Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/8q5SOtvB_yY9BochGKws-XhfpDs.roa
File: 8q5SOtvB_yY9BochGKws-XhfpDs.roa (raw, json)
Hash identifier: lJmySLD1RJUNFVS1giItmsI7YMmCXo1lRjwQjwY3xvc=
Subject key identifier: F2:AE:52:3A:DB:C1:FF:26:3D:06:87:21:18:AC:2C:F9:78:5F:A4:3B
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 01A0E995A7E06F1B6A9DFC10D699BFF15760
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/8q5SOtvB_yY9BochGKws-XhfpDs.roa
Signing time: Mon 28 Sep 2026 19:54:54 +0000
ROA not before: Mon 28 Sep 2026 19:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21473
IP address blocks: 93.190.248.0/21 maxlen: 21
109.233.144.0/21 maxlen: 24
185.28.4.0/22 maxlen: 24
212.65.0.0/19 maxlen: 24
2a00:1e80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:95:a7:e0:6f:1b:6a:9d:fc:10:d6:99:bf:f1:57:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Sep 28 19:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2ae523adbc1ff263d06872118ac2cf9785fa43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:60:a3:b5:20:98:64:89:65:6a:00:28:d6:
56:80:46:e2:a5:34:39:a7:12:1e:93:3f:71:fe:e4:
64:ac:75:42:aa:ef:67:1c:90:87:df:fe:95:71:f7:
c9:5b:f0:5d:32:9a:a5:91:e5:d3:ec:1f:a8:63:dc:
8b:bc:ac:23:05:9c:4d:5d:8d:f2:8c:33:d2:ff:a0:
c0:b8:cf:cc:cd:48:79:a7:e1:72:9d:17:c4:d6:38:
3b:08:9a:35:19:c8:40:2c:2f:73:3b:b4:ae:ab:d8:
8f:bc:ab:9a:77:df:ff:9e:15:1f:a1:de:8b:2f:25:
27:ae:36:b3:7d:5d:5c:af:99:38:4a:16:a2:50:a7:
0a:f4:5f:a1:fb:6c:88:aa:a1:ec:b2:02:85:65:36:
f0:c4:a0:e2:bf:5e:6d:1c:e4:4c:5f:08:2d:7d:5d:
c7:7a:60:fb:b3:58:da:68:5d:32:ad:31:15:36:85:
65:a4:27:4f:16:ef:77:4e:f4:5a:73:e8:9f:9c:a5:
26:1f:a2:31:8a:fa:ab:4d:df:84:b6:68:a1:f9:19:
7b:cf:f2:e4:02:62:01:9d:90:48:98:18:cd:4e:5b:
b7:99:f4:1b:8e:22:66:16:db:5f:2b:b2:e8:c5:1a:
7d:98:02:d6:38:14:86:bb:be:6c:7b:b5:6d:24:f1:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:52:3A:DB:C1:FF:26:3D:06:87:21:18:AC:2C:F9:78:5F:A4:3B
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/8q5SOtvB_yY9BochGKws-XhfpDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.248.0/21
109.233.144.0/21
185.28.4.0/22
212.65.0.0/19
IPv6:
2a00:1e80::/32
Signature Algorithm: sha256WithRSAEncryption
8c:a3:af:be:3f:c9:49:1a:28:0c:20:e5:2a:73:d8:77:6c:37:
69:0a:7f:3c:df:0d:33:66:74:8c:64:8a:7f:7c:a6:02:4d:71:
dc:05:00:7f:23:5f:77:70:c0:a2:3a:01:47:2b:de:8a:4c:a5:
3a:b7:bf:86:42:89:50:cc:44:c9:4c:60:c9:e3:fd:c1:25:32:
70:56:0e:26:53:30:89:55:37:9c:81:b8:44:a5:11:f3:fd:24:
46:7f:e1:eb:fd:60:67:42:1a:17:48:cd:e0:e2:30:62:9b:b0:
51:a2:0d:0e:24:ce:33:e9:15:ac:c9:e2:d0:dd:61:ea:5e:b1:
44:f3:34:36:7a:60:bd:d2:b0:1c:70:72:64:54:ac:8f:07:dd:
29:3e:34:2c:32:1a:e5:89:72:4c:41:8c:a6:3e:38:f0:d8:c9:
25:a0:4a:46:09:ea:9c:b7:48:63:05:e6:f4:14:7d:dc:7f:e2:
4a:7d:44:4e:13:00:0b:c9:d1:8a:42:be:f0:a4:f5:02:00:f6:
bc:73:bf:b6:45:48:bd:b2:87:50:c3:57:f7:e1:32:17:d4:9b:
3f:69:e2:9d:3c:ae:da:76:8f:17:f5:52:8c:e3:17:13:f9:92:
31:76:cd:73:c3:68:43:0a:ef:67:f3:35:29:34:0f:64:0b:26:
8c:f0:62:75
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAaDplafgbxtqnfwQ1pm/8VdgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YjZmMDdiMTczMzYwZjIxNWYxNTE4Yzg3MTJhNGIwNTRk
ODVjMDcwHhcNMjYwOTI4MTk1NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmFlNTIzYWRiYzFmZjI2M2QwNjg3MjExOGFjMmNmOTc4NWZhNDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXBgo7UgmGSJZWoAKNZWgEbipTQ5
pxIekz9x/uRkrHVCqu9nHJCH3/6VcffJW/BdMpqlkeXT7B+oY9yLvKwjBZxNXY3y
jDPS/6DAuM/MzUh5p+FynRfE1jg7CJo1GchALC9zO7Suq9iPvKuad9//nhUfod6L
LyUnrjazfV1cr5k4ShaiUKcK9F+h+2yIqqHssgKFZTbwxKDiv15tHORMXwgtfV3H
emD7s1jaaF0yrTEVNoVlpCdPFu93TvRac+ifnKUmH6IxivqrTd+Etmih+Rl7z/Lk
AmIBnZBImBjNTlu3mfQbjiJmFttfK7LoxRp9mALWOBSGu75se7VtJPEAIwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPKuUjrbwf8mPQaHIRisLPl4X6Q7MB8GA1UdIwQY
MBaAFMa28HsXM2DyFfFRjIcSpLBU2FwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTct
MjhkOTRmY2IxMDg4LzEvOHE1U090dkJfeVk5Qm9jaEdLd3MtWGhmcERzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTctMjhkOTRmY2IxMDg4
LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDXb74AwQD
bemQAwQCuRwEAwQF1EEAMA0EAgACMAcDBQAqAB6AMA0GCSqGSIb3DQEBCwUAA4IB
AQCMo6++P8lJGigMIOUqc9h3bDdpCn883w0zZnSMZIp/fKYCTXHcBQB/I193cMCi
OgFHK96KTKU6t7+GQolQzETJTGDJ4/3BJTJwVg4mUzCJVTecgbhEpRHz/SRGf+Hr
/WBnQhoXSM3g4jBim7BRog0OJM4z6RWsyeLQ3WHqXrFE8zQ2emC90rAccHJkVKyP
B90pPjQsMhrliXJMQYymPjjw2MkloEpGCeqct0hjBeb0FH3cf+JKfUROEwALydGK
Qr7wpPUCAPa8c7+2RUi9sodQw1f34TIX1Js/aeKdPK7ado8X9VKM4xcT+ZIxds1z
w2hDCu9n8zUpNA9kCyaM8GJ1
-----END CERTIFICATE-----
Generated at Mon Nov 2 23:15:32 2026 by rpki-client