Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/8y88NJXHcEaqu4Abu5SxQh3fBpU.roa
File: 8y88NJXHcEaqu4Abu5SxQh3fBpU.roa (raw, json)
Hash identifier: 6HPf79kWBhuWHiKXiOUnzlg4Ue3tB5koJ57WYMqtooc=
Subject key identifier: F3:2F:3C:34:95:C7:70:46:AA:BB:80:1B:BB:94:B1:42:1D:DF:06:95
Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial: 019C4212C7ABE0A93164610623DD8817CAF6
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/8y88NJXHcEaqu4Abu5SxQh3fBpU.roa
Signing time: Mon 09 Feb 2026 11:04:12 +0000
ROA not before: Mon 09 Feb 2026 11:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206499
IP address blocks: 45.133.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:12:c7:ab:e0:a9:31:64:61:06:23:dd:88:17:ca:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Validity
Not Before: Feb 9 11:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f32f3c3495c77046aabb801bbb94b1421ddf0695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:ad:59:b1:b9:3c:20:88:eb:f4:43:dc:e9:
e9:72:23:e2:33:27:4f:4f:dc:64:49:26:d0:42:26:
d5:ea:30:05:fe:61:93:a4:a0:d9:ee:45:8e:7b:4b:
98:49:07:d5:ef:d4:b5:6c:16:28:18:95:cd:c1:e1:
3c:f1:bd:6d:61:79:ab:9c:89:07:40:76:28:de:3d:
2c:68:a0:23:15:eb:ec:04:72:29:a7:07:b0:3c:35:
88:e9:42:50:b1:c0:1a:de:8a:2d:be:42:f7:c5:74:
65:50:b6:e5:02:89:21:99:4b:4a:5d:72:0e:46:34:
a9:ca:27:dd:ec:91:d7:98:b1:92:36:96:e6:c5:a4:
15:0d:63:6c:80:f9:7e:b8:d3:9f:b1:dc:21:02:fb:
84:5a:0b:1c:a1:e7:1d:61:e3:ae:89:b3:50:1e:cc:
f2:b3:fb:6f:a6:c9:45:2f:c4:7f:c3:c3:77:d6:5a:
54:84:ad:ed:74:3b:93:92:bd:a9:84:7a:f3:c8:dc:
08:e8:c7:97:d8:99:99:94:35:b2:ff:e8:39:4d:fe:
6b:6d:e9:8f:d9:16:76:38:be:0b:0b:8d:63:5b:3f:
e1:b6:b6:4d:94:62:3e:2f:48:e0:78:c0:e6:7c:be:
cb:f9:e4:73:ac:68:c9:13:97:f7:ef:af:24:a8:8c:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:3C:34:95:C7:70:46:AA:BB:80:1B:BB:94:B1:42:1D:DF:06:95
X509v3 Authority Key Identifier:
keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/8y88NJXHcEaqu4Abu5SxQh3fBpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:29:e4:ac:4f:03:6c:74:2c:97:2e:63:ae:f8:d6:88:1e:b9:
eb:28:b2:52:fc:8e:76:95:c4:7d:04:85:e6:7c:47:22:90:27:
4d:ec:3c:42:31:f4:39:08:5b:ff:b6:78:63:22:ad:aa:9c:3c:
c6:01:c2:0f:e0:b0:2d:01:2a:c7:56:cb:58:73:74:60:6a:d1:
6a:fb:28:c9:36:85:94:a4:46:42:88:7d:cd:80:24:c3:ab:72:
5f:4f:2d:99:c9:f3:09:4c:1d:ea:96:28:52:db:fc:51:2f:78:
6f:93:10:7a:92:7d:7e:06:38:55:b0:c0:96:d3:3c:e7:3e:65:
68:0c:0d:be:dc:8a:b3:70:12:a9:d1:e8:7d:50:7b:76:1e:36:
98:d7:a3:23:16:da:8e:a2:74:e8:b7:f6:ce:fe:35:0a:2f:15:
d8:d3:df:cb:e8:7e:d4:2d:10:f3:72:ef:0d:ac:63:6d:72:88:
93:71:97:7a:38:08:cf:c3:31:91:9d:22:42:15:dd:d1:24:ec:
7a:24:17:78:b8:96:79:70:8b:5a:43:c7:dc:bc:1e:15:09:ba:
03:11:8f:c9:4f:b7:1e:a8:c7:ac:ed:17:b1:fb:9e:95:54:e5:
41:22:ad:8a:48:e5:0e:c8:0c:d0:b2:7d:4e:7e:43:40:b6:ad:
85:2a:6d:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxCEser4KkxZGEGI92IF8r2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy
ODE1YjkwHhcNMjYwMjA5MTEwNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzJmM2MzNDk1Yzc3MDQ2YWFiYjgwMWJiYjk0YjE0MjFkZGYwNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNStWbG5PCCI6/RD3OnpciPiMydP
T9xkSSbQQibV6jAF/mGTpKDZ7kWOe0uYSQfV79S1bBYoGJXNweE88b1tYXmrnIkH
QHYo3j0saKAjFevsBHIppwewPDWI6UJQscAa3ootvkL3xXRlULblAokhmUtKXXIO
RjSpyifd7JHXmLGSNpbmxaQVDWNsgPl+uNOfsdwhAvuEWgscoecdYeOuibNQHszy
s/tvpslFL8R/w8N31lpUhK3tdDuTkr2phHrzyNwI6MeX2JmZlDWy/+g5Tf5rbemP
2RZ2OL4LC41jWz/htrZNlGI+L0jgeMDmfL7L+eRzrGjJE5f3768kqIwTQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPMvPDSVx3BGqruAG7uUsUId3waVMB8GA1UdIwQY
MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt
YTQ5Y2JiODRmOTgyLzEvOHk4OE5KWEhjRWFxdTRBYnU1U3hRaDNmQnBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy
LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYV3MA0G
CSqGSIb3DQEBCwUAA4IBAQA7KeSsTwNsdCyXLmOu+NaIHrnrKLJS/I52lcR9BIXm
fEcikCdN7DxCMfQ5CFv/tnhjIq2qnDzGAcIP4LAtASrHVstYc3RgatFq+yjJNoWU
pEZCiH3NgCTDq3JfTy2ZyfMJTB3qlihS2/xRL3hvkxB6kn1+BjhVsMCW0zznPmVo
DA2+3IqzcBKp0eh9UHt2HjaY16MjFtqOonTot/bO/jUKLxXY09/L6H7ULRDzcu8N
rGNtcoiTcZd6OAjPwzGRnSJCFd3RJOx6JBd4uJZ5cItaQ8fcvB4VCboDEY/JT7ce
qMes7Rex+56VVOVBIq2KSOUOyAzQsn1OfkNAtq2FKm2l
-----END CERTIFICATE-----
Generated at Sun Feb 22 23:24:10 2026 by rpki-client