Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/S8ku3gf4vWkmxFBDkBkEiAy9So4.roa
File: S8ku3gf4vWkmxFBDkBkEiAy9So4.roa (raw, json)
Hash identifier: DxiREQgQfDk48dsaRbdhgiH4PUmwi+B75L8QRMAKRYY=
Subject key identifier: 4B:C9:2E:DE:07:F8:BD:69:26:C4:50:43:90:19:04:88:0C:BD:4A:8E
Certificate issuer: /CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Certificate serial: 019F236832338D4F34966818CD01280AD492
Authority key identifier: 4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/S8ku3gf4vWkmxFBDkBkEiAy9So4.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41625
IP address blocks: 89.31.240.0/21 maxlen: 21
89.31.242.0/24 maxlen: 24
89.31.246.0/24 maxlen: 24
185.219.90.0/24 maxlen: 24
2a00:8900::/32 maxlen: 48
2a00:8900:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:32:33:8d:4f:34:96:68:18:cd:01:28:0a:d4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bc92ede07f8bd6926c45043901904880cbd4a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:1c:90:fb:29:1e:bf:3c:66:82:48:9f:d7:
db:27:09:66:d5:d6:41:ee:7f:1a:9a:30:0a:2e:8f:
34:81:a3:86:3b:e3:be:71:e9:05:67:4c:0b:60:6a:
91:57:c4:4a:fc:3c:67:c6:54:b3:60:78:f4:e5:a0:
3c:14:68:0b:28:5c:da:d5:b2:f0:b4:c4:74:e7:11:
7c:6e:36:44:11:fe:94:73:a7:68:32:32:08:c0:a0:
4d:2a:3e:4f:ae:84:cb:93:43:71:5c:45:a5:34:5f:
8d:59:17:9c:d8:87:61:35:3b:86:17:fb:11:5a:5e:
06:d7:cf:70:49:17:7f:e9:ba:df:85:1f:0a:80:e3:
10:62:80:f0:d0:40:82:24:a4:76:f3:65:a9:da:f0:
79:09:d7:0a:df:ec:1a:69:09:8b:ac:f9:44:00:3d:
3f:79:d7:44:95:e4:84:14:07:ce:0a:d2:ef:95:e4:
4b:ba:bd:e4:fc:89:e1:8e:87:f1:74:8c:8d:d0:92:
94:e5:80:a2:b6:82:fb:09:19:4b:87:76:92:c0:82:
f1:f9:3a:8f:ae:5e:4d:e9:9b:e1:83:c5:88:ec:d4:
04:b9:70:3c:60:58:dc:77:b1:ac:06:52:9a:36:92:
c9:4d:b5:9c:ac:32:02:77:5b:62:b1:99:1d:84:fd:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:2E:DE:07:F8:BD:69:26:C4:50:43:90:19:04:88:0C:BD:4A:8E
X509v3 Authority Key Identifier:
keyid:4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/S8ku3gf4vWkmxFBDkBkEiAy9So4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.240.0/21
185.219.90.0/24
IPv6:
2a00:8900::/32
Signature Algorithm: sha256WithRSAEncryption
4c:b5:2d:1e:a4:ee:7f:4b:c5:f7:4a:0f:ec:c1:32:cc:d3:28:
51:44:b2:54:c1:53:92:59:33:30:e2:96:f4:9d:9f:4b:f6:c1:
73:86:73:90:e0:21:f7:f6:25:56:87:41:92:55:24:e4:06:84:
8d:cf:af:ed:32:a2:9d:21:a5:40:bd:e0:56:1f:6d:25:9a:32:
8b:dd:e8:6e:87:21:7e:70:1e:4b:5a:5d:f4:0a:9b:bc:50:f4:
79:34:b0:13:bb:9f:b6:e2:8d:15:99:c7:ec:1f:79:ef:75:a6:
f6:5d:a6:97:88:4a:20:30:48:07:4a:96:ed:16:c5:38:ca:3c:
93:45:0d:8c:76:a6:4e:1c:2b:9d:54:07:6d:88:c1:1b:86:36:
6a:fa:4d:c4:e8:32:09:fa:94:54:03:48:bb:cc:9f:21:3b:86:
3e:ec:56:ef:01:b5:9e:0f:13:27:50:80:3f:d9:07:06:44:1a:
de:1c:75:a5:26:6a:0e:78:8d:2b:28:ec:e7:6d:d7:b5:27:0b:
a6:29:2c:00:8e:cb:8e:92:30:92:32:d4:e3:73:9a:3c:32:a0:
33:7c:c1:00:36:c8:07:f0:c0:94:f3:bc:b4:16:a2:5f:5d:21:
7f:65:2b:f9:58:97:99:c4:c3:98:5c:74:17:1b:5a:a8:48:55:
d3:b3:12:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 04:05:35 2026 by rpki-client