Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8faSSn0wrld6TiH-z71PXz4fvGY.roa
File: 8faSSn0wrld6TiH-z71PXz4fvGY.roa (raw, json)
Hash identifier: Jr/vj1qvsFEz2pv7w2BBw4Ox99TbjM4GLFqCKURwvk4=
Subject key identifier: F1:F6:92:4A:7D:30:AE:57:7A:4E:21:FE:CF:BD:4F:5F:3E:1F:BC:66
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A1451F30FD3271F75F0E4B1FE54936D18A
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8faSSn0wrld6TiH-z71PXz4fvGY.roa
Signing time: Fri 16 Oct 2026 14:30:34 +0000
ROA not before: Fri 16 Oct 2026 14:30:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 91.202.213.0/24 maxlen: 24
91.244.119.0/24 maxlen: 24
91.244.133.0/24 maxlen: 24
91.244.134.0/24 maxlen: 24
91.244.135.0/24 maxlen: 24
91.244.140.0/24 maxlen: 24
91.244.141.0/24 maxlen: 24
91.244.142.0/24 maxlen: 24
91.244.143.0/24 maxlen: 24
91.244.146.0/24 maxlen: 24
91.244.147.0/24 maxlen: 24
91.244.148.0/24 maxlen: 24
91.244.149.0/24 maxlen: 24
91.244.150.0/24 maxlen: 24
91.244.151.0/24 maxlen: 24
91.244.156.0/24 maxlen: 24
91.244.157.0/24 maxlen: 24
91.244.158.0/24 maxlen: 24
91.244.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:1f:30:fd:32:71:f7:5f:0e:4b:1f:e5:49:36:d1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Oct 16 14:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1f6924a7d30ae577a4e21fecfbd4f5f3e1fbc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:15:59:33:ac:79:26:38:9c:5c:16:e8:94:
22:d2:9c:42:06:7f:b5:25:43:c0:3b:5a:85:d6:0d:
87:8e:50:28:db:ec:66:33:59:4a:f7:db:16:da:30:
9f:7c:bf:03:a2:59:46:41:1e:4f:fb:93:91:60:d5:
9e:ef:b4:38:0d:70:b6:39:84:a5:9e:17:df:7a:a8:
26:7c:95:f7:e5:58:bb:28:08:fc:7f:6d:0c:2e:34:
5e:ff:2f:f8:97:ea:67:75:cc:29:03:2f:db:c2:a6:
4a:83:4c:6d:af:df:58:6a:90:f7:1c:03:6f:02:21:
8d:ae:f0:c8:ca:56:6d:d2:62:45:c5:b0:53:5f:5b:
4b:d5:10:f3:87:77:98:ff:9b:55:20:a8:25:35:06:
13:c3:e8:e7:d0:f3:ed:a8:f3:45:c4:93:3b:94:8a:
62:58:69:cb:78:64:84:a8:7d:d5:92:d9:6a:dc:92:
2d:af:cc:63:d2:b9:68:fa:8b:f6:d8:2a:2f:79:3c:
4a:4b:48:7b:70:3e:bd:71:43:de:65:d3:5d:6b:fb:
1c:c4:21:c4:67:09:a0:bf:43:9b:3b:99:a5:cc:fb:
d7:49:43:01:b5:28:4a:56:1a:d3:dc:7a:7e:45:25:
11:e4:b3:41:9d:de:52:e5:f9:bf:5a:16:a6:c4:8b:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:92:4A:7D:30:AE:57:7A:4E:21:FE:CF:BD:4F:5F:3E:1F:BC:66
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8faSSn0wrld6TiH-z71PXz4fvGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.213.0/24
91.244.119.0/24
91.244.133.0-91.244.135.255
91.244.140.0/22
91.244.146.0-91.244.151.255
91.244.156.0/22
Signature Algorithm: sha256WithRSAEncryption
29:a6:cf:c7:ad:43:20:e8:e2:8a:e2:d4:8e:83:a7:01:90:f8:
0a:23:f1:dd:c3:34:bb:0b:2c:a0:ff:e4:27:27:cd:df:74:5d:
46:57:83:a9:b6:7e:12:9d:4a:d9:fb:7e:39:70:66:89:a5:74:
9c:2b:07:ee:1f:40:6e:2b:92:18:17:93:2d:78:fc:2c:cc:4f:
4f:32:78:12:56:19:c4:41:78:8f:d7:72:e1:e0:47:b8:f6:d7:
13:62:ef:7c:bb:d7:55:20:a7:0e:87:6a:8f:e3:c7:97:1e:e9:
e2:c6:67:95:3e:84:9c:af:45:05:d2:40:f0:1f:80:de:98:fe:
96:fd:84:90:9d:5e:9d:af:e8:1e:6a:af:a2:cd:cc:21:ca:e5:
98:71:22:e7:12:fb:89:2a:3a:dc:16:28:25:bc:b8:ec:b4:dd:
7e:54:6d:f1:5e:d5:ff:ad:7b:3d:16:20:c0:dc:32:61:11:ee:
b2:8f:57:7c:9d:29:a0:98:85:e4:b4:e1:aa:75:5c:d2:85:47:
fb:dc:56:fd:3a:4b:5d:58:a7:94:16:a4:a6:f1:d3:9b:65:12:
aa:33:be:e8:5e:7b:e0:80:07:17:9c:d4:ea:3e:07:a9:00:72:
5b:70:b6:3e:43:34:05:16:3c:8e:f3:ed:3b:87:a5:29:f3:d3:
e2:2e:7c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:24:11 2026 by rpki-client