Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/1-j8jDP3bORh426kMEUjRlIcJjMc.roa
File: 1-j8jDP3bORh426kMEUjRlIcJjMc.roa (raw, json)
Hash identifier: +OdXpb2PPrieyJ1lwa2CS2y8tgLbHR1wIMWCu8Z4P5I=
Subject key identifier: FA:3F:23:0C:FD:DB:39:18:78:DB:A9:0C:11:48:D1:94:87:09:8C:C7
Certificate issuer: /CN=8f8bbca04adb7a9d05e497fba4be1be8972bab92
Certificate serial: 01A159CF82F150FAAD9D280CF9CBEC6A9C9D
Authority key identifier: 8F:8B:BC:A0:4A:DB:7A:9D:05:E4:97:FB:A4:BE:1B:E8:97:2B:AB:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4u8oErbep0F5Jf7pL4b6Jcrq5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/1-j8jDP3bORh426kMEUjRlIcJjMc.roa
Signing time: Tue 20 Oct 2026 14:55:34 +0000
ROA not before: Tue 20 Oct 2026 14:55:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218810
IP address blocks: 85.137.181.0/24 maxlen: 24
89.39.66.0/24 maxlen: 24
153.56.255.0/24 maxlen: 24
188.191.144.0/24 maxlen: 24
2a0e:ad81::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/j4u8oErbep0F5Jf7pL4b6Jcrq5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/j4u8oErbep0F5Jf7pL4b6Jcrq5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j4u8oErbep0F5Jf7pL4b6Jcrq5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:cf:82:f1:50:fa:ad:9d:28:0c:f9:cb:ec:6a:9c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8bbca04adb7a9d05e497fba4be1be8972bab92
Validity
Not Before: Oct 20 14:55:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa3f230cfddb391878dba90c1148d19487098cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:cd:f9:81:fc:84:5a:f6:88:e4:b7:e4:a6:
f4:4e:7c:3a:cd:7d:f6:8d:9f:e6:a2:2b:a7:30:52:
7d:01:7a:d3:71:5e:0d:87:f1:87:51:2c:6e:d8:2b:
53:31:2d:c9:30:55:62:2f:2a:02:fe:33:7b:50:03:
e6:32:a8:c7:60:6c:b8:80:2c:a5:70:63:3e:0e:90:
b2:14:9c:57:66:cd:8b:32:b0:a0:01:ae:02:eb:36:
e0:f6:c3:ce:0e:9c:38:e8:e8:0e:87:a4:87:54:7d:
00:5c:84:95:6a:2d:78:c8:eb:33:8a:f8:b4:d6:7a:
eb:3d:49:29:33:bf:a3:59:a3:d9:dc:fc:97:dd:b5:
5b:7a:92:87:85:f7:08:37:51:34:09:a2:d9:8b:1e:
aa:3b:38:90:a4:12:e8:5f:91:d5:26:48:38:e3:c4:
4c:e9:76:47:84:7c:05:32:57:e6:42:e9:09:f6:49:
9d:69:2b:a2:51:83:6e:68:aa:fe:49:25:b6:42:a7:
bd:de:0c:3c:b6:c5:32:a7:89:d7:3e:e0:08:4f:6c:
29:6e:e0:fa:e2:3c:a0:76:a6:da:50:b4:49:ac:b5:
57:93:05:8d:34:4d:15:5e:ec:a8:f5:2a:0c:0a:b0:
2a:ea:0b:4e:d7:67:4a:bc:2d:47:bc:4d:16:c1:3b:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3F:23:0C:FD:DB:39:18:78:DB:A9:0C:11:48:D1:94:87:09:8C:C7
X509v3 Authority Key Identifier:
keyid:8F:8B:BC:A0:4A:DB:7A:9D:05:E4:97:FB:A4:BE:1B:E8:97:2B:AB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4u8oErbep0F5Jf7pL4b6Jcrq5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/1-j8jDP3bORh426kMEUjRlIcJjMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/j4u8oErbep0F5Jf7pL4b6Jcrq5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.181.0/24
89.39.66.0/24
153.56.255.0/24
188.191.144.0/24
IPv6:
2a0e:ad81::/33
Signature Algorithm: sha256WithRSAEncryption
27:28:0f:c5:61:8d:78:8a:e0:68:4b:b7:09:2c:76:d7:32:d5:
76:34:40:5d:53:a4:64:d0:ae:e3:bf:ff:e4:44:e8:ec:78:e1:
67:c7:31:47:18:37:5e:51:43:03:2c:ca:4d:f1:17:e5:01:b1:
95:95:10:a3:b8:c2:87:fc:f1:2f:fa:30:88:32:59:27:ad:8f:
74:27:bf:fe:f3:c7:73:91:ac:d3:e9:78:fb:11:ed:d3:c4:9f:
c0:ca:14:d2:d3:2e:7d:a4:ec:94:2f:e4:04:80:66:5d:50:70:
3a:69:ca:c5:da:8a:5a:3c:b8:17:16:e7:c3:4b:b8:0e:fa:84:
5c:42:e2:2e:45:c5:b6:dc:e0:58:f4:19:56:40:e1:a2:50:a7:
6e:d9:a6:6e:c4:63:f0:12:4c:e9:e4:c1:da:96:2f:da:32:3b:
42:e9:7f:09:4c:22:20:26:41:e7:d3:05:39:47:9c:85:e7:6b:
b9:f5:7f:eb:9a:7d:08:04:de:a1:eb:e9:2d:85:32:e3:50:cd:
5e:6d:6a:ea:ff:8f:c2:fe:aa:9b:c9:d4:63:f3:d2:42:82:c5:
02:d6:00:1e:26:32:34:0c:71:16:73:da:f7:43:76:57:95:12:
5f:a4:99:3f:1c:a3:8b:8b:7c:12:68:16:e6:ae:6b:51:34:60:
35:d7:92:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:25:32 2026 by rpki-client