99:c8:a7:3e:6e:5f:21:2a:21:9c:d0:2d:ae:ed:e7:11:50:
57:4b:83:52:1e:f8:4c:7a:19:90:0d:77:a2:24:3b:78:b9:24:
cd:8a:2c:39:37:e0:66:d6:98:02:bd:11:e8:54:81:ea:54:d0:
6b:f7:84:31:2f:21:f0:ed:dc:b2:88:0f:e1:51:d6:35:da:b8:
5e:4b:5c:f7:5b:90:92:b6:d0:3d:5b:bc:98:de:d5:cc:e0:d7:
fa:32:4c:3f:76:81:29:44:86:81:40:13:75:a4:49:54:21:88:
7b:6a:d8:05:56:27:15:2f:91:96:dc:e5:8b:c1:48:66:9b:16:
82:10:15:a1:65:df:00:d5:c8:3f:d6:11:b5:0a:e2:26:2f:d1:
73:9c:e0:30:7d:55:6a:66:eb:c7:2c:bb:3f:0b:6b:aa:d4:2f:
e2:0d:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:06:07 2026 by rpki-client