Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/A8fuN3hKmVPqP7pMa09qtcvbX7A.roa
File: A8fuN3hKmVPqP7pMa09qtcvbX7A.roa (raw, json)
Hash identifier: sSXOBiLkKAwJABeAMq2quFiUXFv1n7C6fQ6XH8jtLQw=
Subject key identifier: 03:C7:EE:37:78:4A:99:53:EA:3F:BA:4C:6B:4F:6A:B5:CB:DB:5F:B0
Certificate issuer: /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Certificate serial: 019DD40BB147DE44A5185D8A9FBFAA906780
Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/A8fuN3hKmVPqP7pMa09qtcvbX7A.roa
Signing time: Tue 28 Apr 2026 12:23:49 +0000
ROA not before: Tue 28 Apr 2026 12:23:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57724
IP address blocks: 45.155.60.0/24 maxlen: 24
176.57.64.0/23 maxlen: 23
176.57.66.0/24 maxlen: 24
176.57.67.0/24 maxlen: 24
185.215.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:0b:b1:47:de:44:a5:18:5d:8a:9f:bf:aa:90:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Validity
Not Before: Apr 28 12:23:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03c7ee37784a9953ea3fba4c6b4f6ab5cbdb5fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:6b:ef:cb:ff:0d:97:39:71:d2:40:85:a6:
81:05:37:32:00:cc:4d:2b:3a:5f:f2:60:19:53:3e:
bd:44:d6:34:61:27:2b:48:54:19:b0:e8:f1:b9:8b:
71:a4:5f:e4:9d:6f:43:c9:16:bb:a0:f6:df:9e:db:
ec:b5:85:aa:99:b0:5f:5d:5c:c6:a5:c9:e7:6a:d8:
c5:77:6e:fa:d1:1b:25:01:21:fc:d1:86:d5:94:92:
7d:47:fc:57:ed:f1:4a:1f:51:ab:bf:b5:6e:2b:39:
52:4d:5d:c6:32:9f:d3:1c:51:44:3f:64:0d:c0:a4:
f6:e0:34:04:5e:e8:d4:57:f7:34:b6:e1:d2:9d:6c:
47:cb:e1:97:53:22:fc:7a:aa:11:48:b1:b7:37:b6:
ee:a3:e2:10:13:d3:d6:07:45:b4:73:bc:4e:df:8f:
03:94:f4:11:9e:7f:df:71:0f:89:58:69:26:47:c9:
ce:b5:f0:6a:67:6e:71:98:a5:b3:68:73:0a:ef:b7:
84:6f:bd:60:ba:77:a2:3e:62:86:8e:5f:1d:e4:52:
75:da:52:43:f2:d0:0e:a9:a2:a9:0d:33:e3:78:6d:
17:d2:93:c8:f0:ab:e0:3a:84:25:99:ac:6b:e3:4a:
b5:6a:f8:66:cd:0c:bf:64:bc:c1:51:cb:4b:7d:8e:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C7:EE:37:78:4A:99:53:EA:3F:BA:4C:6B:4F:6A:B5:CB:DB:5F:B0
X509v3 Authority Key Identifier:
keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/A8fuN3hKmVPqP7pMa09qtcvbX7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.60.0/24
176.57.64.0/22
185.215.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:97:35:b5:9a:98:b1:44:10:7f:78:46:8e:8d:ad:48:26:f5:
e1:90:2d:08:f6:ef:75:60:e6:ff:e5:6a:0d:80:ec:0f:e9:7d:
7c:2e:f0:b5:d3:42:9e:5e:56:3a:8d:80:5b:17:88:02:15:8f:
39:91:f2:b0:ca:e9:24:32:6c:a3:9f:d0:b0:34:84:b0:87:e5:
35:88:50:47:16:c0:7c:af:5a:f1:d8:d3:46:1c:08:3d:c9:fa:
69:49:ca:ad:f8:c2:8e:2b:80:b2:44:1d:ec:b4:9f:5f:49:ea:
af:7f:58:12:5d:68:31:3a:81:ab:7b:4d:f6:90:ef:cf:f4:10:
0e:99:2b:36:38:df:33:85:85:45:86:20:08:af:21:7b:9b:5b:
be:2f:9a:b1:87:07:63:4f:e4:4b:81:a7:e9:f0:36:5f:2f:4e:
7d:bc:05:1f:b0:bf:42:2f:05:2e:20:8a:f8:b2:b2:0b:d5:a6:
84:9b:07:15:83:8e:2b:10:af:81:ca:97:fd:0e:be:ee:3c:39:
8f:36:58:fe:9a:c5:25:31:e8:43:4a:c3:52:37:e2:ed:8e:c7:
53:dc:19:e1:27:91:37:5f:af:a0:ec:92:74:82:b4:5d:fd:9b:
3d:0c:ea:47:a1:13:90:80:38:c7:21:4e:33:c6:0f:e8:fa:f9:
ac:6f:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:09:09 2026 by rpki-client