Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/8PWFbs4AIdR1B4HqhCIMxTTO61A.roa
File: 8PWFbs4AIdR1B4HqhCIMxTTO61A.roa (raw, json)
Hash identifier: KnuKEGt5rr/A//D18rWYCvEAK3yzh9aH2tXIMp8420U=
Subject key identifier: F0:F5:85:6E:CE:00:21:D4:75:07:81:EA:84:22:0C:C5:34:CE:EB:50
Certificate issuer: /CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Certificate serial: 01A0F277E901014FB661889E51FAF4E9F3CE
Authority key identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/8PWFbs4AIdR1B4HqhCIMxTTO61A.roa
Signing time: Wed 30 Sep 2026 13:18:59 +0000
ROA not before: Wed 30 Sep 2026 13:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35038
IP address blocks: 192.35.246.0/24 maxlen: 24
192.135.129.0/24 maxlen: 24
192.136.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:77:e9:01:01:4f:b6:61:88:9e:51:fa:f4:e9:f3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Validity
Not Before: Sep 30 13:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0f5856ece0021d4750781ea84220cc534ceeb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:59:90:9f:3e:5c:c5:d5:bf:3c:20:38:e0:
07:9a:21:ec:9b:98:40:9c:66:37:27:50:43:30:41:
85:fb:d7:47:bf:97:92:7f:b0:19:4e:26:0c:e5:79:
4d:d8:e1:fa:3d:c5:4d:6c:3a:c8:75:cd:4a:3a:c1:
46:a4:2f:91:a4:ac:de:f5:75:05:9a:6f:f0:5d:8d:
4a:93:c0:e0:81:29:c2:63:f1:80:89:d3:17:8f:ff:
aa:ce:f0:49:b7:30:ab:29:bd:9b:f5:aa:29:e4:78:
77:46:4e:e7:64:6a:57:32:7f:6e:ba:c4:2c:45:7f:
50:7f:de:5b:67:cd:53:00:72:6c:1b:f6:97:b7:31:
64:b0:1d:7f:02:62:ba:61:a4:00:bb:72:0a:d8:ef:
b9:cf:4c:be:b8:5e:b3:0d:46:36:bf:3b:1f:f8:9f:
c6:99:9a:b6:2b:2e:0b:33:46:cb:c9:b8:2c:00:44:
8d:c8:96:e5:35:60:bf:75:4f:1b:3a:7a:1d:82:7e:
38:61:75:ce:ad:7a:ec:36:5b:b2:01:08:49:ba:62:
96:e3:c0:2e:b2:d4:fb:ee:2e:20:e1:52:f9:83:ee:
db:76:34:79:77:8e:16:0a:c3:2c:af:5c:c9:d8:f9:
b4:67:39:69:19:8b:9e:f6:d4:a0:76:93:3a:69:cd:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F5:85:6E:CE:00:21:D4:75:07:81:EA:84:22:0C:C5:34:CE:EB:50
X509v3 Authority Key Identifier:
keyid:5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/8PWFbs4AIdR1B4HqhCIMxTTO61A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.35.246.0/24
192.135.129.0/24
192.136.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f1:6d:ee:db:08:8e:b2:9e:0e:57:8c:20:5f:78:ce:bf:bf:
95:04:34:59:02:cf:37:ca:e5:2d:44:4c:65:39:97:63:37:2b:
92:b1:3d:9a:c1:f7:40:25:31:62:63:52:bc:a3:d6:e4:22:f9:
7a:fc:35:74:0b:56:43:7e:ad:08:e2:be:c6:af:8b:01:28:0f:
53:2e:93:6e:8d:81:09:d2:a0:16:9c:40:1e:09:40:83:c0:1e:
17:44:c1:8e:de:fe:df:4d:57:38:c3:c3:5f:ff:37:42:a5:6f:
f8:c6:d1:b7:51:0e:06:ca:4a:8e:89:86:29:52:e3:11:6f:80:
57:b1:60:08:16:46:76:d5:97:7b:4f:fc:87:b8:c2:9f:0a:9d:
8d:ca:09:97:14:2f:01:bd:3b:d7:da:09:bb:e4:64:ca:4b:be:
14:7a:de:f2:9a:7f:c1:48:aa:ea:02:52:29:93:0a:b0:b7:2a:
35:2f:74:14:34:50:ea:d2:de:4d:c6:cd:fa:12:5e:4c:eb:56:
0a:f7:16:90:94:30:8e:86:4a:85:e4:93:7e:e7:37:21:54:26:
89:35:86:b1:a2:24:33:b3:48:fd:1a:06:d1:57:6c:7f:4a:2c:
5e:20:f3:df:bc:54:85:64:aa:3d:5b:e4:64:9f:aa:da:4c:12:
d8:94:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:01 2026 by rpki-client