Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/A8pB-9bz15cQYivfjGrzOwMc7LY.roa
File: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (raw, json)
Hash identifier: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=
Subject key identifier: 03:CA:41:FB:D6:F3:D7:97:10:62:2B:DF:8C:6A:F3:3B:03:1C:EC:B6
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019CB39400227C5451B0A979CB75A6D75055
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/A8pB-9bz15cQYivfjGrzOwMc7LY.roa
Signing time: Tue 03 Mar 2026 12:02:26 +0000
ROA not before: Tue 03 Mar 2026 12:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9318
IP address blocks: 212.66.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:94:00:22:7c:54:51:b0:a9:79:cb:75:a6:d7:50:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Mar 3 12:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03ca41fbd6f3d79710622bdf8c6af33b031cecb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:ab:05:7d:e8:f7:4b:e4:70:a3:5b:22:c7:
34:5f:43:44:fe:90:ee:89:bc:4d:f0:e4:59:fc:df:
9d:43:1b:32:02:dd:ef:01:da:fa:b8:b8:f6:e4:93:
90:2e:b5:6a:88:4c:5b:35:bc:f0:ac:1d:b0:4e:2a:
10:2c:54:43:8b:6f:6d:17:44:a3:b8:77:41:5a:b5:
7a:8e:80:59:ca:98:e1:23:c7:07:a8:b4:0a:32:d4:
bd:a0:22:4a:48:e9:03:dd:bf:bf:19:2a:ed:63:4c:
9e:b2:c9:b5:0f:84:cd:2b:f9:37:f6:86:27:67:d8:
e3:ab:ec:f1:a4:67:d6:61:84:bf:84:96:c7:1f:ef:
67:a9:92:50:ca:d3:3a:2e:d5:3a:fc:cf:ed:1e:7b:
3f:1f:5b:ca:29:02:99:5f:38:59:28:da:99:6c:71:
1d:9e:85:b3:1e:98:80:76:43:43:18:3f:18:e1:c3:
3c:bc:9d:10:1b:a6:44:a8:17:fe:da:8b:77:e8:b3:
3b:cb:f7:25:2c:0c:3f:54:92:66:f5:01:ee:84:56:
9b:eb:87:56:9e:f4:87:0f:01:16:89:3f:2f:eb:24:
c2:b5:1d:4c:cf:85:c2:05:80:c3:4c:43:1f:b7:26:
ee:18:fb:a1:3d:59:5e:e2:54:3b:a8:75:91:e8:53:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CA:41:FB:D6:F3:D7:97:10:62:2B:DF:8C:6A:F3:3B:03:1C:EC:B6
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/A8pB-9bz15cQYivfjGrzOwMc7LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.53.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3e:0b:77:0f:7f:ae:52:db:a5:c0:c5:0e:a1:80:10:13:73:
9f:7c:9c:73:d1:be:fc:3a:7b:67:bd:8a:b1:f4:c9:8c:6a:f9:
34:89:dd:87:14:8e:22:f6:1e:44:ce:55:5e:cf:fe:a8:e6:3d:
4b:9a:a7:2d:44:99:cd:cc:d4:ca:67:36:80:2f:e4:68:11:a7:
6f:8e:ad:25:55:e3:1d:21:b4:61:07:f2:d9:3f:54:07:c0:18:
36:04:50:26:08:33:ff:cf:b2:53:14:79:92:1f:46:67:3d:42:
11:1d:1c:63:26:71:22:55:f7:1a:b7:8e:b5:04:ad:50:0c:4f:
d0:52:96:84:7c:ba:cb:38:09:84:41:c4:ac:39:02:e3:ac:4b:
43:10:c5:b9:a8:7e:15:cb:34:a9:32:8b:32:12:8b:99:bf:48:
d6:3e:71:e9:a9:36:8d:b1:0e:d9:c2:6d:94:6c:0b:22:72:65:
ae:59:23:30:fb:c0:32:17:4c:68:70:e2:5f:38:ea:24:13:55:
90:6a:8e:6e:41:13:4a:f8:c0:11:79:71:7b:65:6f:54:3c:6b:
21:cf:87:83:ab:18:fe:20:77:6c:12:07:e8:85:35:ed:f9:09:
30:38:af:33:e6:a6:e0:cc:d5:90:06:50:42:22:e1:68:7e:23:
39:64:27:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyzlAAifFRRsKl5y3Wm11BVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy
YzgxZDUwHhcNMjYwMzAzMTIwMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2NhNDFmYmQ2ZjNkNzk3MTA2MjJiZGY4YzZhZjMzYjAzMWNlY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr+rBX3o90vkcKNbIsc0X0NE/pDu
ibxN8ORZ/N+dQxsyAt3vAdr6uLj25JOQLrVqiExbNbzwrB2wTioQLFRDi29tF0Sj
uHdBWrV6joBZypjhI8cHqLQKMtS9oCJKSOkD3b+/GSrtY0yessm1D4TNK/k39oYn
Z9jjq+zxpGfWYYS/hJbHH+9nqZJQytM6LtU6/M/tHns/H1vKKQKZXzhZKNqZbHEd
noWzHpiAdkNDGD8Y4cM8vJ0QG6ZEqBf+2ot36LM7y/clLAw/VJJm9QHuhFab64dW
nvSHDwEWiT8v6yTCtR1Mz4XCBYDDTEMftybuGPuhPVle4lQ7qHWR6FPP5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPKQfvW89eXEGIr34xq8zsDHOy2MB8GA1UdIwQY
MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt
OWZlYmY4YzNlMzNmLzEvQThwQi05YnoxNWNRWWl2ZmpHcnpPd01jN0xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm
LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EI1MA0G
CSqGSIb3DQEBCwUAA4IBAQCZPgt3D3+uUtulwMUOoYAQE3OffJxz0b78OntnvYqx
9MmMavk0id2HFI4i9h5EzlVez/6o5j1LmqctRJnNzNTKZzaAL+RoEadvjq0lVeMd
IbRhB/LZP1QHwBg2BFAmCDP/z7JTFHmSH0ZnPUIRHRxjJnEiVfcat461BK1QDE/Q
UpaEfLrLOAmEQcSsOQLjrEtDEMW5qH4VyzSpMosyEouZv0jWPnHpqTaNsQ7Zwm2U
bAsicmWuWSMw+8AyF0xocOJfOOokE1WQao5uQRNK+MAReXF7ZW9UPGshz4eDqxj+
IHdsEgfohTXt+QkwOK8z5qbgzNWQBlBCIuFofiM5ZCdG
-----END CERTIFICATE-----
Generated at Sat Mar 21 12:01:40 2026 by rpki-client