Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8Var-8_r4NTCcGnicdJUl9hvLZw.roa
File: 8Var-8_r4NTCcGnicdJUl9hvLZw.roa (raw, json)
Hash identifier: rStMJMrE9n7YqS0iiOjc8V/FsFOjE8oBvNbooOhSz0g=
Subject key identifier: F1:56:AB:FB:CF:EB:E0:D4:C2:70:69:E2:71:D2:54:97:D8:6F:2D:9C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A13F162AFE7CC6853068092B62829BB008
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8Var-8_r4NTCcGnicdJUl9hvLZw.roa
Signing time: Thu 15 Oct 2026 10:22:59 +0000
ROA not before: Thu 15 Oct 2026 10:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218396
IP address blocks: 95.47.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:16:2a:fe:7c:c6:85:30:68:09:2b:62:82:9b:b0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 15 10:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f156abfbcfebe0d4c27069e271d25497d86f2d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:af:14:0e:88:fb:53:95:92:41:17:2c:60:
c1:37:44:18:84:eb:e5:a4:97:d4:f8:7f:21:ba:3b:
e7:dc:a5:f4:d6:1c:fe:8d:ae:4e:cc:16:b3:18:ec:
92:eb:af:a3:68:9e:0b:f0:43:a6:fa:20:a4:98:2e:
1e:06:96:d6:59:83:fa:84:d2:cd:42:de:1e:76:97:
7c:1c:1d:c4:5b:9c:c1:10:bd:b8:2f:5f:19:f2:0e:
5b:da:66:1b:66:f5:66:dd:cf:ea:29:cc:93:cc:2d:
95:c4:40:bb:b8:3d:76:a9:81:8e:bb:92:81:9c:c0:
3f:aa:3f:9b:8b:e0:ea:04:07:f6:01:d1:e8:6f:c0:
63:ca:64:05:75:4c:66:7b:b8:02:95:55:2e:0e:b8:
7c:0c:9b:1f:6b:7c:c6:e8:90:19:a3:0d:66:fa:e3:
38:11:31:27:27:a9:ca:a0:29:0c:16:7a:8e:91:4a:
35:3e:20:5c:2d:f5:b5:2f:4f:d5:a4:d6:f3:1f:b5:
44:90:86:ed:c3:25:68:3f:73:3a:18:75:34:f2:ef:
db:00:78:6a:c3:17:a4:6b:67:ce:c9:28:3a:44:33:
23:dc:54:76:46:7d:8c:0b:81:3e:d1:26:6d:71:62:
cd:32:5a:c5:fd:c4:b5:f6:c4:0a:83:0c:3f:44:cc:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:AB:FB:CF:EB:E0:D4:C2:70:69:E2:71:D2:54:97:D8:6F:2D:9C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8Var-8_r4NTCcGnicdJUl9hvLZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.158.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:15:92:a3:31:4c:0d:67:31:1e:c3:22:90:dd:60:21:24:f5:
c3:e4:0c:c9:5d:9b:91:c6:4a:2b:47:0f:95:dd:d2:db:1c:5e:
cb:a6:b3:19:98:bd:32:d7:36:8a:11:a4:e0:c7:05:b2:80:f2:
b1:93:85:27:a9:2f:9b:0f:21:14:97:39:e2:fa:5b:bb:da:3a:
87:37:ec:95:8a:ea:49:be:bb:44:bb:2a:25:a0:95:03:20:3b:
a1:8d:46:e6:96:4e:eb:db:47:21:d2:c8:d4:a3:5b:eb:ba:90:
b6:ea:58:bf:6e:f2:95:a6:79:69:d3:44:94:e7:ca:8e:df:eb:
cc:f1:e0:87:22:51:8f:84:fb:24:6a:25:e2:52:b0:eb:39:12:
f0:ae:62:70:79:ff:94:ef:3e:4c:0e:33:df:20:1f:21:28:53:
c8:43:86:35:18:6e:f7:85:e1:4d:68:53:60:a6:a4:c9:68:c6:
ac:9c:ca:58:35:13:14:12:34:3f:0f:1e:23:3c:f4:e8:d5:c4:
aa:9a:70:4f:79:c0:4c:7d:7b:82:47:44:e3:85:85:4d:1b:5d:
8d:28:88:2d:fa:81:21:31:25:92:1e:f1:08:42:4c:a6:73:ae:
47:ef:cd:f3:cc:82:87:77:91:20:ee:50:b2:a4:42:28:18:64:
47:97:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:04 2026 by rpki-client