Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/44rdbiZ5W01w2FHGmmFZuLEjtH4.roa
File: 44rdbiZ5W01w2FHGmmFZuLEjtH4.roa (raw, json)
Hash identifier: BAjDaUqD15lGYQOgjoqQVVyEDv/bCkhBoeDQRC5iHCc=
Subject key identifier: E3:8A:DD:6E:26:79:5B:4D:70:D8:51:C6:9A:61:59:B8:B1:23:B4:7E
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 01A13E8BEA4B1BE5A4C6A5CDCA8C67500093
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/44rdbiZ5W01w2FHGmmFZuLEjtH4.roa
Signing time: Thu 15 Oct 2026 07:51:59 +0000
ROA not before: Thu 15 Oct 2026 07:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209811
IP address blocks: 185.208.8.0/24 maxlen: 24
194.31.160.0/23 maxlen: 23
2a09:1680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:8b:ea:4b:1b:e5:a4:c6:a5:cd:ca:8c:67:50:00:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Oct 15 07:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e38add6e26795b4d70d851c69a6159b8b123b47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:fd:f8:ae:ea:59:82:a1:bd:d0:a0:20:ac:
af:cb:c5:83:d0:16:48:eb:3d:36:98:bb:d4:72:79:
17:43:66:6c:71:34:cc:78:9c:d3:a8:e3:c5:32:a0:
74:59:9c:25:62:d1:5c:bf:eb:a1:54:08:93:de:0b:
a1:f2:45:14:e4:6a:f3:31:6a:72:d4:dc:56:63:3f:
6c:d7:86:76:1c:e7:cc:44:09:4a:fd:eb:a8:dc:10:
ff:07:61:21:da:39:bb:fc:77:28:bf:3c:8c:ff:02:
4c:09:3f:90:1d:20:9e:71:ce:d6:09:76:1f:b2:5f:
3f:2f:c5:69:26:52:fb:c3:d4:b0:cc:1e:9b:61:fa:
f2:01:99:4f:97:3c:49:53:49:89:6e:3c:ab:37:ab:
69:70:ff:1e:9c:80:3e:82:74:65:3a:39:ad:47:1c:
a8:9e:ee:4b:8c:8e:5c:e1:f3:9e:ba:3b:0e:b7:7d:
e5:da:c8:06:1a:2c:55:47:e6:b7:91:a4:01:64:fd:
24:bb:0d:1a:2d:8a:1d:2f:2a:13:e7:bf:5c:b5:2a:
3d:98:9f:88:eb:5f:f4:69:61:8f:2f:5a:3f:22:93:
3c:22:dc:c6:5a:c9:eb:ca:2d:14:53:f5:67:16:12:
a3:b4:8b:0e:09:93:51:fe:01:d6:f8:65:58:06:18:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:DD:6E:26:79:5B:4D:70:D8:51:C6:9A:61:59:B8:B1:23:B4:7E
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/44rdbiZ5W01w2FHGmmFZuLEjtH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.8.0/24
194.31.160.0/23
IPv6:
2a09:1680::/48
Signature Algorithm: sha256WithRSAEncryption
51:55:62:37:d4:fc:97:c0:61:cf:10:27:42:ea:95:5a:a3:5e:
e4:19:e5:62:dc:29:3d:ad:d6:85:f2:2c:6e:e5:87:b4:54:c0:
6b:d2:79:b4:f8:24:d9:22:d6:1b:1c:6a:6e:dd:3c:bf:76:2c:
3b:b1:f5:36:97:31:10:83:0f:ab:54:54:6a:19:8d:63:62:1b:
0b:7d:b5:df:d6:17:2f:81:89:06:14:9a:69:fe:cb:32:22:1f:
4c:0b:62:a4:37:59:c0:8a:07:5e:36:6d:16:c2:bd:2b:7a:e8:
59:76:ec:5c:70:63:d2:ef:78:f6:b6:9c:c5:26:6f:87:a3:74:
0f:5a:7d:28:28:73:13:33:3b:18:92:34:23:46:bd:c6:4e:c4:
41:77:5a:47:45:49:1c:85:69:13:ae:37:e3:b7:cb:5f:0a:3a:
d3:40:3a:c8:7e:02:59:cf:4f:5f:89:2d:87:4d:7a:78:30:78:
94:2d:b7:78:c4:af:75:30:b8:f8:28:c0:a4:83:f7:51:8a:20:
e0:2a:0c:bd:bf:37:d7:6c:4f:6b:b4:ac:70:72:cd:31:ce:66:
68:17:44:d2:5a:bb:db:ef:5d:38:69:f8:d5:c5:28:82:89:1a:
64:4a:22:67:09:f0:f8:56:b4:2b:12:6f:38:72:30:17:cb:c3:
42:9b:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:07 2026 by rpki-client