Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/8ZD3foPne5Uu0Frgl5XT2H_UPbE.roa
File: 8ZD3foPne5Uu0Frgl5XT2H_UPbE.roa (raw, json)
Hash identifier: BwriFtC3LjqKS69M0kTI/KhWgtzFlE5iLxnBL8ZKdX0=
Subject key identifier: F1:90:F7:7E:83:E7:7B:95:2E:D0:5A:E0:97:95:D3:D8:7F:D4:3D:B1
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 01A115B36C22E7655952AADB6E4C681F9B96
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/8ZD3foPne5Uu0Frgl5XT2H_UPbE.roa
Signing time: Wed 07 Oct 2026 09:30:42 +0000
ROA not before: Wed 07 Oct 2026 09:30:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51776
IP address blocks: 87.238.136.0/21 maxlen: 24
87.238.137.0/24 maxlen: 24
87.238.138.0/24 maxlen: 24
87.238.141.0/24 maxlen: 24
87.238.142.0/24 maxlen: 24
91.201.212.0/23 maxlen: 24
91.201.212.0/24 maxlen: 24
91.201.213.0/24 maxlen: 24
185.132.128.0/22 maxlen: 24
185.188.52.0/24 maxlen: 24
185.188.53.0/24 maxlen: 24
185.188.54.0/24 maxlen: 24
185.188.55.0/24 maxlen: 24
2a06:56c0::/29 maxlen: 48
2a06:56c0:11::/48 maxlen: 48
2a06:56c0:12::/48 maxlen: 48
2a06:56c1:2::/48 maxlen: 48
2a06:56c3::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:b3:6c:22:e7:65:59:52:aa:db:6e:4c:68:1f:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Oct 7 09:30:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f190f77e83e77b952ed05ae09795d3d87fd43db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:4d:c3:9f:72:ce:05:e0:73:f3:61:92:a5:
36:40:05:0e:2d:b5:cd:5e:9d:8a:3a:20:15:93:81:
79:5a:af:cf:88:24:c4:24:39:ab:b9:30:c6:cc:77:
24:c8:74:f8:84:7b:fa:42:80:23:bb:59:5f:db:ac:
0b:34:00:e7:8e:f8:7d:3a:fd:d7:94:36:91:6a:27:
0a:84:23:73:57:11:37:0f:8a:af:d3:9d:2a:0e:72:
ab:7c:b0:d9:98:b5:85:35:09:be:ce:57:25:bb:73:
b8:bc:c7:00:28:e7:1d:31:79:fa:42:28:28:ec:14:
b8:3a:85:0e:67:c1:03:b8:8a:3b:ee:b9:6b:a2:f7:
da:e0:c7:02:f8:27:ad:3c:1c:22:4f:45:5b:5d:56:
aa:3a:cf:a8:ff:d2:9a:d9:07:01:cf:d0:2d:af:d6:
24:02:4d:7a:80:29:83:85:65:e8:c3:66:2a:be:b8:
ed:30:bf:69:45:b5:2c:85:24:7c:7d:f1:74:f6:a8:
ff:85:3c:ed:35:39:36:d7:18:e5:13:e9:be:30:08:
4f:a3:65:bb:d2:44:02:52:70:98:77:ef:89:6f:3a:
60:78:43:c4:a8:ab:5b:ab:ff:08:bc:50:e2:82:c8:
ea:12:51:40:7a:c7:33:49:6b:56:e9:5e:77:14:56:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:90:F7:7E:83:E7:7B:95:2E:D0:5A:E0:97:95:D3:D8:7F:D4:3D:B1
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/8ZD3foPne5Uu0Frgl5XT2H_UPbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.136.0/21
91.201.212.0/23
185.132.128.0/22
185.188.52.0/22
IPv6:
2a06:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:c0:42:4f:13:8e:77:e7:52:f5:d3:9e:b8:2b:18:0b:34:66:
e2:8c:8c:83:97:4c:0a:5e:12:f6:67:73:b8:ce:0e:46:ba:bb:
fa:81:ae:13:01:27:d4:46:07:45:2c:3f:c2:0c:4e:1c:c2:54:
ca:83:ff:ad:62:bf:c6:c7:85:86:07:f8:6b:7f:e8:f1:b6:be:
a6:fe:be:59:cd:35:a1:b4:32:03:c5:db:75:f9:d2:0f:55:20:
7d:53:ce:9e:ee:ac:e5:3d:f9:68:94:f5:db:39:92:a9:f2:0d:
95:7d:77:b6:00:a1:2c:63:70:32:3f:db:51:67:48:a6:00:50:
93:c1:56:95:1e:b6:98:56:1e:f6:4d:fe:da:95:86:51:61:17:
01:57:0c:dc:cc:4c:8f:ec:61:5e:28:ce:4e:f1:64:22:60:88:
9f:12:6a:5a:b9:0c:f3:15:25:67:1a:72:74:49:70:42:7f:ba:
f4:8c:e2:29:5f:ac:31:5d:e0:08:95:75:98:e0:e1:86:55:fd:
96:de:9d:47:dd:47:96:bf:2f:6e:99:0d:b1:6f:43:f9:5c:38:
59:35:19:ca:13:5c:35:22:d3:49:0f:82:2c:5f:04:98:00:58:
62:91:8a:56:18:c1:db:98:d9:da:06:5e:46:53:72:06:4c:03:
f6:19:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:30:50 2026 by rpki-client