Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/8vPsFa1BFVR4ViQZYg_og_0pp6Y.roa
File: 8vPsFa1BFVR4ViQZYg_og_0pp6Y.roa (raw, json)
Hash identifier: YdvaqoQT5SRBjajvMjlgh/ETbA78mijk1dtiXeQEhcY=
Subject key identifier: F2:F3:EC:15:AD:41:15:54:78:56:24:19:62:0F:E8:83:FD:29:A7:A6
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019EC5270E92928B8A633BEB3424BF508BD9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/8vPsFa1BFVR4ViQZYg_og_0pp6Y.roa
Signing time: Sun 14 Jun 2026 08:02:11 +0000
ROA not before: Sun 14 Jun 2026 08:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.138.210.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:27:0e:92:92:8b:8a:63:3b:eb:34:24:bf:50:8b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jun 14 08:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2f3ec15ad41155478562419620fe883fd29a7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:ed:e4:b6:13:91:28:61:d8:43:96:fc:22:
b4:37:3d:e3:d5:64:60:93:63:b8:33:84:14:bd:4f:
c4:b7:33:b1:f5:5c:bc:ec:2f:5f:40:8a:91:07:a2:
ea:6a:14:67:d5:23:b7:21:e2:33:06:15:e8:9a:75:
71:f4:11:d4:66:b3:f6:88:84:a4:5d:c8:23:39:db:
78:47:86:cf:84:aa:e6:07:3c:41:76:08:35:54:4d:
77:cd:aa:c9:93:a8:a2:59:05:a0:12:16:c3:65:77:
90:b7:0c:07:88:55:11:01:08:a0:16:6d:c3:c6:85:
52:00:b2:ef:3c:52:d1:34:7d:09:c5:45:a5:f6:3d:
55:7c:30:a6:c4:31:e9:c0:55:9f:e6:de:a1:28:77:
f8:bc:19:af:20:24:32:5b:71:2c:87:5c:aa:51:93:
60:b1:f2:2c:e1:61:19:34:0c:df:19:10:fd:4c:eb:
da:36:3d:f9:d3:b3:04:9c:f8:c6:19:46:fb:16:ff:
51:dd:f4:fa:0a:dd:c6:a7:cb:b5:d0:82:19:ea:1b:
1a:3d:e0:c0:ca:ee:19:62:d8:7d:af:71:16:7f:d0:
0c:aa:3d:31:16:cd:8f:b7:e7:e8:bc:e9:19:61:14:
b0:ec:b7:7e:8c:9c:89:d6:c1:d8:7b:dc:3b:e2:37:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F3:EC:15:AD:41:15:54:78:56:24:19:62:0F:E8:83:FD:29:A7:A6
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/8vPsFa1BFVR4ViQZYg_og_0pp6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/24
185.211.49.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5a:66:6a:5e:1c:3f:bc:69:12:40:34:f7:b1:4b:d6:ff:bc:
f3:39:1f:20:42:63:3f:0e:cc:37:fc:c3:60:57:e7:f0:e3:6e:
da:35:18:51:75:fe:c3:a1:ce:91:17:be:3a:a2:47:0c:5a:c0:
ab:ba:1b:c2:49:d8:89:4e:df:dc:52:e0:ae:18:1f:d1:95:39:
04:5e:60:86:ec:e9:9c:41:c3:42:75:42:75:34:8e:9a:4e:da:
05:0a:ea:0a:65:cd:b4:d9:dc:c7:e5:c6:40:c3:ea:59:aa:8e:
c2:31:c6:7e:d8:a6:81:b2:44:c0:57:a1:04:d6:25:6a:28:4c:
bc:c6:56:34:1b:ee:29:89:60:bb:b7:d0:df:e9:01:e2:22:97:
e8:df:79:9c:21:a6:57:1d:27:53:68:bf:95:87:54:c9:82:12:
c4:65:2d:6f:44:51:77:ea:5c:cd:8f:70:ba:de:fd:b8:35:11:
20:c2:2c:31:b1:8b:06:a1:60:5f:d2:37:8c:d2:82:c6:56:34:
d3:e9:e9:30:36:7a:a8:a3:00:2a:68:54:ed:89:1d:a9:e8:23:
91:09:90:0b:f4:d2:5f:02:48:e6:d5:f5:25:fe:be:e6:46:f3:
9e:91:22:22:3e:12:bb:f3:0e:83:e5:cc:b0:db:f7:ed:73:ba:
52:f1:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 02:15:22 2026 by rpki-client