Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/8LiMsP5teezdiR8Ux5IeGxcNTiI.roa
File: 8LiMsP5teezdiR8Ux5IeGxcNTiI.roa (raw, json)
Hash identifier: khbWKbmjcKHJ7DJ+ikEmWXgiSZycFmJGOh34yHtbZ5A=
Subject key identifier: F0:B8:8C:B0:FE:6D:79:EC:DD:89:1F:14:C7:92:1E:1B:17:0D:4E:22
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 01A1014523A2DB748465332CA0601B4FB87C
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/8LiMsP5teezdiR8Ux5IeGxcNTiI.roa
Signing time: Sat 03 Oct 2026 10:17:50 +0000
ROA not before: Sat 03 Oct 2026 10:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51026
IP address blocks: 5.56.132.0/24 maxlen: 24
79.143.84.0/24 maxlen: 24
87.236.209.0/24 maxlen: 24
87.236.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:45:23:a2:db:74:84:65:33:2c:a0:60:1b:4f:b8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Oct 3 10:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0b88cb0fe6d79ecdd891f14c7921e1b170d4e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:9c:b2:07:db:b0:9e:9f:b7:0e:f8:1f:c2:
b3:ee:f1:ba:7c:25:3e:99:0c:8c:c4:99:cd:30:25:
9c:59:ab:bd:c6:a3:13:c6:31:37:f7:85:48:ce:8c:
be:d4:03:55:da:34:52:e3:6c:fb:ec:75:4d:71:a4:
de:57:92:3d:fe:38:99:b0:34:52:06:65:3b:56:e9:
59:44:a3:59:05:84:7d:d7:af:cb:1a:9d:ad:27:2c:
a2:7d:5b:da:ea:8e:82:16:a2:1b:8b:b8:57:0a:50:
ea:b8:67:dc:e7:b0:2c:e6:db:33:25:b2:01:2a:d5:
7e:b0:b5:30:8e:8c:e6:96:28:b0:be:99:c1:5a:52:
a6:82:6e:f2:42:ac:9f:bc:80:ce:bd:de:4c:c6:04:
19:1c:84:41:0a:c2:3e:c8:96:d7:6b:b7:82:97:4e:
53:6e:79:0d:48:dd:13:5f:87:a2:d6:87:cd:5b:c6:
d2:6c:db:3a:9b:de:cf:83:e0:43:31:cf:49:53:92:
df:47:69:a6:74:c7:a5:ca:e3:cc:91:59:a3:72:5a:
0e:79:d9:29:95:7c:8e:0f:94:a0:87:af:91:89:23:
2a:64:da:94:d1:14:3d:49:b9:31:ff:4e:68:8c:b5:
1c:da:3a:bb:81:c2:f0:99:40:d2:a3:f5:85:9a:87:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:8C:B0:FE:6D:79:EC:DD:89:1F:14:C7:92:1E:1B:17:0D:4E:22
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/8LiMsP5teezdiR8Ux5IeGxcNTiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.132.0/24
79.143.84.0/24
87.236.209.0/24
87.236.212.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:2d:5c:c7:46:d6:9a:c6:2b:dd:f1:65:61:8a:0d:e2:23:1b:
f6:97:62:b1:52:37:13:3e:0f:6f:7e:0f:75:07:51:3c:66:53:
98:e6:51:3f:48:ce:3e:48:4c:f1:c1:18:cb:ef:c7:6a:02:0e:
36:f3:c5:1b:d5:de:13:27:c6:35:fd:c1:e7:50:2c:cb:7d:5d:
bb:35:d5:18:19:9b:ca:f8:f0:24:97:d9:bd:c0:9a:ab:37:8f:
fc:9a:e1:74:4a:19:94:7e:14:0b:96:dd:28:e9:cf:5d:6d:2b:
48:92:fe:99:23:a9:2d:ac:e5:f6:23:c2:12:b7:e4:08:4e:55:
5f:9a:35:bc:73:f1:52:91:0b:bf:8f:ee:31:51:ca:e6:66:d9:
84:5c:dd:4a:ca:37:8d:e3:f8:04:b1:c5:fd:00:cb:a9:01:8e:
3d:09:bf:fa:94:1d:31:08:b2:77:55:41:76:fe:5e:7f:fb:47:
31:1b:36:62:99:43:d4:e2:05:61:f2:89:98:31:e2:b0:fb:f1:
e8:a1:d7:f7:f6:ab:71:6d:ec:05:f3:a3:88:e7:69:c0:88:f8:
63:4d:3c:10:97:db:ae:96:2f:f0:85:bb:cb:63:78:99:b5:1d:
e1:f5:66:a5:0b:d5:7e:13:05:c2:66:c6:28:09:d4:68:15:d8:
89:8b:80:50
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaEBRSOi23SEZTMsoGAbT7h8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjYxMDAzMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGI4OGNiMGZlNmQ3OWVjZGQ4OTFmMTRjNzkyMWUxYjE3MGQ0ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ScsgfbsJ6ftw74H8Kz7vG6fCU+
mQyMxJnNMCWcWau9xqMTxjE394VIzoy+1ANV2jRS42z77HVNcaTeV5I9/jiZsDRS
BmU7VulZRKNZBYR916/LGp2tJyyifVva6o6CFqIbi7hXClDquGfc57As5tszJbIB
KtV+sLUwjozmliiwvpnBWlKmgm7yQqyfvIDOvd5MxgQZHIRBCsI+yJbXa7eCl05T
bnkNSN0TX4ei1ofNW8bSbNs6m97Pg+BDMc9JU5LfR2mmdMelyuPMkVmjcloOedkp
lXyOD5Sgh6+RiSMqZNqU0RQ9Sbkx/05ojLUc2jq7gcLwmUDSo/WFmofQaQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPC4jLD+bXns3YkfFMeSHhsXDU4iMB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEvOExpTXNQNXRlZXpkaVI4VXg1SWVHeGNOVGlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABTiEAwQA
T49UAwQAV+zRAwQAV+zUMA0GCSqGSIb3DQEBCwUAA4IBAQDpLVzHRtaaxivd8WVh
ig3iIxv2l2KxUjcTPg9vfg91B1E8ZlOY5lE/SM4+SEzxwRjL78dqAg4288Ub1d4T
J8Y1/cHnUCzLfV27NdUYGZvK+PAkl9m9wJqrN4/8muF0ShmUfhQLlt0o6c9dbStI
kv6ZI6ktrOX2I8ISt+QITlVfmjW8c/FSkQu/j+4xUcrmZtmEXN1KyjeN4/gEscX9
AMupAY49Cb/6lB0xCLJ3VUF2/l5/+0cxGzZimUPU4gVh8omYMeKw+/Hoodf39qtx
bewF86OI52nAiPhjTTwQl9uuli/whbvLY3iZtR3h9WalC9V+EwXCZsYoCdRoFdiJ
i4BQ
-----END CERTIFICATE-----
Generated at Fri Oct 30 10:21:28 2026 by rpki-client