Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa
File: 8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa (raw, json)
Hash identifier: t0Q9JGg0FFkCyUnnAjxlIairjnAp1fGIhWq7kxGfNJg=
Subject key identifier: F1:E5:A7:F8:B6:7C:48:77:5A:E8:7A:B4:3D:9F:0C:8C:BB:E1:78:82
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F2369201DB716BDC6E95677AF42685CDA
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47574
IP address blocks: 185.248.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:20:1d:b7:16:bd:c6:e9:56:77:af:42:68:5c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1e5a7f8b67c48775ae87ab43d9f0c8cbbe17882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:01:68:64:4d:42:8e:8a:f3:76:eb:c2:8f:51:
d7:b1:34:1e:06:62:94:24:07:7c:60:9b:d3:a3:2b:
14:74:89:60:f3:ae:6b:26:c2:6e:06:a4:ed:03:cb:
f6:94:f4:51:5d:2e:84:bb:02:83:9a:9e:2d:37:31:
82:02:2c:9a:30:66:09:44:3b:81:f1:7a:fc:80:75:
fd:8c:a0:06:37:30:fd:86:f6:9a:64:1b:24:e8:e6:
0f:54:4b:37:8a:47:1b:89:7e:1c:5e:c3:da:05:6d:
ac:82:29:7c:ab:e4:c6:3c:c3:33:ad:ba:e7:2b:12:
76:c3:f5:2d:03:fe:f7:f7:3d:f9:26:d4:50:20:ac:
7f:35:4a:79:de:d8:10:bf:86:7e:6d:5f:48:9e:79:
bf:35:9f:2a:c5:fc:e7:ae:2e:ec:8f:4d:e0:6c:d2:
99:38:0f:a1:79:ba:2e:5f:e3:4e:3b:0a:20:01:dd:
84:08:66:ee:77:a9:50:8f:ca:02:96:7a:8c:ac:57:
4c:88:bc:cb:92:a0:7a:7e:7c:5a:79:4c:5c:b9:fd:
38:43:8f:48:e5:6c:c2:85:36:be:6d:d5:4f:aa:7c:
2f:be:27:d2:de:1d:52:04:d5:11:ea:fa:60:f2:65:
03:a8:a8:c0:88:0f:be:e8:2f:36:0a:4b:64:ff:05:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E5:A7:F8:B6:7C:48:77:5A:E8:7A:B4:3D:9F:0C:8C:BB:E1:78:82
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0c:fb:b0:80:8e:40:f7:17:5e:29:1f:9f:4c:95:20:2d:e3:
38:16:a4:c8:83:b0:0e:19:1c:bd:32:73:77:55:b4:e8:8c:e1:
6c:19:66:1d:50:23:26:a1:d3:05:73:6c:57:06:fb:f2:67:29:
0e:d3:0b:e2:bd:4e:16:33:13:7c:7d:cd:5d:ef:71:82:19:05:
10:3d:6d:d8:e2:44:09:38:a5:e2:65:db:c8:70:e7:2c:18:13:
30:04:58:55:bf:c9:2d:07:4a:da:f6:4d:b2:b1:c2:2a:cd:e8:
bf:76:c0:06:67:eb:d7:e9:09:6b:a5:bd:96:ab:87:a1:b0:e6:
6e:c0:fb:19:ae:44:2c:32:d7:31:aa:69:8e:ac:60:08:e3:bf:
a1:9f:fc:a8:a3:3b:a5:b6:de:e7:1b:d4:5b:63:0c:cc:c5:08:
54:c3:32:b8:e8:1c:60:84:5d:8b:fa:76:3b:5f:8b:be:06:12:
33:08:e5:4b:80:13:65:09:69:88:cf:23:f9:94:1c:da:81:43:
0a:3f:fb:a7:f2:2a:0c:90:f7:d1:8d:07:ca:ea:60:bb:fb:95:
62:c4:64:98:d8:5c:fd:aa:c6:1d:7d:19:91:40:97:8b:40:75:
09:19:08:32:5d:1f:7e:21:ed:fb:4e:8e:ac:69:50:a5:64:6a:
61:23:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:16:48 2026 by rpki-client