Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/8i5Ds-N-roh3aLA1xwfcTEEswQE.roa
File: 8i5Ds-N-roh3aLA1xwfcTEEswQE.roa (raw, json)
Hash identifier: rwy4JFH9zpztXM4MraEw5nOMWLCJcPLmRgbD+aZVpPg=
Subject key identifier: F2:2E:43:B3:E3:7E:AE:88:77:68:B0:35:C7:07:DC:4C:41:2C:C1:01
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 019B79ED1D84200AC0DE7CC3EE6043B4E6FD
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/8i5Ds-N-roh3aLA1xwfcTEEswQE.roa
Signing time: Thu 01 Jan 2026 14:19:01 +0000
ROA not before: Thu 01 Jan 2026 14:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201071
IP address blocks: 91.109.248.0/21 maxlen: 21
92.249.5.0/24 maxlen: 24
217.147.120.0/24 maxlen: 24
217.147.121.0/24 maxlen: 24
217.147.122.0/24 maxlen: 24
217.147.124.0/22 maxlen: 22
217.147.124.0/24 maxlen: 24
217.147.125.0/24 maxlen: 24
217.147.126.0/24 maxlen: 24
217.147.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 15:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:1d:84:20:0a:c0:de:7c:c3:ee:60:43:b4:e6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jan 1 14:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f22e43b3e37eae887768b035c707dc4c412cc101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:fb:48:ed:88:56:37:0b:fd:b9:5f:42:54:
61:e4:3c:5f:f9:50:b2:09:e6:dc:41:4e:bf:11:56:
98:52:af:68:a3:29:db:62:04:71:87:ea:ce:5b:a4:
61:c4:d6:0d:51:0c:08:f2:3c:1b:4e:2e:f9:86:e9:
a7:74:f4:6d:86:f4:5b:d5:13:b9:14:82:14:5f:9d:
fd:0f:6c:3f:a4:8a:94:33:83:9c:c2:3e:63:e6:39:
b4:62:1c:b9:6c:00:41:eb:a3:91:20:a4:e4:d5:0e:
da:90:cf:87:20:62:97:3a:d9:69:90:0e:88:ad:8d:
2e:8f:55:4e:fc:91:7c:55:79:7a:96:ab:9c:2d:25:
b3:26:71:9c:08:b4:88:59:87:91:ca:51:2b:71:ef:
a1:a7:0c:f0:d9:aa:00:35:fd:6b:ed:6c:a3:31:df:
27:98:eb:39:21:16:7c:d9:64:cf:9a:2b:ad:a1:65:
94:85:93:c8:a3:2a:16:fe:6d:f3:44:a2:1b:16:bb:
f1:da:a8:3c:18:8e:95:6c:71:24:c0:ce:50:de:d9:
4f:7d:37:4e:02:91:4f:d2:f9:25:a6:fe:f1:3b:bd:
ae:51:9e:71:dc:be:bb:28:50:80:e5:d2:7f:46:e8:
c1:d4:3a:bd:02:e5:f7:4f:51:27:f4:52:ca:fe:6e:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:43:B3:E3:7E:AE:88:77:68:B0:35:C7:07:DC:4C:41:2C:C1:01
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/8i5Ds-N-roh3aLA1xwfcTEEswQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.248.0/21
92.249.5.0/24
217.147.120.0-217.147.122.255
217.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:99:54:8f:78:ca:27:b4:5d:52:94:34:63:02:93:05:e1:79:
3f:16:8a:95:f7:55:b5:d3:f9:68:7a:9f:b3:06:cb:aa:ef:c0:
51:92:df:07:18:cf:b2:24:d1:73:84:6b:a7:c9:71:7f:76:8d:
c5:a0:af:7f:60:59:fd:69:ce:60:93:49:e2:ab:f7:30:8e:5c:
88:ec:36:88:53:68:42:9e:7b:ae:e3:81:46:5e:d1:e0:11:f9:
bd:cd:d1:70:d8:b7:07:3e:c4:31:46:df:11:c2:85:35:69:4c:
c7:de:0c:57:85:a5:78:41:8b:2b:70:34:17:33:d5:c7:eb:0e:
2c:f4:87:89:e5:9a:fc:73:6f:90:00:94:8f:d2:63:31:19:d9:
d1:12:26:de:e3:42:fa:ba:22:25:c7:f7:be:ab:b9:25:eb:ba:
21:11:16:6d:0f:b2:12:cd:70:3f:c7:a0:72:55:19:e7:28:ef:
c8:79:f6:e1:c5:c3:6f:df:b6:a5:50:57:9d:c2:84:c8:3f:68:
5b:d2:82:1f:e9:6b:8b:13:37:11:62:b2:b6:00:59:56:99:85:
26:e4:35:e0:ba:82:e3:8a:04:2f:4d:b9:d6:65:f4:ef:b5:61:
1b:df:90:3a:ed:0a:39:15:a7:f0:59:1c:6e:1d:86:be:ad:36:
6e:c0:1a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 22:12:53 2026 by rpki-client