Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/b8TCzlfofvmQBp5ln0FqUlWHxqs.roa
File: b8TCzlfofvmQBp5ln0FqUlWHxqs.roa (raw, json)
Hash identifier: mibgsDF2vOF5jB0BgxSZtBehyAPFLfMy1370e6o3F+E=
Subject key identifier: 6F:C4:C2:CE:57:E8:7E:F9:90:06:9E:65:9F:41:6A:52:55:87:C6:AB
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 019FB21912D0E6DB8FABC67F45ED07E93A97
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/b8TCzlfofvmQBp5ln0FqUlWHxqs.roa
Signing time: Thu 30 Jul 2026 08:16:55 +0000
ROA not before: Thu 30 Jul 2026 08:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214849
IP address blocks: 138.222.64.0/24 maxlen: 24
138.222.66.0/24 maxlen: 24
138.222.68.0/24 maxlen: 24
138.222.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:19:12:d0:e6:db:8f:ab:c6:7f:45:ed:07:e9:3a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Jul 30 08:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fc4c2ce57e87ef990069e659f416a525587c6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:66:ca:4f:23:83:e2:79:d5:d4:6a:1b:d0:
05:fc:aa:02:d8:bc:02:98:62:51:99:75:3e:c4:3b:
59:e5:0d:26:d8:30:a2:71:b8:64:70:f3:40:9d:df:
90:69:19:b0:03:17:64:3f:b3:94:2f:be:ec:cf:72:
06:7e:d0:07:ff:6c:a3:4b:cc:81:82:60:2a:b6:5c:
91:25:e2:65:b6:16:c6:58:87:5b:90:5d:ef:95:ca:
42:e8:fc:75:2b:92:45:52:5f:49:fe:65:b6:57:c2:
fd:4e:5b:f6:55:12:1c:eb:bf:9d:bd:7d:b0:60:2d:
74:f7:ff:37:69:81:1f:b8:28:dc:22:53:61:3c:8c:
3c:78:99:d2:a7:24:b4:1b:ee:93:5e:3a:04:f9:31:
91:b9:a1:57:f1:5c:f2:b7:d5:f2:b1:fe:76:22:d1:
b0:5b:a4:3d:ab:d7:88:17:12:c2:82:e8:4b:fa:07:
3a:5f:f9:f5:e4:86:a5:ad:15:72:a2:2f:33:67:3e:
e7:84:ce:88:60:3b:59:86:a2:9f:82:4d:eb:ca:be:
13:65:b3:8e:d2:fe:8e:09:b1:17:f9:72:f4:2d:55:
87:97:ba:45:92:b1:a4:2d:71:30:b4:aa:30:29:02:
e7:6b:0d:b1:9a:a3:c1:a7:34:96:68:16:03:0d:9d:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C4:C2:CE:57:E8:7E:F9:90:06:9E:65:9F:41:6A:52:55:87:C6:AB
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/b8TCzlfofvmQBp5ln0FqUlWHxqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.222.64.0/24
138.222.66.0/24
138.222.68.0/23
Signature Algorithm: sha256WithRSAEncryption
18:92:6f:aa:30:e7:f7:a6:6f:84:3e:35:dc:e0:0a:e0:71:fe:
d8:26:af:71:dc:35:a3:79:fb:35:93:a3:25:2f:9a:7e:91:d8:
47:46:4d:c7:68:43:bb:81:a1:ed:6a:94:14:7b:42:01:d8:78:
5c:27:90:34:e0:2c:19:06:36:ff:c2:37:e3:7f:1f:69:df:9e:
a6:60:5d:9b:b4:16:b8:62:84:b2:52:5d:7a:d7:aa:b8:81:49:
45:23:8b:20:7b:94:f8:9b:ee:30:ea:23:8f:5d:36:95:16:54:
81:6b:5a:2b:21:3e:4d:a6:7d:e9:b3:64:26:22:07:87:f3:46:
0d:e4:5d:c6:35:1e:2d:e5:85:0f:3e:9f:92:5e:78:51:56:42:
cd:f3:cf:1d:53:ef:5f:5c:33:03:bd:36:27:51:26:32:5e:5a:
eb:72:38:98:82:34:f0:4c:0a:5e:de:5c:da:83:fe:e7:b2:74:
26:75:d2:e8:75:b6:98:ab:27:a5:6a:bf:dd:5b:9b:be:b3:cb:
8f:73:53:dc:d2:60:4c:32:9e:6d:57:68:1f:42:df:8d:f9:54:
50:98:da:33:5a:dd:c8:93:1c:e6:91:8b:fb:f9:8e:dc:55:50:
e3:7f:0f:17:89:8c:3e:41:57:eb:15:75:f4:6d:45:1c:cc:08:
e0:7a:1c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:47 2026 by rpki-client