Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/8hZQgobYRgkTh5xH3Fcd21-S_Qs.roa
File: 8hZQgobYRgkTh5xH3Fcd21-S_Qs.roa (raw, json)
Hash identifier: O/Sj5qQYmpIeIZz7fbOBaJ5DfsZVzsyZ4dbe+9ThvxU=
Subject key identifier: F2:16:50:82:86:D8:46:09:13:87:9C:47:DC:57:1D:DB:5F:92:FD:0B
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019FE102E64CE24EAECBDC3B8AAC14494464
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/8hZQgobYRgkTh5xH3Fcd21-S_Qs.roa
Signing time: Sat 08 Aug 2026 10:54:51 +0000
ROA not before: Sat 08 Aug 2026 10:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402628
IP address blocks: 187.5.0.0/23 maxlen: 24
200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:02:e6:4c:e2:4e:ae:cb:dc:3b:8a:ac:14:49:44:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Aug 8 10:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f216508286d8460913879c47dc571ddb5f92fd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:1a:73:c1:16:e4:85:3f:f5:6d:ce:96:82:
5e:81:d2:d5:4f:35:b8:9f:d3:d8:ab:8a:02:2f:4f:
96:76:f2:53:68:68:13:88:67:5c:cf:2a:26:fa:87:
f9:7f:ed:c1:c9:bd:05:fa:fe:49:99:6f:8d:68:3e:
c5:18:68:03:31:cb:d7:cc:b0:3b:b5:43:c7:69:fe:
2e:27:d5:85:fc:f8:e8:69:c0:7d:46:95:e9:07:53:
5e:6f:de:db:2a:65:89:aa:e1:a8:96:74:24:1d:e3:
ac:36:4a:c6:b3:e5:36:94:67:54:d7:92:1d:9e:32:
8b:bb:1d:2e:2a:98:48:8f:1d:e0:42:29:87:e2:21:
9c:d4:2f:f3:08:86:3c:88:be:37:03:c4:4a:9f:2c:
5e:80:a7:84:63:bf:0a:44:71:ba:77:de:63:50:4a:
16:a4:03:a2:22:bd:69:29:d3:b2:fc:c0:b5:63:07:
2e:55:41:db:f8:13:f3:4d:e9:83:86:07:16:a8:0d:
b3:e5:02:3c:66:f7:77:57:98:7b:f7:f4:66:dc:53:
32:e9:be:d3:30:84:5d:7c:bf:ad:2d:cb:13:5d:2b:
c9:10:4b:48:3e:05:63:14:63:28:c0:20:1e:ee:c5:
89:ef:30:15:fe:53:f2:26:d1:46:3a:39:56:8c:95:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:16:50:82:86:D8:46:09:13:87:9C:47:DC:57:1D:DB:5F:92:FD:0B
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/8hZQgobYRgkTh5xH3Fcd21-S_Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.0.0/23
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
14:ce:70:a7:8b:f8:5c:34:90:b7:d4:7e:50:15:be:74:b8:21:
8e:e1:93:ed:2a:24:11:12:e3:a0:17:61:3b:9f:a2:0a:5d:ca:
23:35:cc:a1:c1:f4:b8:a4:4a:7b:56:2e:44:24:17:fd:46:77:
56:bc:2f:62:cf:23:26:8d:a9:fd:c4:c6:34:13:c3:0e:65:b1:
ca:c8:1a:76:29:dc:43:bc:0f:5e:16:e4:c9:76:de:da:c0:fb:
a5:e4:92:06:d8:cb:d7:ed:e9:91:13:2a:29:f8:ac:8a:30:a2:
cc:d4:de:52:df:46:fa:5a:19:6d:87:c7:c3:3d:8a:c9:d8:7e:
f5:ad:b5:d6:ab:26:09:cb:00:45:be:b4:52:3e:dc:67:e2:c0:
61:96:45:4c:e8:c7:a4:87:23:8a:0d:ab:51:c4:a0:c6:56:b0:
58:87:cd:a1:8a:ba:bb:2a:38:fa:52:02:f0:c8:57:e2:da:ed:
42:3e:8c:e4:de:d4:57:f3:4d:8f:e9:33:93:23:4b:cd:6c:eb:
27:88:01:db:0d:64:cd:a3:5c:d8:0d:fd:f3:11:ab:15:55:29:
fe:7a:ed:9f:cc:b1:64:97:4d:1e:7a:34:68:c5:03:5c:a1:11:
ea:0e:14:7d:49:b6:b2:57:bc:95:64:90:82:2f:d4:75:ae:c2:
46:4b:9b:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/hAuZM4k6uy9w7iqwUSURkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODZlOWYwODg0OGU0ODBiMWYzZTlhOWMwNmE4MzJkNDhj
ZTM3YWQwHhcNMjYwODA4MTA1NDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjE2NTA4Mjg2ZDg0NjA5MTM4NzljNDdkYzU3MWRkYjVmOTJmZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylUac8EW5IU/9W3OloJegdLVTzW4
n9PYq4oCL0+WdvJTaGgTiGdczyom+of5f+3Byb0F+v5JmW+NaD7FGGgDMcvXzLA7
tUPHaf4uJ9WF/PjoacB9RpXpB1Neb97bKmWJquGolnQkHeOsNkrGs+U2lGdU15Id
njKLux0uKphIjx3gQimH4iGc1C/zCIY8iL43A8RKnyxegKeEY78KRHG6d95jUEoW
pAOiIr1pKdOy/MC1YwcuVUHb+BPzTemDhgcWqA2z5QI8Zvd3V5h79/Rm3FMy6b7T
MIRdfL+tLcsTXSvJEEtIPgVjFGMowCAe7sWJ7zAV/lPyJtFGOjlWjJVXxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPIWUIKG2EYJE4ecR9xXHdtfkv0LMB8GA1UdIwQY
MBaAFLKG6fCISOSAsfPpqcBqgy1IzjetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85MDA3MDQtNmI0Ny00MDE3LWI5N2Yt
NDYwMTY4MDE3M2FhLzEvOGhaUWdvYllSZ2tUaDV4SDNGY2QyMS1TX1FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC85MDA3MDQtNmI0Ny00MDE3LWI5N2YtNDYwMTY4MDE3M2Fh
LzEvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuwUAAwQD
yLSgMA0GCSqGSIb3DQEBCwUAA4IBAQAUznCni/hcNJC31H5QFb50uCGO4ZPtKiQR
EuOgF2E7n6IKXcojNcyhwfS4pEp7Vi5EJBf9RndWvC9izyMmjan9xMY0E8MOZbHK
yBp2KdxDvA9eFuTJdt7awPul5JIG2MvX7emREyop+KyKMKLM1N5S30b6Whlth8fD
PYrJ2H71rbXWqyYJywBFvrRSPtxn4sBhlkVM6MekhyOKDatRxKDGVrBYh82hirq7
Kjj6UgLwyFfi2u1CPozk3tRX802P6TOTI0vNbOsniAHbDWTNo1zYDf3zEasVVSn+
eu2fzLFkl00eejRoxQNcoRHqDhR9SbayV7yVZJCCL9R1rsJGS5ud
-----END CERTIFICATE-----
Generated at Fri Aug 21 07:26:21 2026 by rpki-client