Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/t8lhPpnb3jBYI7JFlQQfV9cLCwY.roa
File: t8lhPpnb3jBYI7JFlQQfV9cLCwY.roa (raw, json)
Hash identifier: 7Oegrqcmc5k3ZrtmRr9RVKtmbCenTomOyuIvGLuIKzQ=
Subject key identifier: B7:C9:61:3E:99:DB:DE:30:58:23:B2:45:95:04:1F:57:D7:0B:0B:06
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 019FAE10E3568DA69396118E97D724258435
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/t8lhPpnb3jBYI7JFlQQfV9cLCwY.roa
Signing time: Wed 29 Jul 2026 13:29:30 +0000
ROA not before: Wed 29 Jul 2026 13:29:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204272
IP address blocks: 45.155.144.0/22 maxlen: 22
168.113.240.0/22 maxlen: 22
185.108.208.0/22 maxlen: 22
2a05:4100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:10:e3:56:8d:a6:93:96:11:8e:97:d7:24:25:84:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: Jul 29 13:29:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7c9613e99dbde305823b24595041f57d70b0b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:f7:52:35:33:cf:15:70:fa:18:ed:4e:95:
33:27:08:4d:db:92:1b:9e:0a:24:15:e5:fc:b6:b6:
1b:bc:6c:10:06:b6:36:aa:45:a9:41:7b:e1:9f:ef:
b6:e1:58:6f:56:e9:1d:ca:82:e2:3a:49:0f:41:87:
ce:ea:8b:3c:c8:ca:de:68:af:57:34:9a:76:fb:64:
8d:cc:48:ad:60:cf:a6:50:47:dc:20:2c:e5:89:52:
b8:05:00:52:00:07:0c:b1:fb:52:1a:26:56:6a:d2:
b6:b9:c6:f4:e7:29:b4:10:53:fe:20:3c:19:59:24:
b3:1b:5e:94:c8:9d:f2:23:b4:e2:a6:1b:34:ff:3b:
59:c8:58:1c:6d:50:43:0c:05:02:42:14:3c:23:89:
13:33:5a:79:36:43:1b:06:80:1b:d7:32:70:3f:59:
5a:5c:67:0d:d4:e2:fc:56:81:6d:38:35:8c:71:20:
c7:78:f0:18:a3:71:62:b5:45:7a:0f:ac:84:38:63:
69:e9:95:c7:3f:3c:86:28:3c:39:d1:23:fc:48:ac:
47:b6:58:64:2b:dc:63:ac:1b:05:b5:4f:3f:b5:81:
30:df:73:d9:39:a8:60:cc:a0:a9:d5:ad:42:9b:93:
6a:c8:7d:49:7c:99:2b:cd:89:46:49:e2:3f:6b:31:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C9:61:3E:99:DB:DE:30:58:23:B2:45:95:04:1F:57:D7:0B:0B:06
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/t8lhPpnb3jBYI7JFlQQfV9cLCwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.144.0/22
168.113.240.0/22
185.108.208.0/22
IPv6:
2a05:4100::/29
Signature Algorithm: sha256WithRSAEncryption
45:33:f4:cf:32:8d:45:57:1c:ae:f0:6f:0a:51:5c:1f:3c:96:
a3:40:8e:2f:22:8a:8d:10:7c:24:55:a4:02:a0:33:c7:b5:81:
69:63:df:c7:db:91:77:8d:86:2d:ae:1d:ef:c3:81:46:d4:a4:
a2:45:0a:6f:5c:78:02:30:1c:bb:4b:db:09:cb:10:96:e5:44:
df:2b:a8:3f:a5:b2:92:ef:11:39:60:39:2a:de:ba:f2:fb:41:
a8:46:69:0c:fa:89:4a:63:9f:5b:c5:03:d2:e9:23:cd:37:7a:
3b:7e:ea:ee:8e:6e:ec:cb:46:ff:de:d6:f2:32:63:08:4a:eb:
68:b7:9f:45:3d:79:82:b7:07:97:62:d0:af:b7:2a:82:28:f6:
b2:a1:e4:52:5b:9a:fa:ca:5b:4f:01:7c:66:e4:14:b4:40:ea:
a1:be:9f:2a:3c:ec:df:2b:80:4f:3f:e2:4c:54:be:e8:41:57:
3e:d0:db:e2:c1:c5:6b:f1:a2:ee:73:e3:c4:1a:ee:8c:d1:57:
ef:ba:dc:4f:1d:00:0b:af:49:99:c1:9d:c1:84:12:5d:15:ac:
cf:ec:d6:4f:f7:be:09:57:ed:5d:f6:67:fb:b5:0e:4c:94:a0:
e4:c4:42:96:59:b2:53:21:31:6e:9d:78:e6:cc:07:e0:9f:9d:
71:c4:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:28 2026 by rpki-client