Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/8ZjOj2Ya7ps8YVL2ZTnQLzDI70o.roa
File: 8ZjOj2Ya7ps8YVL2ZTnQLzDI70o.roa (raw, json)
Hash identifier: BywNY5D55rqEeDnxi/NsedL6zHNsCJ3K+cQHaWLKACw=
Subject key identifier: F1:98:CE:8F:66:1A:EE:9B:3C:61:52:F6:65:39:D0:2F:30:C8:EF:4A
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019F1D3CFD4C14B90DAD63A39441AAB04EF9
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/8ZjOj2Ya7ps8YVL2ZTnQLzDI70o.roa
Signing time: Wed 01 Jul 2026 10:32:44 +0000
ROA not before: Wed 01 Jul 2026 10:32:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 84.232.29.0/24 maxlen: 24
84.236.247.0/24 maxlen: 24
89.45.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:3c:fd:4c:14:b9:0d:ad:63:a3:94:41:aa:b0:4e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jul 1 10:32:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f198ce8f661aee9b3c6152f66539d02f30c8ef4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:08:34:23:84:f1:78:fd:74:9b:24:fc:1b:
e4:8a:bb:5e:ac:ef:c0:ac:c6:62:e1:d4:60:05:92:
b6:7e:e3:74:be:af:69:db:62:04:f8:63:a0:68:5a:
1a:0a:cb:0f:5e:52:18:6d:67:72:0e:9e:53:41:0d:
23:ce:c6:ef:c8:0d:32:8c:22:c1:1e:d6:96:3c:40:
eb:0f:d2:49:6c:5e:7c:1b:73:29:7f:ae:de:30:f5:
12:3f:50:0c:ea:cf:cf:5b:47:08:64:75:2a:b5:20:
f6:e5:dd:9a:5e:85:87:23:30:40:38:d7:bc:01:6d:
22:cb:95:45:49:48:da:2a:c2:40:97:e9:0d:b7:8d:
0f:fd:b9:08:d3:c0:da:4c:7e:86:7b:30:16:0a:c5:
e3:24:18:79:f8:cf:ed:d6:d6:69:a7:7d:3f:b2:a4:
fc:2f:f9:cb:18:14:d9:90:37:09:76:65:06:c2:1a:
fd:0a:d2:58:5e:51:1c:5b:3e:80:90:12:a1:22:87:
38:75:d5:63:55:06:10:21:f7:2c:c6:32:7a:af:47:
70:41:37:68:67:e3:d0:1a:1c:1e:d1:5c:9c:3d:62:
fe:98:c9:d8:34:c1:9f:0b:c0:24:a5:de:16:b9:b9:
94:04:0a:f8:16:6b:ef:57:6d:ca:ac:7a:05:fc:5a:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:98:CE:8F:66:1A:EE:9B:3C:61:52:F6:65:39:D0:2F:30:C8:EF:4A
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/8ZjOj2Ya7ps8YVL2ZTnQLzDI70o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.29.0/24
84.236.247.0/24
89.45.244.0/24
Signature Algorithm: sha256WithRSAEncryption
61:93:b4:5c:98:7c:3a:6b:e3:6c:f0:84:cc:0f:75:43:83:28:
a0:fb:ec:22:1b:bb:93:69:db:38:c1:2b:c0:c0:e7:f1:08:14:
65:2a:60:fc:01:59:1d:8c:4c:66:9b:a5:07:d8:f7:98:67:6a:
b3:b7:7d:eb:63:15:dc:53:da:59:b4:3e:de:0e:9a:71:d0:d5:
b4:b7:77:4f:8f:b8:5d:f5:1b:29:29:00:cf:1f:41:ed:0c:ed:
bd:9d:81:c8:47:ad:a1:0d:b5:e0:6e:02:33:64:32:7c:73:15:
99:6f:b2:bb:0a:1b:fe:17:11:dd:ea:18:61:5f:50:b0:f4:e1:
f0:06:ef:96:0c:ec:7e:9d:84:b4:37:77:e3:5b:07:27:25:28:
6a:c8:60:98:26:a3:99:26:ca:2e:28:12:09:68:26:ea:ee:21:
a1:7d:47:c1:78:91:fd:9a:97:c3:b0:a1:05:16:0f:78:df:2f:
fb:f8:61:0d:fa:f1:c2:45:b6:b2:0a:a8:9f:68:6f:04:30:79:
c6:2c:c0:b8:cc:66:38:5d:61:98:11:3f:d6:30:55:77:fa:34:
dd:a6:46:fc:e5:e6:92:3c:75:0c:d2:7f:c7:38:09:43:d9:52:
76:53:11:8e:93:8b:73:3b:3a:80:8c:2d:07:79:5e:70:25:27:
ac:12:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:50 2026 by rpki-client