Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/8PJsiSgawJpqi4WMA0rE-WSVzw4.roa
File: 8PJsiSgawJpqi4WMA0rE-WSVzw4.roa (raw, json)
Hash identifier: gH5uM65Zqr7CX//7XHgG1PbcCvfvj2cn2duCm7yPiEg=
Subject key identifier: F0:F2:6C:89:28:1A:C0:9A:6A:8B:85:8C:03:4A:C4:F9:64:95:CF:0E
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 01A080BA2F358B77AB9AEA0A5314A0F7ECDB
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/8PJsiSgawJpqi4WMA0rE-WSVzw4.roa
Signing time: Tue 08 Sep 2026 11:14:40 +0000
ROA not before: Tue 08 Sep 2026 11:14:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 185.63.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:ba:2f:35:8b:77:ab:9a:ea:0a:53:14:a0:f7:ec:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Sep 8 11:14:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0f26c89281ac09a6a8b858c034ac4f96495cf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:09:87:fd:ea:e1:e4:f6:20:56:fa:5e:dd:
91:f0:5c:fa:4f:91:6b:51:af:72:3b:bf:ff:57:82:
5a:6d:05:4e:c4:37:38:73:e6:04:82:10:08:0a:2c:
ab:6f:54:26:12:1d:29:54:9c:c9:f5:d5:04:d2:71:
6d:d9:7b:50:62:d4:00:ed:a7:d1:63:a9:6d:23:d0:
64:d1:19:aa:32:ba:9e:72:3a:d5:69:0d:be:c3:43:
04:db:8e:53:ee:15:91:cc:64:e6:f2:21:d5:32:75:
c3:0e:fb:ff:ab:1f:f6:69:3f:7a:d4:f8:8a:40:e9:
cf:a8:43:2c:71:03:f3:d1:76:52:70:38:c5:af:c2:
b1:8d:74:00:75:60:34:af:9c:ec:f6:6e:1a:4f:96:
f3:eb:b1:04:8b:8c:4e:81:d1:09:2f:8f:19:b7:e2:
2a:06:cf:e0:b4:72:5e:a5:e6:58:19:59:0c:0e:5d:
ae:5d:51:70:a7:ce:51:de:df:af:d2:ef:c5:6a:24:
d7:4c:28:44:5a:3d:1c:b5:9d:b3:86:e4:f5:76:8b:
a5:34:98:fd:a6:24:38:e7:92:4a:7f:43:45:06:47:
40:01:63:04:2c:4b:92:f7:b8:08:a8:e9:bc:92:64:
22:a4:7c:93:a7:10:30:c4:f9:74:7e:df:12:a5:2e:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F2:6C:89:28:1A:C0:9A:6A:8B:85:8C:03:4A:C4:F9:64:95:CF:0E
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/8PJsiSgawJpqi4WMA0rE-WSVzw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.33.0/24
Signature Algorithm: sha256WithRSAEncryption
21:df:24:cc:63:18:1a:d0:09:00:93:cb:0d:5f:d9:74:41:3b:
80:26:b7:ba:73:ea:61:51:3b:96:9a:04:0e:c4:c4:a2:db:9b:
e5:e3:c0:c5:98:de:9f:73:fa:28:77:f3:16:0d:8f:34:91:81:
17:66:d0:67:ad:6c:2a:c6:a9:f1:e7:06:46:d0:8b:b2:51:e8:
45:61:f8:fd:51:b2:2f:23:64:67:12:4f:02:c0:b8:fb:77:d6:
4d:18:43:25:ec:75:a9:f9:29:65:4a:df:c7:35:c0:d9:7e:41:
ab:f2:db:c5:55:ee:a6:c5:1e:c2:6b:1c:44:e7:71:85:52:1c:
39:bd:2e:16:e6:6b:a7:90:ef:14:fe:6c:9d:c5:a2:d7:18:de:
a2:a7:c6:8e:06:f6:88:9d:59:3a:7a:0a:31:db:97:45:d2:9b:
c6:c6:d2:fc:08:e0:40:17:35:78:8f:4e:a7:96:fb:a8:6a:99:
97:ae:96:5f:ef:05:ea:d2:5f:ef:75:31:80:19:2b:54:cd:fa:
7e:1b:bf:95:b0:52:81:e9:66:36:94:9f:84:70:a8:93:ed:29:
14:37:cf:7d:0c:60:5d:3b:c0:e7:22:01:3d:95:9b:5f:04:f4:
6c:09:8d:28:0f:15:0a:eb:95:6f:ee:45:a6:17:0a:c6:91:a6:
44:4b:3e:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCAui81i3ermuoKUxSg9+zbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh
MDY4OTUwHhcNMjYwOTA4MTExNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGYyNmM4OTI4MWFjMDlhNmE4Yjg1OGMwMzRhYzRmOTY0OTVjZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vEJh/3q4eT2IFb6Xt2R8Fz6T5Fr
Ua9yO7//V4JabQVOxDc4c+YEghAICiyrb1QmEh0pVJzJ9dUE0nFt2XtQYtQA7afR
Y6ltI9Bk0RmqMrqecjrVaQ2+w0ME245T7hWRzGTm8iHVMnXDDvv/qx/2aT961PiK
QOnPqEMscQPz0XZScDjFr8KxjXQAdWA0r5zs9m4aT5bz67EEi4xOgdEJL48Zt+Iq
Bs/gtHJepeZYGVkMDl2uXVFwp85R3t+v0u/FaiTXTChEWj0ctZ2zhuT1doulNJj9
piQ455JKf0NFBkdAAWMELEuS97gIqOm8kmQipHyTpxAwxPl0ft8SpS4oqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPDybIkoGsCaaouFjANKxPlklc8OMB8GA1UdIwQY
MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt
OGJiYzIyNmU2YzQ1LzEvOFBKc2lTZ2F3SnBxaTRXTUEwckUtV1NWenc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1
LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT8hMA0G
CSqGSIb3DQEBCwUAA4IBAQAh3yTMYxga0AkAk8sNX9l0QTuAJre6c+phUTuWmgQO
xMSi25vl48DFmN6fc/ood/MWDY80kYEXZtBnrWwqxqnx5wZG0IuyUehFYfj9UbIv
I2RnEk8CwLj7d9ZNGEMl7HWp+SllSt/HNcDZfkGr8tvFVe6mxR7CaxxE53GFUhw5
vS4W5munkO8U/mydxaLXGN6ip8aOBvaInVk6egox25dF0pvGxtL8COBAFzV4j06n
lvuoapmXrpZf7wXq0l/vdTGAGStUzfp+G7+VsFKB6WY2lJ+EcKiT7SkUN899DGBd
O8DnIgE9lZtfBPRsCY0oDxUK65Vv7kWmFwrGkaZESz4x
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:22:38 2026 by rpki-client