Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/8PG-fi4UKZTsI-qGra5FYLxhK7U.roa
File: 8PG-fi4UKZTsI-qGra5FYLxhK7U.roa (raw, json)
Hash identifier: rVcMkzlcbjAZCYKt1vWuh1f3Uw3Bkd84bPp/2fCkd84=
Subject key identifier: F0:F1:BE:7E:2E:14:29:94:EC:23:EA:86:AD:AE:45:60:BC:61:2B:B5
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 01A0596EDB1DEB6EB892B059E16DCCC79A0E
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/8PG-fi4UKZTsI-qGra5FYLxhK7U.roa
Signing time: Mon 31 Aug 2026 20:07:12 +0000
ROA not before: Mon 31 Aug 2026 20:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47457
IP address blocks: 91.217.194.0/24 maxlen: 24
194.54.12.0/24 maxlen: 24
195.43.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:6e:db:1d:eb:6e:b8:92:b0:59:e1:6d:cc:c7:9a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Aug 31 20:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0f1be7e2e142994ec23ea86adae4560bc612bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:95:0a:9b:0f:63:86:4d:c9:f1:09:92:b4:
27:ca:05:9c:fd:80:c8:05:07:8b:82:65:50:b6:8b:
0a:6d:5d:d6:ca:ec:78:c7:0c:3e:cf:09:2c:44:5f:
28:dc:d3:9d:ab:57:fd:7f:b5:30:f3:5b:d3:6a:04:
80:df:99:c4:a7:ad:57:80:60:6a:48:32:ba:ba:d2:
d8:0a:00:ad:41:02:1c:8f:5c:1a:91:7f:98:7d:75:
8e:c8:4c:2f:16:e0:93:6d:8f:67:f0:6d:5a:fb:c6:
10:f3:50:43:48:3a:4a:22:5d:81:44:25:38:4e:dc:
ee:69:d7:ba:18:79:cd:4b:13:43:17:c9:80:8e:00:
4d:f1:03:f7:29:2a:95:06:b9:79:5c:76:3f:e5:6a:
48:5a:fa:ac:ef:6b:3e:22:33:db:5f:06:b5:31:21:
16:67:ea:c2:78:20:bc:0b:d0:09:df:82:62:99:66:
1d:f9:19:ea:38:b3:c3:f2:03:a1:6d:d2:9c:9d:12:
24:b5:03:a9:27:80:70:04:bb:80:95:9f:39:5b:46:
34:2c:37:84:96:75:b8:f3:c4:49:80:b5:fe:49:2f:
47:18:f1:68:26:ea:fa:37:12:bd:40:0d:e8:d4:90:
e9:a0:6c:9b:ed:5f:73:c4:a0:50:b3:88:7b:ac:ec:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F1:BE:7E:2E:14:29:94:EC:23:EA:86:AD:AE:45:60:BC:61:2B:B5
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/8PG-fi4UKZTsI-qGra5FYLxhK7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.194.0/24
194.54.12.0/24
195.43.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f0:0b:3c:65:dc:1e:a3:95:a7:45:1a:4c:c2:74:84:66:3b:
47:a0:17:95:e8:a7:e7:de:bd:2b:a0:61:57:49:8a:7e:7b:a6:
57:eb:7f:83:3b:1b:ab:51:3c:9a:10:23:33:26:22:e6:2d:80:
0c:45:13:b0:98:07:7d:24:8d:90:26:79:24:0d:fb:a1:66:03:
b3:d3:f0:71:2e:13:51:70:50:bb:aa:a6:5c:c3:6d:af:f3:ed:
cf:e8:c0:64:71:90:18:6a:9a:85:87:1d:13:36:94:66:98:84:
ee:8e:86:fa:52:88:89:9c:ce:96:86:36:c5:23:f8:7e:9e:04:
74:6e:ec:78:ef:1c:2b:39:e2:e6:1c:d9:72:df:f6:19:cb:81:
05:f3:40:1b:1d:79:dd:76:1e:e6:be:f0:30:8c:8f:f5:7a:d1:
ef:a0:19:6e:2a:58:7f:97:50:85:8c:70:5a:21:28:1a:ac:71:
2f:5a:c9:ec:0e:1b:6f:f8:85:43:15:ca:48:40:36:cf:ee:a9:
5f:27:39:ca:78:cf:1a:9c:4e:9c:7b:79:6a:e9:fb:66:18:43:
45:84:fb:b4:4e:50:21:f0:1b:e5:d3:8b:f8:fc:cd:b5:1c:b5:
59:1c:06:7a:6e:a5:0b:23:4a:76:65:3f:41:10:d8:6d:fb:a7:
9f:cf:b8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:56 2026 by rpki-client