Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/T8B0kkg4BVlceQJgbiJPcySAVzI.roa
File: T8B0kkg4BVlceQJgbiJPcySAVzI.roa (raw, json)
Hash identifier: yXFJztGLWwXHOTbokOH+zERGWTqm5J1lqmfqfodFEZc=
Subject key identifier: 4F:C0:74:92:48:38:05:59:5C:79:02:60:6E:22:4F:73:24:80:57:32
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 019FF0B30F160459E89B93C0408FD7D39668
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/T8B0kkg4BVlceQJgbiJPcySAVzI.roa
Signing time: Tue 11 Aug 2026 12:01:34 +0000
ROA not before: Tue 11 Aug 2026 12:01:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218992
IP address blocks: 87.199.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:b3:0f:16:04:59:e8:9b:93:c0:40:8f:d7:d3:96:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Aug 11 12:01:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fc07492483805595c7902606e224f7324805732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:ea:c4:f8:70:95:59:0b:57:88:ee:21:e6:
93:92:2b:d5:3f:1d:10:fc:b4:b9:82:71:86:e2:2b:
92:46:a5:34:b8:9f:1a:e0:60:47:4c:c2:ba:7b:29:
9e:08:a1:1f:63:85:75:43:9f:1a:33:7f:49:3b:b2:
45:22:6e:ad:82:e9:0e:f4:66:30:db:d7:ff:f8:66:
e4:67:26:1e:51:23:67:7d:f6:10:06:98:1e:20:cd:
ef:23:40:a8:2d:38:86:7a:e4:be:8b:17:f3:15:8c:
09:b2:db:72:7d:a2:99:04:27:1c:3d:0f:9b:66:ba:
72:80:9b:85:5e:9c:7e:96:01:99:c3:57:c5:f8:fc:
6f:44:8f:97:8f:be:5d:69:55:fc:cd:ae:98:6f:1d:
7a:36:9d:d7:fd:24:f8:34:71:c2:b4:8e:a0:8f:bc:
3d:04:13:2a:63:e3:54:b8:2f:9f:8d:c6:54:e1:28:
08:9f:36:7e:19:e0:f3:e3:02:cb:e1:59:d8:93:4a:
57:b1:e5:20:2f:10:d4:01:10:db:bc:b6:31:2d:8c:
46:da:a9:aa:67:41:8e:91:96:ea:40:08:01:d1:43:
93:3f:2b:da:a3:6d:8c:a9:19:47:14:db:99:ef:94:
a8:1f:d6:68:7c:63:a8:20:bb:c0:58:b4:a6:92:2e:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C0:74:92:48:38:05:59:5C:79:02:60:6E:22:4F:73:24:80:57:32
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/T8B0kkg4BVlceQJgbiJPcySAVzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:42:4b:a6:c8:76:01:73:8a:65:3d:2c:dd:44:48:e7:16:f9:
f0:78:13:ce:28:cf:8c:34:96:d1:c8:3d:ca:3b:45:50:84:f0:
e6:34:52:54:33:fb:1b:de:99:ba:ec:46:46:06:ad:1b:e1:89:
ee:e4:65:e7:b7:eb:09:ce:69:02:25:b2:9f:f1:51:2d:41:2a:
64:50:ec:0d:35:51:32:4d:c8:fb:30:b2:ba:c0:ab:54:22:a0:
d8:9b:e6:10:64:b4:80:0c:90:3d:f9:46:5a:80:b4:87:be:fd:
eb:26:31:53:81:d2:0d:5b:6f:7a:4c:59:20:52:63:8b:cc:01:
5e:13:3e:bb:f6:0b:a5:03:dc:f4:e9:28:2c:ca:53:93:26:1f:
28:05:2a:43:3e:7f:a0:52:6d:07:1a:ea:bd:f1:66:36:2c:e8:
f7:09:c5:2d:60:c7:4e:c2:4b:b8:ad:2e:7f:5d:ea:9d:dc:74:
d6:93:32:b5:a7:81:c9:89:da:fc:4f:e0:e1:62:fa:24:0a:bd:
bc:f8:08:82:5f:c6:8c:ff:2e:3c:d0:79:4f:33:1c:c7:f6:42:
43:a8:b4:2f:3d:80:4d:61:a4:c9:fc:0f:2e:98:53:ec:9c:d6:
2d:c5:f2:a0:9c:c8:74:8c:0d:62:81:e3:f6:61:99:18:e0:20:
d5:92:03:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/wsw8WBFnom5PAQI/X05ZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi
MjRhZjcwHhcNMjYwODExMTIwMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmMwNzQ5MjQ4MzgwNTU5NWM3OTAyNjA2ZTIyNGY3MzI0ODA1NzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryPqxPhwlVkLV4juIeaTkivVPx0Q
/LS5gnGG4iuSRqU0uJ8a4GBHTMK6eymeCKEfY4V1Q58aM39JO7JFIm6tgukO9GYw
29f/+GbkZyYeUSNnffYQBpgeIM3vI0CoLTiGeuS+ixfzFYwJsttyfaKZBCccPQ+b
ZrpygJuFXpx+lgGZw1fF+PxvRI+Xj75daVX8za6Ybx16Np3X/ST4NHHCtI6gj7w9
BBMqY+NUuC+fjcZU4SgInzZ+GeDz4wLL4VnYk0pXseUgLxDUARDbvLYxLYxG2qmq
Z0GOkZbqQAgB0UOTPyvao22MqRlHFNuZ75SoH9ZofGOoILvAWLSmki74pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE/AdJJIOAVZXHkCYG4iT3MkgFcyMB8GA1UdIwQY
MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt
MTBiYjQ1NzlkNTI4LzEvVDhCMGtrZzRCVmxjZVFKZ2JpSlBjeVNBVnpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4
LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV8eFMA0G
CSqGSIb3DQEBCwUAA4IBAQCMQkumyHYBc4plPSzdREjnFvnweBPOKM+MNJbRyD3K
O0VQhPDmNFJUM/sb3pm67EZGBq0b4Ynu5GXnt+sJzmkCJbKf8VEtQSpkUOwNNVEy
Tcj7MLK6wKtUIqDYm+YQZLSADJA9+UZagLSHvv3rJjFTgdINW296TFkgUmOLzAFe
Ez679gulA9z06SgsylOTJh8oBSpDPn+gUm0HGuq98WY2LOj3CcUtYMdOwku4rS5/
Xeqd3HTWkzK1p4HJidr8T+DhYvokCr28+AiCX8aM/y480HlPMxzH9kJDqLQvPYBN
YaTJ/A8umFPsnNYtxfKgnMh0jA1igeP2YZkY4CDVkgPg
-----END CERTIFICATE-----
Generated at Fri Sep 18 02:25:36 2026 by rpki-client