Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/9j2FcC2U29wuz6o77FU5UslVHlY.roa
File: 9j2FcC2U29wuz6o77FU5UslVHlY.roa (raw, json)
Hash identifier: Tz2zqGtBnX7rnC8POXIivz1ucL35eHnIlK/9FL04pu8=
Subject key identifier: F6:3D:85:70:2D:94:DB:DC:2E:CF:AA:3B:EC:55:39:52:C9:55:1E:56
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 01A144480AD42884D28309A35999FEC31755
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/9j2FcC2U29wuz6o77FU5UslVHlY.roa
Signing time: Fri 16 Oct 2026 10:35:34 +0000
ROA not before: Fri 16 Oct 2026 10:35:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8542
IP address blocks: 62.97.192.0/18 maxlen: 18
82.134.0.0/17 maxlen: 17
85.200.0.0/16 maxlen: 16
185.58.68.0/22 maxlen: 22
185.165.196.0/22 maxlen: 22
193.28.236.0/24 maxlen: 24
213.153.0.0/19 maxlen: 19
2001:67c:324::/48 maxlen: 48
2a00:14d8::/29 maxlen: 29
2a0a:2200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:48:0a:d4:28:84:d2:83:09:a3:59:99:fe:c3:17:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Oct 16 10:35:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f63d85702d94dbdc2ecfaa3bec553952c9551e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:6a:57:0c:07:0f:06:30:36:00:43:0c:0e:
8e:0d:ce:99:0d:7f:4e:d6:73:7b:1a:9f:4d:e6:39:
88:7d:ea:ba:dc:aa:27:78:75:1c:ae:6f:6a:b3:98:
18:a1:e7:7f:5b:a7:dd:a3:58:1f:f2:24:26:6f:5f:
33:24:6d:5c:33:02:cb:c2:34:56:b9:ee:87:5e:b9:
c2:7f:ca:19:2f:35:2b:f2:b1:ae:94:2c:1a:87:73:
21:f7:1b:0e:75:a8:3a:45:cd:6a:55:74:21:60:a7:
d6:02:f5:a5:3c:65:cf:b0:4c:84:36:b1:2b:ed:38:
c7:76:e1:e4:5f:87:f8:b0:36:f5:09:43:a2:a3:96:
d9:1e:09:ba:c1:24:45:f3:f1:01:53:ec:ae:e1:5e:
d8:da:99:cc:7c:93:ae:33:f7:1f:94:78:4b:29:50:
ec:47:33:1f:e5:46:8d:ca:52:22:a8:8d:a7:ba:86:
40:d0:98:d4:06:a3:85:80:5e:15:83:5e:a8:33:bb:
74:dd:23:fb:1f:32:1b:9e:f0:7a:9c:b1:3e:57:82:
36:ce:7d:58:ed:85:8c:e6:09:1c:e7:32:76:49:af:
04:d8:71:63:c3:fd:d1:6c:fe:81:94:94:95:9f:3e:
83:e6:a7:8f:11:60:f3:9f:61:54:37:27:e9:cf:46:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3D:85:70:2D:94:DB:DC:2E:CF:AA:3B:EC:55:39:52:C9:55:1E:56
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/9j2FcC2U29wuz6o77FU5UslVHlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.97.192.0/18
82.134.0.0/17
85.200.0.0/16
185.58.68.0/22
185.165.196.0/22
193.28.236.0/24
213.153.0.0/19
IPv6:
2001:67c:324::/48
2a00:14d8::/29
2a0a:2200::/29
Signature Algorithm: sha256WithRSAEncryption
79:bd:f4:2f:0d:ab:38:93:1d:11:e4:9f:e8:46:34:bf:2f:d6:
7d:0b:b8:a3:28:12:54:d6:6a:e1:c2:5c:86:f9:a9:1a:09:58:
d9:9c:41:49:b3:b8:bb:08:5a:05:b9:27:08:24:6b:0a:f7:c4:
71:4f:0d:1f:e1:74:6f:85:5c:13:bc:5f:01:8f:27:46:1d:08:
9c:76:9f:5a:e3:15:e1:23:34:14:3d:f5:cc:b6:d2:a9:1f:7d:
db:3d:2d:84:a4:64:c1:ae:12:65:cd:d0:cd:1e:91:b5:7f:33:
b3:3f:97:16:eb:50:27:f7:40:7b:97:41:bc:fd:90:91:62:d2:
b5:2c:e2:50:8d:4d:3e:7e:13:d8:6e:41:31:3f:f7:10:80:17:
9f:0b:ce:92:72:52:54:9d:56:f8:6a:b6:97:6d:31:a5:c9:b9:
95:9a:4e:c2:b7:0b:54:6f:85:30:98:2b:94:b8:ac:b1:76:34:
5c:ab:07:19:3f:46:de:b2:1c:3a:37:5e:d1:2f:e2:2d:ab:ff:
e7:49:d6:bb:36:11:6a:68:1b:17:ec:f8:64:78:ff:58:69:90:
22:ff:4d:34:f4:b6:3e:9e:ef:bb:d9:b2:4f:1c:9e:a4:26:8b:
d4:66:28:29:e8:56:12:93:b4:d4:0c:68:c0:35:94:ad:c2:c3:
b6:23:ee:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 08:10:47 2026 by rpki-client