Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/8vcEWldQ9cTyKhmilwrjlJUGXrU.roa
File: 8vcEWldQ9cTyKhmilwrjlJUGXrU.roa (raw, json)
Hash identifier: RfdbjcIDiieBN5O35/2qXlbmJjpl1hX/qtvrUsTjGro=
Subject key identifier: F2:F7:04:5A:57:50:F5:C4:F2:2A:19:A2:97:0A:E3:94:95:06:5E:B5
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019F1E84EE27E1B2B44096B68AD005884C00
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/8vcEWldQ9cTyKhmilwrjlJUGXrU.roa
Signing time: Wed 01 Jul 2026 16:30:55 +0000
ROA not before: Wed 01 Jul 2026 16:30:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8126
IP address blocks: 216.23.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:84:ee:27:e1:b2:b4:40:96:b6:8a:d0:05:88:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jul 1 16:30:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2f7045a5750f5c4f22a19a2970ae39495065eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:2b:5d:5e:b7:5e:a5:df:4e:aa:c5:52:cf:
dc:77:00:14:b1:e2:66:dd:92:46:71:dd:9b:76:19:
9e:8e:1d:d1:1a:8a:ae:9b:fc:a0:45:99:c9:6e:ea:
2e:25:be:b7:6d:17:1b:b8:ee:52:58:4b:2f:8e:c1:
e3:22:29:ab:31:c6:7c:6e:97:07:14:38:f4:f1:74:
6e:89:b8:d4:2b:2f:cc:22:d5:64:5f:51:d9:fa:de:
e7:64:81:3e:c8:bb:7e:9e:8e:78:1d:02:d5:59:57:
4f:43:e7:24:b8:90:a5:ab:77:82:a6:ef:46:07:d5:
1d:7b:c7:dd:dc:3e:3f:fb:41:1a:d3:7c:f1:32:f4:
d0:f3:6f:a5:4a:03:2d:d5:05:ff:10:45:6c:11:50:
7c:81:07:1b:ea:b1:78:b4:c0:b1:53:9b:65:a2:08:
53:b2:ee:b6:b8:03:cb:67:ee:54:aa:67:90:47:64:
06:24:77:5c:d8:64:e7:61:80:bc:31:a4:79:3e:37:
3c:0e:b9:99:b4:2e:bf:65:a4:6d:5d:ca:9f:28:a8:
71:31:0e:32:49:74:e5:25:0e:74:88:d6:f8:15:02:
94:5a:ca:52:12:dc:45:53:cd:58:c6:fc:85:ec:9c:
03:5b:05:e0:31:71:5a:81:6d:ee:bc:87:38:0b:65:
97:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F7:04:5A:57:50:F5:C4:F2:2A:19:A2:97:0A:E3:94:95:06:5E:B5
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/8vcEWldQ9cTyKhmilwrjlJUGXrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.23.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:8f:f1:6c:1a:81:93:e7:7b:01:ce:b3:45:cc:a7:82:cd:ea:
f5:51:e9:8c:af:50:72:cb:0c:bf:72:c3:c6:c9:c8:13:8c:78:
75:50:9a:44:16:5a:87:1f:6f:af:8c:02:d3:86:87:3a:a4:94:
24:cc:06:d3:72:41:70:b2:0e:80:94:71:49:59:fc:70:25:5c:
9f:60:31:ae:52:0e:af:ba:7d:8d:3d:97:a7:ab:b6:b5:84:3d:
40:86:33:44:65:c1:f9:98:5b:79:cb:e2:7d:00:25:35:be:74:
d5:dd:06:12:9f:f0:f7:ab:77:6f:e3:e0:fe:1b:2d:da:09:d1:
3f:a1:10:11:e4:20:19:6f:51:98:e6:c5:1a:f0:28:be:cb:5a:
a6:0d:93:bf:1f:d5:c4:02:a9:2f:b5:4d:c6:4d:bb:5e:0b:f4:
c1:ae:eb:44:f0:52:4b:17:af:d6:ba:f0:5a:ee:31:fa:cb:12:
87:4f:77:96:fc:16:b0:0f:d1:5f:08:b8:20:78:41:3f:f6:ed:
1b:1b:ef:c5:f4:8f:45:7e:7d:a5:2a:64:5c:cc:c9:ab:21:8b:
33:32:6f:d8:11:29:d4:6e:a6:b0:4e:e9:a3:52:a8:4a:fc:f6:
44:3d:d7:31:77:5d:26:19:d7:27:de:ae:81:5f:f8:9a:6f:fe:
de:1a:7a:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8ehO4n4bK0QJa2itAFiEwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwNzAxMTYzMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmY3MDQ1YTU3NTBmNWM0ZjIyYTE5YTI5NzBhZTM5NDk1MDY1ZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cIrXV63XqXfTqrFUs/cdwAUseJm
3ZJGcd2bdhmejh3RGoqum/ygRZnJbuouJb63bRcbuO5SWEsvjsHjIimrMcZ8bpcH
FDj08XRuibjUKy/MItVkX1HZ+t7nZIE+yLt+no54HQLVWVdPQ+ckuJClq3eCpu9G
B9Ude8fd3D4/+0Ea03zxMvTQ82+lSgMt1QX/EEVsEVB8gQcb6rF4tMCxU5tloghT
su62uAPLZ+5UqmeQR2QGJHdc2GTnYYC8MaR5Pjc8DrmZtC6/ZaRtXcqfKKhxMQ4y
SXTlJQ50iNb4FQKUWspSEtxFU81YxvyF7JwDWwXgMXFagW3uvIc4C2WXcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPL3BFpXUPXE8ioZopcK45SVBl61MB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvOHZjRVdsZFE5Y1R5S2htaWx3cmpsSlVHWHJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Bd8MA0G
CSqGSIb3DQEBCwUAA4IBAQC6j/FsGoGT53sBzrNFzKeCzer1UemMr1Byywy/csPG
ycgTjHh1UJpEFlqHH2+vjALThoc6pJQkzAbTckFwsg6AlHFJWfxwJVyfYDGuUg6v
un2NPZenq7a1hD1AhjNEZcH5mFt5y+J9ACU1vnTV3QYSn/D3q3dv4+D+Gy3aCdE/
oRAR5CAZb1GY5sUa8Ci+y1qmDZO/H9XEAqkvtU3GTbteC/TBrutE8FJLF6/WuvBa
7jH6yxKHT3eW/BawD9FfCLggeEE/9u0bG+/F9I9Ffn2lKmRczMmrIYszMm/YESnU
bqawTumjUqhK/PZEPdcxd10mGdcn3q6BX/iab/7eGnoU
-----END CERTIFICATE-----
Generated at Mon Jul 13 13:47:02 2026 by rpki-client