Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/8i5NwxiZ_LO0QHDoh6piT7Z7jSU.roa
File: 8i5NwxiZ_LO0QHDoh6piT7Z7jSU.roa (raw, json)
Hash identifier: MtNwQsIxZyP8HNAnHCvJCitmJzsQ9t9Rar7QeUT0PaA=
Subject key identifier: F2:2E:4D:C3:18:99:FC:B3:B4:40:70:E8:87:AA:62:4F:B6:7B:8D:25
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A06BC9C646B2F3BEC43C9B37E4A3B70CF3
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/8i5NwxiZ_LO0QHDoh6piT7Z7jSU.roa
Signing time: Fri 04 Sep 2026 09:39:40 +0000
ROA not before: Fri 04 Sep 2026 09:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:c9:c6:46:b2:f3:be:c4:3c:9b:37:e4:a3:b7:0c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 4 09:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f22e4dc31899fcb3b44070e887aa624fb67b8d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:b4:e3:f8:00:6f:7a:a6:92:d2:b6:b0:6e:
4e:68:b5:84:98:78:3c:e6:1d:9d:f7:40:9f:4f:f4:
09:b6:04:e6:fb:fd:ca:95:c7:f2:a6:b4:53:07:90:
b8:66:d5:45:b2:4c:65:35:dc:09:45:22:4f:69:91:
28:e1:17:b2:60:fd:3d:f6:cc:aa:4d:31:37:2d:2b:
68:91:5e:94:ea:ad:55:41:56:78:a2:b0:3b:bd:8d:
a9:01:2c:9b:c7:9b:2b:c6:d1:f6:b3:a1:e3:a9:7b:
a7:c6:f6:f1:3d:25:bc:93:90:b9:17:1b:46:6a:8d:
31:9b:5c:92:8a:cc:62:3b:c9:b7:b7:5c:48:56:b3:
f8:4e:28:3a:ce:4d:e3:16:24:44:e2:ee:12:2d:b0:
d1:af:f6:cf:0a:d3:ec:85:35:16:64:95:d4:dc:8b:
41:64:a7:f1:1e:62:cb:63:f3:b6:4d:40:f6:78:d4:
ca:20:a5:62:62:ca:dd:d9:14:be:5e:3a:5b:95:7d:
46:ac:f7:53:04:83:36:32:85:a5:4a:0f:28:61:14:
37:49:bc:4a:64:d8:41:b8:6d:19:59:16:7e:40:ce:
ed:52:17:e7:2f:36:32:0a:f0:53:9a:f8:8a:7f:53:
ce:3e:52:9a:2c:f7:1a:e9:2c:9a:c9:5a:ba:2f:04:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:4D:C3:18:99:FC:B3:B4:40:70:E8:87:AA:62:4F:B6:7B:8D:25
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/8i5NwxiZ_LO0QHDoh6piT7Z7jSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
109.236.51.0/24
185.254.28.0/24
185.254.31.0/24
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9e:21:ab:87:08:1f:d5:bd:1d:dd:f1:2b:f2:7f:0e:0e:0f:
4d:32:db:ec:81:02:e2:e6:f4:3c:ae:43:f6:b6:1e:0e:05:ce:
7c:31:72:aa:13:d9:a9:a7:d3:45:fb:b8:e9:30:de:46:58:47:
ec:22:2c:b8:d6:4c:e9:8b:5b:0d:cd:cd:ea:c3:a8:48:b4:a0:
61:fc:fa:6a:1a:6b:47:1a:5a:45:e4:8b:c7:ce:38:e0:d9:e0:
31:ca:d9:1b:50:95:60:2f:9f:57:69:30:ec:0a:07:c1:bc:33:
5d:e4:c7:eb:6b:12:93:09:0d:c9:8c:09:8e:95:e1:74:51:df:
5d:b9:d6:d6:00:38:7e:d8:0f:61:36:bf:60:fd:56:f3:90:c2:
8c:42:fc:2c:82:9f:bc:9c:ba:e0:b4:d2:ae:3e:92:bd:b0:6b:
4c:e2:ac:18:80:9c:9b:83:51:0f:80:f4:6e:04:a4:28:f0:95:
19:d5:38:e8:9b:56:6f:26:29:75:c6:af:8f:e5:a6:78:6a:2a:
a8:7e:06:84:e4:33:99:b5:f1:73:cf:25:f3:7c:2e:db:16:7e:
7e:54:45:d1:47:f3:31:8e:49:90:64:38:5c:85:bf:bd:11:f4:
f1:c1:34:0c:00:f7:e8:f7:1d:61:22:c4:82:dc:f0:85:a6:00:
45:7e:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:41 2026 by rpki-client