Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/8TsXg-XUAk1JE35W5iwCEn8OxHY.roa
File: 8TsXg-XUAk1JE35W5iwCEn8OxHY.roa (raw, json)
Hash identifier: wgiKwTO+cQ6amDFPE6cljiPgi+iGvWx/hXbXkD8CRAQ=
Subject key identifier: F1:3B:17:83:E5:D4:02:4D:49:13:7E:56:E6:2C:02:12:7F:0E:C4:76
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 019E4A04EAC72D2792BFC341C6E52779B893
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/8TsXg-XUAk1JE35W5iwCEn8OxHY.roa
Signing time: Thu 21 May 2026 10:11:36 +0000
ROA not before: Thu 21 May 2026 10:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197792
IP address blocks: 193.41.47.0/24 maxlen: 24
193.41.82.0/24 maxlen: 24
2a0f:7ec0:1::/48 maxlen: 48
2a0f:7ec0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:04:ea:c7:2d:27:92:bf:c3:41:c6:e5:27:79:b8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: May 21 10:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f13b1783e5d4024d49137e56e62c02127f0ec476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:70:23:6b:25:0b:ce:59:f1:04:d4:07:72:
a3:ae:bf:09:c9:52:9d:9b:99:de:c7:b1:ec:65:53:
52:44:cf:12:b7:3c:12:95:1c:5b:0a:61:56:19:74:
29:64:e9:d7:ad:02:f6:cd:ad:90:f0:54:7f:eb:88:
a4:8f:9e:3a:1c:0e:be:c3:68:73:d7:b7:c9:cb:86:
21:64:0c:10:b8:9e:d0:71:ed:3c:9f:4f:34:81:d9:
24:34:3d:d4:73:e6:8f:04:59:71:4e:07:0d:21:55:
42:49:8a:db:f9:40:b1:51:29:b6:16:96:19:9b:4d:
e1:e9:28:59:91:a2:f5:2d:ab:27:79:39:e0:7f:7b:
36:3b:b8:72:e0:07:e7:e0:01:76:72:45:4c:3a:5f:
b3:37:3d:61:91:45:cb:b8:c2:a1:df:ad:9c:7e:52:
9e:80:a2:e9:35:e5:96:5e:fd:c6:64:7c:53:13:8f:
a7:f3:ff:06:a5:3b:05:e3:2c:da:4d:9d:96:5b:77:
52:a9:de:8c:08:56:6a:b8:a1:a5:d8:f4:32:9d:9a:
99:ff:d1:2f:66:87:d6:cf:d5:d0:70:be:3b:f6:3a:
b4:33:a7:eb:a8:cc:51:3c:3d:96:b6:df:e4:34:b1:
e6:81:4c:1b:70:ee:0c:56:de:b2:9c:c9:5d:49:5c:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:17:83:E5:D4:02:4D:49:13:7E:56:E6:2C:02:12:7F:0E:C4:76
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/8TsXg-XUAk1JE35W5iwCEn8OxHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.47.0/24
193.41.82.0/24
IPv6:
2a0f:7ec0:1::/48
2a0f:7ec0:100::/48
Signature Algorithm: sha256WithRSAEncryption
7a:0b:be:8a:1c:ac:c0:f9:fa:d4:ca:7f:6d:14:d1:a1:fe:3a:
7a:b1:fb:52:8e:18:d2:9f:42:61:f8:2c:2e:aa:9c:5e:5f:4d:
e2:d3:70:42:53:a0:16:15:d0:e7:f6:b7:da:f3:2c:87:08:e3:
4c:ae:76:e9:5b:ac:48:8a:26:b2:84:0e:db:a1:73:19:ad:53:
40:5e:de:da:13:bf:a4:39:12:cf:e4:e6:66:ba:c6:ff:8c:a5:
f1:83:80:07:e6:19:34:82:8a:63:ee:fb:19:3b:bd:ae:ad:e4:
9c:3f:4e:9c:af:69:ae:cd:93:fd:e2:f2:56:2f:2c:3e:e7:55:
27:72:da:9b:7f:79:00:1a:09:12:c4:24:23:c8:f0:88:76:e7:
76:27:00:0a:50:cc:89:b1:17:70:b7:cc:b8:ce:90:9e:f4:93:
d3:1b:77:40:54:c1:3b:58:03:56:fb:86:d5:30:56:16:2c:ea:
0e:88:19:9c:f8:32:4b:75:a6:e3:08:75:79:0f:e3:de:12:03:
82:74:86:d2:ce:32:a1:44:67:69:d9:01:5d:c2:87:15:bd:9f:
36:bf:7f:91:6c:a8:3a:18:70:c8:a1:bf:9f:ea:70:30:3d:56:
63:bc:f2:83:6a:05:2a:75:6d:62:f2:a4:77:e2:a3:8d:3e:9e:
18:f7:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:00:41 2026 by rpki-client