Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/8Gb8ioS8IZOfRTNwkMs-Mq3MmrU.roa
File: 8Gb8ioS8IZOfRTNwkMs-Mq3MmrU.roa (raw, json)
Hash identifier: kfne53zblTKY2xvy+E9g80qQGuUn/11CM4XRi/Nrbe8=
Subject key identifier: F0:66:FC:8A:84:BC:21:93:9F:45:33:70:90:CB:3E:32:AD:CC:9A:B5
Certificate issuer: /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial: 01A025C2A2BDFEBDAB3F7FFA4BBFF60F5C3C
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/8Gb8ioS8IZOfRTNwkMs-Mq3MmrU.roa
Signing time: Fri 21 Aug 2026 19:18:27 +0000
ROA not before: Fri 21 Aug 2026 19:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.41.150.0/24 maxlen: 24
2a07:8241::/36 maxlen: 36
2a07:8241:1000::/36 maxlen: 36
2a07:8247:ab1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:c2:a2:bd:fe:bd:ab:3f:7f:fa:4b:bf:f6:0f:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Validity
Not Before: Aug 21 19:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f066fc8a84bc21939f45337090cb3e32adcc9ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:8f:97:ea:15:88:79:8c:ac:49:86:bb:79:
fb:38:51:2d:86:54:59:41:90:a2:a4:82:1b:7d:24:
82:ee:c1:a5:cf:17:e0:e6:c6:62:3d:aa:1b:c3:11:
ac:0d:ee:cf:84:c4:cf:f7:e1:a9:ba:24:8e:4c:35:
a3:3a:ad:47:eb:b7:ca:18:b4:57:b7:1c:3b:29:d0:
8c:b0:d8:a2:34:5e:e5:49:90:31:a4:4c:ef:9b:7d:
74:9e:aa:88:ba:01:9c:05:1a:e9:93:7e:7c:9f:2d:
92:9e:60:cb:3b:81:b0:17:d1:9f:c3:3e:38:85:5f:
d8:40:f5:dc:f6:61:00:d3:a2:18:61:aa:1f:79:ef:
8e:e7:f0:90:77:ea:df:55:a5:dc:6b:39:9b:fd:3d:
38:88:1d:e2:02:96:9d:c5:e3:83:17:19:fa:9d:e1:
9d:a9:22:d0:d5:f0:ef:fe:d4:cd:b3:98:83:7e:75:
9b:98:8f:cb:5e:09:b7:31:f2:d9:26:88:95:83:9b:
cb:f0:17:3d:99:da:db:81:82:66:2a:16:d8:98:90:
cc:da:d3:53:74:5c:32:9a:aa:79:6a:d7:73:22:d5:
c3:c9:ae:b6:b3:82:2a:56:f6:e3:6e:46:3e:92:f3:
af:56:b3:ee:65:0f:1a:71:d7:36:af:5f:e9:13:35:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:66:FC:8A:84:BC:21:93:9F:45:33:70:90:CB:3E:32:AD:CC:9A:B5
X509v3 Authority Key Identifier:
keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/8Gb8ioS8IZOfRTNwkMs-Mq3MmrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.150.0/24
IPv6:
2a07:8241::/35
2a07:8247:ab1e::/48
Signature Algorithm: sha256WithRSAEncryption
64:f8:49:cf:bd:7c:dd:ec:b2:9b:0d:c6:7c:d0:5a:7d:ac:ab:
24:ea:0c:da:66:f8:e2:16:a4:3b:92:cf:65:84:77:4a:a6:1e:
c6:83:c1:c0:f8:34:03:94:93:f7:4f:27:d0:05:ff:f5:a0:dd:
b9:d6:5d:b9:77:01:a9:8d:62:f7:c6:17:71:9c:aa:e7:a2:1e:
04:1f:62:1a:69:24:03:b8:57:4a:24:f5:0a:69:b0:d6:61:a1:
92:1d:66:ca:b0:93:d5:ee:37:71:cc:8b:88:a4:66:b3:e5:5c:
75:ec:29:d2:ba:f5:28:4d:b5:11:0b:1e:38:e5:3a:5b:34:63:
3d:9e:0b:5f:16:f5:1d:5a:5e:f3:0e:dd:3c:e3:2a:2e:a3:cc:
c0:e8:29:df:a1:ae:2c:90:aa:f8:b7:b3:63:17:9a:db:d8:90:
ff:99:85:17:10:da:3e:93:f4:4f:01:ad:cf:aa:6f:88:79:f2:
a7:0a:3e:a9:0f:bc:87:9e:cb:22:49:e7:c4:e5:74:eb:4a:eb:
23:b3:17:a1:aa:84:4e:8e:fa:fa:9b:46:c3:5e:b8:e5:76:b9:
72:15:9e:bc:de:2f:c2:15:f9:a6:e2:4d:ab:97:5a:64:19:5d:
a9:55:9a:2b:d6:98:c6:d6:f1:9e:71:7f:5f:7f:f2:7f:21:85:
20:9b:84:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAlwqK9/r2rP3/6S7/2D1w8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNTc1OGFlYTQ3OWQ0ZjMyYTllODllOTgwOGYzMGVkZmMy
M2IyZTcwHhcNMjYwODIxMTkxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDY2ZmM4YTg0YmMyMTkzOWY0NTMzNzA5MGNiM2UzMmFkY2M5YWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRSPl+oViHmMrEmGu3n7OFEthlRZ
QZCipIIbfSSC7sGlzxfg5sZiPaobwxGsDe7PhMTP9+GpuiSOTDWjOq1H67fKGLRX
txw7KdCMsNiiNF7lSZAxpEzvm310nqqIugGcBRrpk358ny2SnmDLO4GwF9Gfwz44
hV/YQPXc9mEA06IYYaofee+O5/CQd+rfVaXcazmb/T04iB3iApadxeODFxn6neGd
qSLQ1fDv/tTNs5iDfnWbmI/LXgm3MfLZJoiVg5vL8Bc9mdrbgYJmKhbYmJDM2tNT
dFwymqp5atdzItXDya62s4IqVvbjbkY+kvOvVrPuZQ8acdc2r1/pEzWjSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBm/IqEvCGTn0UzcJDLPjKtzJq1MB8GA1UdIwQY
MBaAFGFXWK6kedTzKp6J6YCPMO38I7LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUt
ZTkwZDk4MzBlOGM1LzEvOEdiOGlvUzhJWk9mUlROd2tNcy1NcTNNbXJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUtZTkwZDk4MzBlOGM1
LzEvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQAuSmWMBcE
AgACMBEDBgUqB4JBAAMHACoHgkerHjANBgkqhkiG9w0BAQsFAAOCAQEAZPhJz718
3eyymw3GfNBafayrJOoM2mb44hakO5LPZYR3SqYexoPBwPg0A5ST908n0AX/9aDd
udZduXcBqY1i98YXcZyq56IeBB9iGmkkA7hXSiT1Cmmw1mGhkh1myrCT1e43ccyL
iKRms+Vcdewp0rr1KE21EQseOOU6WzRjPZ4LXxb1HVpe8w7dPOMqLqPMwOgp36Gu
LJCq+LezYxea29iQ/5mFFxDaPpP0TwGtz6pviHnypwo+qQ+8h57LIknnxOV060rr
I7MXoaqETo76+ptGw1645Xa5chWevN4vwhX5puJNq5daZBldqVWaK9aYxtbxnnF/
X3/yfyGFIJuEjw==
-----END CERTIFICATE-----
Generated at Sat Aug 22 19:32:02 2026 by rpki-client