Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/8txx-a7bVPOx2o3RXnkrRbsFJvw.roa
File: 8txx-a7bVPOx2o3RXnkrRbsFJvw.roa (raw, json)
Hash identifier: 9QzPxs6o1/HIn/z859bIlS9gq61Oxzk7wr0uT3OmX3c=
Subject key identifier: F2:DC:71:F9:AE:DB:54:F3:B1:DA:8D:D1:5E:79:2B:45:BB:05:26:FC
Certificate issuer: /CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
Certificate serial: 019F3638DB00B8C152D7E7D2EC1FEDD7D843
Authority key identifier: C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/8txx-a7bVPOx2o3RXnkrRbsFJvw.roa
Signing time: Mon 06 Jul 2026 06:58:43 +0000
ROA not before: Mon 06 Jul 2026 06:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 193.242.101.0/24 maxlen: 24
194.8.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:38:db:00:b8:c1:52:d7:e7:d2:ec:1f:ed:d7:d8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
Validity
Not Before: Jul 6 06:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2dc71f9aedb54f3b1da8dd15e792b45bb0526fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:b6:b4:19:17:a9:d8:aa:b3:d2:a3:c1:4b:
63:1a:36:89:26:3e:2b:83:ff:82:88:b3:99:ed:e5:
81:14:a4:e8:94:53:45:9e:15:c5:4d:d4:15:aa:28:
66:32:2f:fe:6e:25:c2:c1:a8:e8:4f:1c:29:fc:ef:
cf:a5:7c:32:fc:bf:1c:1b:27:33:65:28:b9:d0:08:
32:e4:42:f0:31:23:1c:3f:8f:f4:e0:ce:c8:f8:8d:
d8:ff:cc:47:13:84:f4:cc:7f:7f:d1:2a:1c:ad:33:
0d:73:60:25:09:96:88:c5:ae:7e:f8:fb:c1:40:88:
8e:c8:5e:1e:12:93:af:c5:2e:1e:26:bd:f4:d9:3c:
4e:75:53:9a:f5:c1:5f:ab:9b:9c:1b:0a:6e:f3:84:
9a:e9:3f:32:db:b8:13:9a:58:c9:c3:ef:cd:b6:b7:
54:ae:aa:34:24:f9:b1:6e:fc:b8:c8:48:ee:62:1b:
a2:29:4b:df:18:2e:34:e5:c7:de:f8:43:74:99:37:
45:4b:ea:c1:86:ae:47:6c:62:3c:ee:53:64:eb:2b:
cf:95:85:87:95:84:f3:25:93:fe:26:17:41:dd:22:
4a:4f:b4:cb:d1:2b:fa:ed:8b:41:f1:13:3e:88:f0:
31:88:4d:f9:61:c6:39:84:a7:cf:95:90:bd:b1:0f:
0d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DC:71:F9:AE:DB:54:F3:B1:DA:8D:D1:5E:79:2B:45:BB:05:26:FC
X509v3 Authority Key Identifier:
keyid:C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/8txx-a7bVPOx2o3RXnkrRbsFJvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.101.0/24
194.8.52.0/24
Signature Algorithm: sha256WithRSAEncryption
17:40:90:43:51:ab:70:ef:d1:d4:bc:ed:46:db:cd:15:50:27:
7f:7a:f1:65:8f:1f:19:a3:c3:42:33:e6:81:76:67:f0:11:3d:
44:25:8c:ee:a4:4a:07:db:7a:b6:57:93:e4:6d:d3:de:60:0c:
b1:42:a8:da:6a:d4:73:41:dd:da:47:7f:67:a7:2f:64:a6:1c:
2d:81:28:4a:ab:b7:d5:da:6e:4d:56:97:87:72:75:27:9a:20:
99:c3:3f:54:6e:1a:b7:17:9b:dc:f7:3f:01:b9:15:4d:66:65:
84:53:a2:a6:2f:16:f7:b7:0d:31:05:a3:45:c6:35:1c:cc:a8:
e1:76:cd:c2:29:88:a0:f2:79:61:23:01:98:69:42:54:23:7a:
cd:2d:af:a9:3b:69:ce:b5:57:ac:9d:7f:dc:0d:e5:49:bf:5b:
a4:d3:5f:9c:64:bb:09:f8:07:21:45:e1:63:07:b7:c0:fb:e0:
4c:1e:9c:e6:a7:57:1b:7a:c1:34:ce:4c:63:9e:40:57:94:b7:
8e:13:6b:bf:be:8e:ee:a1:d1:5d:22:6a:de:f2:a1:98:ad:ab:
4e:1b:e5:18:d2:fb:34:27:d9:b3:13:0c:9a:69:ed:1b:b1:0d:
36:f1:69:d5:8e:5d:38:eb:76:4f:75:f3:0e:f3:31:20:d6:76:
e5:80:67:b7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ82ONsAuMFS1+fS7B/t19hDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2FmNGE3ODE3ZDlhYzU5NjFkNDJhNGM3ZTVhZTFhYjFk
MTgzZmEwHhcNMjYwNzA2MDY1ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmRjNzFmOWFlZGI1NGYzYjFkYThkZDE1ZTc5MmI0NWJiMDUyNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwy2tBkXqdiqs9KjwUtjGjaJJj4r
g/+CiLOZ7eWBFKTolFNFnhXFTdQVqihmMi/+biXCwajoTxwp/O/PpXwy/L8cGycz
ZSi50Agy5ELwMSMcP4/04M7I+I3Y/8xHE4T0zH9/0SocrTMNc2AlCZaIxa5++PvB
QIiOyF4eEpOvxS4eJr302TxOdVOa9cFfq5ucGwpu84Sa6T8y27gTmljJw+/NtrdU
rqo0JPmxbvy4yEjuYhuiKUvfGC405cfe+EN0mTdFS+rBhq5HbGI87lNk6yvPlYWH
lYTzJZP+JhdB3SJKT7TL0Sv67YtB8RM+iPAxiE35YcY5hKfPlZC9sQ8NeQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPLccfmu21TzsdqN0V55K0W7BSb8MB8GA1UdIwQY
MBaAFMjK9KeBfZrFlh1CpMflrhqx0YP6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1yMHA0Rjltc1dXSFVLa3gtV3VHckhSZ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81MDhlNzAtNzhiOS00ZWZkLWI1Zjkt
ZjEwYjAwNzBkNzAxLzEvOHR4eC1hN2JWUE94Mm8zUlhua3JSYnNGSnZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81MDhlNzAtNzhiOS00ZWZkLWI1ZjktZjEwYjAwNzBkNzAx
LzEveU1yMHA0Rjltc1dXSFVLa3gtV3VHckhSZ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwfJlAwQA
wgg0MA0GCSqGSIb3DQEBCwUAA4IBAQAXQJBDUatw79HUvO1G280VUCd/evFljx8Z
o8NCM+aBdmfwET1EJYzupEoH23q2V5PkbdPeYAyxQqjaatRzQd3aR39npy9kphwt
gShKq7fV2m5NVpeHcnUnmiCZwz9Ubhq3F5vc9z8BuRVNZmWEU6KmLxb3tw0xBaNF
xjUczKjhds3CKYig8nlhIwGYaUJUI3rNLa+pO2nOtVesnX/cDeVJv1uk01+cZLsJ
+AchReFjB7fA++BMHpzmp1cbesE0zkxjnkBXlLeOE2u/vo7uodFdImre8qGYratO
G+UY0vs0J9mzEwyaae0bsQ028WnVjl0463ZPdfMO8zEg1nblgGe3
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:18 2026 by rpki-client