Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa
File: 8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa (raw, json)
Hash identifier: 0JK4Fw26Ffv1CbJTN1h1lmvQzBmi4JhkRYBwfgGlUiI=
Subject key identifier: F0:C9:F1:CA:30:8E:AD:2B:D0:EA:2D:DD:9D:6B:FC:29:84:C2:65:56
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019F39555EDA8596B8F94E99E50984E4285A
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa
Signing time: Mon 06 Jul 2026 21:28:43 +0000
ROA not before: Mon 06 Jul 2026 21:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 91.225.227.0/24 maxlen: 24
188.191.98.0/24 maxlen: 24
188.191.101.0/24 maxlen: 24
188.191.103.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
188.191.109.0/24 maxlen: 24
188.191.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:55:5e:da:85:96:b8:f9:4e:99:e5:09:84:e4:28:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jul 6 21:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0c9f1ca308ead2bd0ea2ddd9d6bfc2984c26556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:78:f6:67:c4:a2:12:b8:4f:90:20:2e:49:
fb:41:3c:ed:be:18:f0:d9:fa:44:0f:65:5a:9e:68:
c5:a5:b1:4d:11:4a:32:60:a0:71:3b:4e:53:b3:35:
93:5d:9f:f8:de:61:4a:3d:6b:d9:91:63:03:5c:9d:
d5:58:50:f0:f1:16:07:af:90:d0:bd:85:99:33:73:
5c:0a:59:6f:42:32:c4:c8:d5:a9:41:f4:8d:91:8e:
48:97:a2:8f:a3:d9:10:19:63:a3:40:ef:5f:02:38:
05:6c:9c:7b:41:b2:d7:83:3d:05:ac:6d:ba:1b:76:
65:e3:3d:31:37:b3:49:52:e6:41:3a:40:cc:9d:14:
cf:aa:d3:bd:2d:13:b7:e0:b1:d8:c6:a5:23:8a:04:
66:60:7c:5c:21:6d:8e:d0:cb:ed:24:4d:ca:21:4c:
81:80:51:9c:26:84:4d:6f:8e:9f:1a:77:94:b2:db:
83:63:d1:0b:c7:4f:43:48:73:7c:dc:2d:32:55:66:
20:ba:c7:11:eb:df:89:71:51:1b:ca:3e:f8:ae:03:
ce:cd:8c:88:33:46:41:b7:11:34:9e:28:c6:81:7c:
74:c1:ef:33:55:27:38:f8:27:90:b6:bc:5d:00:8d:
1b:a2:16:48:39:3b:b0:1a:dc:2a:28:27:e7:3d:70:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C9:F1:CA:30:8E:AD:2B:D0:EA:2D:DD:9D:6B:FC:29:84:C2:65:56
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.227.0/24
188.191.98.0/24
188.191.101.0/24
188.191.103.0/24
188.191.106.0/24
188.191.109.0-188.191.110.255
Signature Algorithm: sha256WithRSAEncryption
6b:17:c6:83:5f:d1:21:47:04:3a:e3:18:4d:f8:82:db:bc:2d:
3c:ae:a0:f1:80:6c:ca:7e:d3:ab:7f:a5:e2:c1:5d:20:27:18:
fa:e4:26:a6:12:a4:ab:2f:be:ff:d9:79:f5:43:3d:b0:87:c3:
2d:df:dd:23:6b:2b:b2:1f:53:53:ce:d8:3b:a4:71:dd:11:35:
b9:b6:de:5f:57:52:f5:f8:78:ac:c1:f3:31:59:10:b3:30:61:
87:eb:de:3e:1d:5b:0a:24:9c:36:55:27:0d:61:78:c6:5f:34:
b2:f6:3d:75:c0:84:d0:1f:73:46:77:48:e0:97:f2:0e:0a:df:
39:4f:24:a4:9a:d4:df:ce:8a:98:e2:94:b0:3f:02:31:58:b3:
66:71:08:c2:78:80:5d:09:c4:75:b2:ad:21:28:09:61:7c:03:
02:5e:f8:59:f1:56:fc:c7:5b:f1:3e:58:64:e6:c3:a2:c7:a3:
e8:48:e5:96:0a:11:10:f5:40:cb:f7:ed:72:72:9e:58:65:8e:
a2:21:49:2f:b5:00:5e:58:95:2e:06:45:75:b1:43:28:5b:6a:
bc:16:f1:d7:b9:21:b7:23:8f:58:99:0c:51:73:ed:52:b4:76:
55:32:c5:8e:b4:14:44:05:b9:cf:c4:4f:23:76:d9:77:2b:87:
e3:a8:57:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:57 2026 by rpki-client