Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/x8XmJx41-rS3oQopw9axsmo7U5o.roa
File: x8XmJx41-rS3oQopw9axsmo7U5o.roa (raw, json)
Hash identifier: wJ4AKER/vvm4LzEhdW9wwiO9rdRJ4Gqly2DS/+StjsU=
Subject key identifier: C7:C5:E6:27:1E:35:FA:B4:B7:A1:0A:29:C3:D6:B1:B2:6A:3B:53:9A
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019F831C3F8540BD9376F16457BB5D7CCCAB
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/x8XmJx41-rS3oQopw9axsmo7U5o.roa
Signing time: Tue 21 Jul 2026 05:18:14 +0000
ROA not before: Tue 21 Jul 2026 05:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201309
IP address blocks: 87.248.129.0/24 maxlen: 24
87.248.144.0/24 maxlen: 24
87.248.149.0/24 maxlen: 24
194.60.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:1c:3f:85:40:bd:93:76:f1:64:57:bb:5d:7c:cc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 21 05:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7c5e6271e35fab4b7a10a29c3d6b1b26a3b539a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:12:84:83:a7:ae:ed:5c:f9:84:ad:d3:fe:
68:01:66:ab:62:4b:e0:02:1a:fc:c7:c6:ee:2a:0b:
23:9c:c6:b3:7b:05:ec:7a:54:8f:3e:07:aa:01:0f:
2b:bd:af:09:80:f7:26:88:3c:e7:fe:d4:f7:b8:78:
92:11:c8:c8:0d:48:88:d9:86:f7:83:f1:69:59:e1:
68:2a:68:8f:24:d6:95:da:a6:a4:3c:4b:23:0a:a8:
ab:b3:73:b9:bc:63:4c:12:34:ea:3b:73:89:99:aa:
52:af:15:97:28:91:eb:a4:ee:55:c8:9d:00:36:bc:
b1:95:2d:2a:bf:d1:62:80:5b:eb:e5:54:ab:ea:35:
8b:6f:f7:ff:b4:b9:d4:27:ad:13:90:de:da:08:04:
27:93:6d:49:db:60:6f:56:05:d0:71:98:fa:15:9a:
e3:10:a0:4c:78:03:2b:d1:89:1e:95:d0:75:dc:03:
81:f5:c1:8d:ae:42:b0:80:50:f4:5e:1b:20:66:f6:
ee:39:7c:22:95:ee:94:2d:54:0a:85:c4:38:e8:ad:
92:47:87:3f:fa:10:12:00:24:91:e0:b9:b4:af:3b:
ea:6b:7f:eb:15:78:5c:43:ae:9a:59:e4:df:4a:2c:
49:35:ee:58:52:0a:22:1a:a7:d8:04:c1:98:d6:ce:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C5:E6:27:1E:35:FA:B4:B7:A1:0A:29:C3:D6:B1:B2:6A:3B:53:9A
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/x8XmJx41-rS3oQopw9axsmo7U5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.129.0/24
87.248.144.0/24
87.248.149.0/24
194.60.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:22:f4:0b:ce:01:76:0a:85:2b:b3:50:6b:87:26:59:c1:e1:
ac:43:5c:76:29:6c:55:d8:bc:9d:02:22:4c:17:46:5a:9e:3f:
26:e8:a8:f8:4c:48:ec:61:65:19:40:07:14:5d:8e:84:40:c8:
f0:61:25:6f:83:13:06:cb:66:1c:cf:61:c3:b6:bb:28:8c:7e:
99:c7:a9:68:4e:f0:47:06:2e:95:e0:b7:6d:eb:39:21:98:f3:
77:62:09:e8:61:93:47:9e:bb:8b:7e:e7:8d:e2:6d:e8:4d:b5:
b3:11:9e:31:7c:7a:f7:7f:7e:72:99:3e:2f:30:68:66:f0:f0:
ca:bf:52:5f:43:49:22:88:fd:aa:e3:5c:96:9a:7e:ed:93:76:
5b:15:e3:12:c9:54:ca:93:54:85:49:07:7f:f6:6b:b8:fe:84:
56:fa:30:ab:80:2e:23:55:e8:bf:23:a7:fd:64:ab:27:c6:41:
23:ac:71:cb:86:b0:0b:b6:92:09:0b:a2:78:35:34:30:97:ec:
29:9c:34:81:6c:7d:82:9d:95:0a:fc:0d:b4:70:8e:85:62:42:
70:98:ea:28:39:f8:04:73:6a:cd:93:75:6b:6f:15:60:7d:c4:
59:12:f4:c9:75:0a:16:d5:e5:6d:b5:e3:66:ac:13:78:27:b5:
82:fc:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:49 2026 by rpki-client