Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/8I44W1DgMr0nZPhdUlABXoaCQTo.roa
File: 8I44W1DgMr0nZPhdUlABXoaCQTo.roa (raw, json)
Hash identifier: iGplkgd68u15p9JflOukg3JqxoQvGifeOjxl+QKCbak=
Subject key identifier: F0:8E:38:5B:50:E0:32:BD:27:64:F8:5D:52:50:01:5E:86:82:41:3A
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A05CE9AA70129D36D233424908CECA6D8A
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/8I44W1DgMr0nZPhdUlABXoaCQTo.roa
Signing time: Tue 01 Sep 2026 12:20:12 +0000
ROA not before: Tue 01 Sep 2026 12:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 195.216.186.0/24 maxlen: 24
213.182.192.0/24 maxlen: 24
213.182.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:e9:aa:70:12:9d:36:d2:33:42:49:08:ce:ca:6d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Sep 1 12:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f08e385b50e032bd2764f85d5250015e8682413a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:17:65:c8:4c:f2:1b:63:42:5d:66:bc:bd:
37:86:58:ef:79:41:70:ad:75:ed:99:b2:03:f5:2d:
38:9c:27:4e:2d:d7:7e:ca:96:de:40:f8:8f:d0:4c:
63:86:f9:e7:79:2d:fd:e9:4e:f0:f8:69:78:89:fe:
5a:6d:36:ec:ce:3d:7e:f5:46:17:17:df:04:46:cf:
ee:22:db:12:88:7e:82:ed:b3:9f:23:95:26:b5:84:
89:b6:d2:0b:9c:86:bf:b4:c0:b1:22:bf:18:da:6f:
07:d8:8b:8c:02:c9:3f:d5:ed:61:c6:40:e4:dc:fd:
b9:8d:f5:9a:be:81:22:27:d1:73:b9:97:cd:8c:20:
6f:56:ff:f1:52:37:bd:cf:a0:4c:ca:88:58:58:a4:
d3:cd:2d:d0:eb:10:64:19:a1:74:eb:24:eb:3a:de:
b5:de:66:55:8b:1d:50:f6:6c:39:38:22:21:a9:1b:
fc:6f:4b:8b:fd:ef:4b:bf:b3:69:63:99:3c:5e:33:
5c:f4:65:b2:45:10:20:ad:87:81:50:06:90:df:8b:
35:0a:e5:96:f7:5f:d2:a2:9f:fd:e7:41:f9:c5:30:
73:60:53:64:7f:c4:63:a7:ec:b0:2b:65:55:8a:b7:
8f:8d:d6:a2:ec:f4:a4:6f:0a:09:f2:bb:a1:fe:4a:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8E:38:5B:50:E0:32:BD:27:64:F8:5D:52:50:01:5E:86:82:41:3A
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/8I44W1DgMr0nZPhdUlABXoaCQTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.186.0/24
213.182.192.0/24
213.182.208.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f2:d8:96:be:d5:aa:c5:21:6a:8f:e6:7b:4f:a5:2f:9a:4c:
10:a9:83:9b:42:07:81:55:7e:fe:6c:83:40:63:d5:58:31:f2:
68:a2:5b:73:5d:b1:7a:a6:ea:01:75:2a:3b:78:c0:13:cc:68:
e8:ad:7b:18:80:2d:10:ca:7e:27:69:7c:bc:e5:34:a5:4f:a0:
9a:aa:b8:df:f5:a4:eb:e0:9a:7f:99:64:d6:73:ae:20:b1:3f:
43:ed:3a:99:12:83:67:2f:2f:03:23:c3:28:e1:b6:e5:b1:92:
f6:c0:9c:94:f9:7d:11:c8:36:2d:c0:13:ac:99:86:ec:c2:5e:
2e:cf:bb:1b:7c:c3:94:20:c2:75:a9:5e:5e:d2:9f:f4:5c:f7:
4a:34:ec:83:cc:9c:47:da:dc:7f:a9:5c:8f:53:23:03:58:8d:
37:60:32:41:00:29:44:b3:6f:3c:e8:cf:ee:3a:44:c5:5e:49:
4f:cd:f8:94:87:f2:4d:c5:f5:1b:9a:4b:66:7f:63:6f:63:23:
e9:24:e6:4c:79:5b:6a:c5:c5:50:b6:71:6c:fb:b1:04:70:45:
11:55:a3:6d:7c:a0:60:dc:3c:e9:92:87:c6:02:c6:67:fa:0e:
80:30:6d:d7:5d:d9:bf:01:80:2e:23:27:cf:fc:ea:9f:75:a4:
8c:e1:f3:47
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBc6apwEp020jNCSQjOym2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjYwOTAxMTIyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDhlMzg1YjUwZTAzMmJkMjc2NGY4NWQ1MjUwMDE1ZTg2ODI0MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkEXZchM8htjQl1mvL03hljveUFw
rXXtmbID9S04nCdOLdd+ypbeQPiP0ExjhvnneS396U7w+Gl4if5abTbszj1+9UYX
F98ERs/uItsSiH6C7bOfI5UmtYSJttILnIa/tMCxIr8Y2m8H2IuMAsk/1e1hxkDk
3P25jfWavoEiJ9FzuZfNjCBvVv/xUje9z6BMyohYWKTTzS3Q6xBkGaF06yTrOt61
3mZVix1Q9mw5OCIhqRv8b0uL/e9Lv7NpY5k8XjNc9GWyRRAgrYeBUAaQ34s1CuWW
91/Sop/950H5xTBzYFNkf8Rjp+ywK2VVirePjdai7PSkbwoJ8ruh/kotnwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPCOOFtQ4DK9J2T4XVJQAV6GgkE6MB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvOEk0NFcxRGdNcjBuWlBoZFVsQUJYb2FDUVRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAw9i6AwQA
1bbAAwQA1bbQMA0GCSqGSIb3DQEBCwUAA4IBAQCU8tiWvtWqxSFqj+Z7T6UvmkwQ
qYObQgeBVX7+bINAY9VYMfJooltzXbF6puoBdSo7eMATzGjorXsYgC0Qyn4naXy8
5TSlT6Caqrjf9aTr4Jp/mWTWc64gsT9D7TqZEoNnLy8DI8Mo4bblsZL2wJyU+X0R
yDYtwBOsmYbswl4uz7sbfMOUIMJ1qV5e0p/0XPdKNOyDzJxH2tx/qVyPUyMDWI03
YDJBAClEs2886M/uOkTFXklPzfiUh/JNxfUbmktmf2NvYyPpJOZMeVtqxcVQtnFs
+7EEcEURVaNtfKBg3DzpkofGAsZn+g6AMG3XXdm/AYAuIyfP/OqfdaSM4fNH
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:11:25 2026 by rpki-client