Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/8SP8wrXr1dy02TJk430AwSvMFTE.roa
File: 8SP8wrXr1dy02TJk430AwSvMFTE.roa (raw, json)
Hash identifier: /PIJ3E7I+I9m0ncOt8+A4jxLk/g73oMVaRRE/eZXcGo=
Subject key identifier: F1:23:FC:C2:B5:EB:D5:DC:B4:D9:32:64:E3:7D:00:C1:2B:CC:15:31
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 01A06160AB3ED2181409D71ABC941CEBD00E
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/8SP8wrXr1dy02TJk430AwSvMFTE.roa
Signing time: Wed 02 Sep 2026 09:08:40 +0000
ROA not before: Wed 02 Sep 2026 09:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 87.192.82.0/23 maxlen: 23
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.225.0/24 maxlen: 24
87.232.228.0/22 maxlen: 22
89.124.1.0/24 maxlen: 24
89.124.2.0/23 maxlen: 23
89.124.4.0/22 maxlen: 22
89.124.240.0/23 maxlen: 23
89.127.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:60:ab:3e:d2:18:14:09:d7:1a:bc:94:1c:eb:d0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Sep 2 09:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f123fcc2b5ebd5dcb4d93264e37d00c12bcc1531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:11:15:9d:92:d3:d9:5b:e5:dc:b6:44:01:
d6:f0:5c:5f:3d:50:ef:4c:3c:42:4b:c5:7d:fc:b6:
7f:9e:7f:75:4d:5e:dc:08:fd:73:44:b0:81:f4:24:
d0:fd:5c:1d:38:02:08:01:d3:e3:0a:f4:b0:6e:df:
bc:2e:98:b9:c6:84:71:da:a4:74:72:f6:ab:b8:57:
23:08:e0:a2:22:62:a1:9c:2d:fb:88:aa:e9:e5:ca:
4b:ca:42:a3:d1:aa:89:f8:4b:c6:88:9f:cc:6c:ac:
d7:43:1a:6b:b1:dc:1e:1d:6a:52:81:ba:c7:5f:8a:
48:31:7e:4b:15:23:7a:a0:9e:c2:40:cf:54:ce:7a:
88:3e:90:f9:15:d8:7c:a5:12:ac:a8:3c:76:d0:79:
2b:cb:e4:cc:06:30:85:f4:cf:1a:4f:d8:4a:42:00:
f3:87:f1:f1:4b:e9:22:bb:f9:a3:52:98:7e:9c:84:
74:88:7b:87:51:4c:8d:ef:f6:f5:87:9a:20:45:7c:
76:55:8e:90:19:18:1a:b9:50:08:0c:fb:c6:7a:0b:
ed:0f:51:f3:e4:1c:7a:2a:68:67:59:71:9a:b4:d2:
a7:6e:dc:99:79:3a:4a:fb:e7:ab:ec:a1:7d:b7:50:
1b:ca:01:ea:d4:09:80:bf:27:b6:89:d3:d7:7d:33:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:23:FC:C2:B5:EB:D5:DC:B4:D9:32:64:E3:7D:00:C1:2B:CC:15:31
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/8SP8wrXr1dy02TJk430AwSvMFTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.82.0/23
87.192.216.0/22
87.192.222.0/23
87.232.192.0/24
87.232.194.0-87.232.199.255
87.232.225.0/24
87.232.228.0/22
89.124.1.0-89.124.7.255
89.124.240.0/23
89.127.248.0/22
Signature Algorithm: sha256WithRSAEncryption
18:3e:d4:09:18:28:30:ac:94:f0:b0:0d:87:a5:14:f1:d9:fd:
6c:46:b9:3a:24:cf:22:a9:c9:1c:2b:45:de:b2:ba:11:de:e5:
31:9a:75:20:6b:fc:a1:0b:28:1f:da:64:e9:2e:8c:14:b8:da:
ab:9b:9f:4a:5a:ad:ae:1d:3a:0e:1a:08:81:25:b4:a2:00:67:
2c:da:f6:24:a7:78:a5:e1:e1:ec:8b:29:8b:be:26:77:56:c1:
1e:eb:0b:c5:fd:83:d1:71:dc:73:55:c1:c3:e9:db:a0:2e:d3:
70:d2:2b:b9:1d:a1:05:e8:4c:b7:77:b4:57:27:0f:97:f2:00:
b9:4d:d6:13:7c:07:b1:b9:aa:c0:dc:e4:8b:53:1e:cb:93:de:
b5:3e:f7:0e:bf:ee:80:7e:f1:0c:e4:6d:92:2c:f0:ef:e0:c6:
af:c8:df:74:c7:5f:a8:3f:d9:1f:c5:fc:3d:4e:48:64:fa:a4:
31:af:6a:55:54:18:d7:37:32:2f:00:1f:14:b1:01:7f:35:ee:
db:cb:01:df:c2:b6:ed:1d:6c:38:03:62:c2:0e:02:ef:61:8a:
10:3a:13:a4:a0:60:d6:96:d9:ac:be:02:a6:2d:f0:7a:cf:f2:
35:14:f4:18:16:1d:1b:36:e1:03:fe:f3:13:4f:36:94:b6:c0:
99:44:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 15:54:27 2026 by rpki-client