Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/8FCALeUCHQvFMGyTijQRx2A3-mw.roa
File: 8FCALeUCHQvFMGyTijQRx2A3-mw.roa (raw, json)
Hash identifier: V23nGmZ29KitJshMgTVFIVSAC0DDACC1PmCL1h4ddEU=
Subject key identifier: F0:50:80:2D:E5:02:1D:0B:C5:30:6C:93:8A:34:11:C7:60:37:FA:6C
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019D4B993847C875F892102C229CCDD55811
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/8FCALeUCHQvFMGyTijQRx2A3-mw.roa
Signing time: Thu 02 Apr 2026 00:30:25 +0000
ROA not before: Thu 02 Apr 2026 00:30:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 94.177.27.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Apr 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4b:99:38:47:c8:75:f8:92:10:2c:22:9c:cd:d5:58:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Apr 2 00:30:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f050802de5021d0bc5306c938a3411c76037fa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:8b:40:8e:d4:9e:4c:c9:dd:86:1a:dd:69:
f2:a3:40:35:6d:e7:6c:29:fd:1d:a7:99:d7:ca:1c:
1e:66:ab:9d:6c:95:b2:cc:be:f4:0d:ed:fb:42:1f:
ef:64:f4:fd:6c:e6:41:5f:1f:1f:cc:d1:65:74:07:
bd:43:6c:11:7b:10:48:bc:fa:84:41:50:a2:52:43:
5d:10:c8:36:43:06:23:79:47:dc:09:88:ea:be:26:
18:4f:32:3a:06:5f:57:9f:dc:f5:f5:fd:db:af:44:
af:b7:8a:da:78:ab:05:88:b8:57:96:be:0a:d0:35:
fa:dc:0e:a2:39:44:00:7a:7a:c9:af:cd:b2:5b:d3:
94:2c:bc:f6:fc:cf:4b:68:4a:bb:b1:ab:8e:f4:62:
b5:a8:18:bd:80:f4:b7:7a:8a:80:8b:50:69:cf:ea:
01:82:f7:95:56:5b:e4:48:f9:ab:44:20:ac:50:7f:
1f:31:30:ca:77:b4:eb:b3:a8:f0:6a:fd:40:f0:23:
56:d4:e1:5b:69:c1:7f:e8:db:66:56:ec:88:53:10:
bb:3a:00:b6:bf:54:0c:cb:5f:5b:95:ad:42:e1:65:
09:8a:3a:97:7c:c3:d6:3b:15:69:c7:da:7b:18:f9:
37:0f:83:96:d7:34:96:38:22:c8:8f:cc:8b:5a:1b:
a6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:80:2D:E5:02:1D:0B:C5:30:6C:93:8A:34:11:C7:60:37:FA:6C
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/8FCALeUCHQvFMGyTijQRx2A3-mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.27.0/24
176.223.181.0/24
Signature Algorithm: sha256WithRSAEncryption
52:da:7f:8b:12:0e:ec:dc:bb:d6:b4:05:72:f6:9e:93:8a:84:
c8:c2:57:a4:2e:78:98:ce:dd:2d:1e:b9:e6:0c:a1:c6:c8:45:
1a:40:94:9a:26:a7:fe:8d:f4:27:be:19:88:82:85:1d:b7:18:
6a:9b:5f:9f:97:ad:fd:52:a1:f6:9f:34:94:bc:66:54:b0:d4:
b6:3b:eb:8d:9a:40:b4:bb:6b:32:3e:e1:44:d7:4a:5e:75:e9:
51:5e:71:1a:ed:44:d2:e9:29:22:e6:d7:d6:fc:8f:e8:ce:fd:
03:fb:4b:3c:b9:2d:01:1d:45:02:78:0b:40:75:ff:4a:88:0a:
45:02:17:0e:58:8d:2d:7d:82:ca:13:22:db:bc:60:4c:f4:10:
01:01:ee:d9:e8:a5:42:7c:9f:ee:97:ab:48:c6:7c:2a:3a:6a:
1e:e2:46:c2:d8:f3:1c:8c:90:52:b8:83:fe:53:f4:94:8c:98:
c4:da:a5:82:d4:19:b5:c8:9b:05:7e:65:3e:18:fa:ac:bc:2f:
67:0f:0b:a5:6c:6b:4e:96:59:ac:c1:cf:2b:8f:4f:89:42:6d:
f6:d5:f4:75:be:25:49:a9:7f:a1:a6:8f:a6:a1:40:c8:53:b7:
e2:9e:77:83:1a:9f:5b:84:22:a0:a7:8d:2b:a3:4b:2b:ec:83:
05:07:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 09:05:08 2026 by rpki-client