Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/8NQBTzVqOxdh672FdzJMDJYc68E.roa
File: 8NQBTzVqOxdh672FdzJMDJYc68E.roa (raw, json)
Hash identifier: vTXSY8qXUfsBWc4TJHAhfsVdL2+DnUDe0Pz/Tu+Tjvg=
Subject key identifier: F0:D4:01:4F:35:6A:3B:17:61:EB:BD:85:77:32:4C:0C:96:1C:EB:C1
Certificate issuer: /CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Certificate serial: 019F2368E19793F47E47AA1DCF456FAB7D7C
Authority key identifier: A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/8NQBTzVqOxdh672FdzJMDJYc68E.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 91.102.189.0/24 maxlen: 24
91.102.190.0/24 maxlen: 24
91.102.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e1:97:93:f4:7e:47:aa:1d:cf:45:6f:ab:7d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0d4014f356a3b1761ebbd8577324c0c961cebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:b2:b8:56:fa:13:d8:8c:fc:12:e2:76:d1:
fa:a1:f3:83:d3:e2:e3:bf:3b:b0:e4:3b:e6:db:00:
09:5a:b9:8d:1b:12:8f:57:e1:e8:1d:fe:9f:90:bb:
9d:e0:bf:25:a6:88:07:fe:62:67:1a:a8:b1:3a:3b:
30:2e:d4:73:34:c0:00:d3:10:59:83:5e:f3:ab:be:
a9:ff:71:b3:1a:83:94:51:f3:cc:3c:17:cd:07:ef:
39:01:49:ec:50:2f:59:07:fd:bd:98:48:e2:e2:16:
b3:90:86:47:21:a3:77:43:e9:a3:cf:b2:11:54:9c:
b2:64:33:51:86:63:61:7c:7b:da:b9:ae:84:1f:18:
14:87:7d:fb:ec:d2:4d:00:91:d9:35:68:b9:b8:f7:
2e:e5:d3:f1:db:e0:5d:ac:4d:1d:b0:5f:db:9d:e2:
46:f6:e4:33:e3:90:b8:08:12:bc:2d:a5:25:09:70:
75:b8:d2:3b:96:b1:94:31:1f:8f:08:a3:97:c9:44:
47:66:df:ec:a9:fd:1d:6f:c7:d6:ef:32:00:bb:a0:
a1:3a:c9:7c:1b:0f:39:27:9c:c9:14:7e:4d:aa:10:
1c:47:75:f1:ff:c6:87:23:84:f0:e6:af:9e:0b:97:
29:e6:6f:a1:5c:9b:c7:97:6c:91:e0:f3:03:b1:bb:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:01:4F:35:6A:3B:17:61:EB:BD:85:77:32:4C:0C:96:1C:EB:C1
X509v3 Authority Key Identifier:
keyid:A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/8NQBTzVqOxdh672FdzJMDJYc68E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.189.0-91.102.191.255
Signature Algorithm: sha256WithRSAEncryption
86:ce:c2:b4:bd:d6:9a:96:a6:04:aa:81:43:41:09:11:6f:b1:
2c:cb:28:60:1b:a1:ba:06:d3:c0:39:bd:fa:2d:a5:95:35:73:
0a:90:c8:59:93:7c:6f:0c:f1:8e:fa:8e:18:26:59:5d:80:e3:
ad:13:ab:cc:fe:41:11:14:a0:d3:ae:7c:e7:fe:f5:d5:bd:f3:
6a:dc:e0:e4:8b:a3:8f:56:a0:79:bf:ea:4b:80:02:9b:ee:34:
68:11:86:e3:71:1d:cf:55:e3:7e:9b:90:6e:1c:08:fd:2f:4c:
28:52:d8:d6:ee:74:50:3b:2f:d3:43:66:2b:43:4a:82:02:45:
ca:c0:34:dc:58:8b:93:21:ac:b0:05:7d:d3:f4:8e:15:8c:4f:
41:b1:84:81:3e:a9:63:f0:12:1a:38:1e:80:1b:17:ca:30:13:
5b:a7:31:a8:ff:c6:7e:30:d8:c3:74:c7:15:5a:dd:c2:0a:a8:
37:09:d1:95:3b:74:d9:24:d9:11:75:04:7f:48:87:18:9f:56:
7b:15:71:04:2e:f8:c6:a1:5b:50:26:38:ae:00:6d:6c:16:09:
ae:4c:ba:a0:8d:a8:ab:47:bc:7c:6a:19:dc:d2:13:90:ef:47:
b9:87:98:69:83:6d:ce:5b:ac:32:99:b3:be:3a:28:bd:01:37:
ba:f5:da:91
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8jaOGXk/R+R6odz0Vvq318MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWQzNWZjY2M2ZTlkN2M0ZWYxNzYyYjIwNDVmNzUwZjEz
ZTE0YjYwHhcNMjYwNzAyMTUxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGQ0MDE0ZjM1NmEzYjE3NjFlYmJkODU3NzMyNGMwYzk2MWNlYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz2yuFb6E9iM/BLidtH6ofOD0+Lj
vzuw5Dvm2wAJWrmNGxKPV+HoHf6fkLud4L8lpogH/mJnGqixOjswLtRzNMAA0xBZ
g17zq76p/3GzGoOUUfPMPBfNB+85AUnsUC9ZB/29mEji4hazkIZHIaN3Q+mjz7IR
VJyyZDNRhmNhfHvaua6EHxgUh3377NJNAJHZNWi5uPcu5dPx2+BdrE0dsF/bneJG
9uQz45C4CBK8LaUlCXB1uNI7lrGUMR+PCKOXyURHZt/sqf0db8fW7zIAu6ChOsl8
Gw85J5zJFH5NqhAcR3Xx/8aHI4Tw5q+eC5cp5m+hXJvHl2yR4PMDsbsSnwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPDUAU81ajsXYeu9hXcyTAyWHOvBMB8GA1UdIwQY
MBaAFKWtNfzMbp18TvF2KyBF91DxPhS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGEwMV9NeHVuWHhPOFhZcklFWDNVUEUtRkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt
MTU1ZmIzZmUyODdlLzEvOE5RQlR6VnFPeGRoNjcyRmR6Sk1ESlljNjhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl
LzEvcGEwMV9NeHVuWHhPOFhZcklFWDNVUEUtRkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbZr0D
BAZbZoAwDQYJKoZIhvcNAQELBQADggEBAIbOwrS91pqWpgSqgUNBCRFvsSzLKGAb
oboG08A5vfotpZU1cwqQyFmTfG8M8Y76jhgmWV2A460Tq8z+QREUoNOufOf+9dW9
82rc4OSLo49WoHm/6kuAApvuNGgRhuNxHc9V436bkG4cCP0vTChS2NbudFA7L9ND
ZitDSoICRcrANNxYi5MhrLAFfdP0jhWMT0GxhIE+qWPwEho4HoAbF8owE1unMaj/
xn4w2MN0xxVa3cIKqDcJ0ZU7dNkk2RF1BH9IhxifVnsVcQQu+MahW1AmOK4AbWwW
Ca5MuqCNqKtHvHxqGdzSE5DvR7mHmGmDbc5brDKZs746KL0BN7r12pE=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:00:15 2026 by rpki-client