Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/8MOBBqAqf18FTqoFJD2CeKB_s6A.roa
File: 8MOBBqAqf18FTqoFJD2CeKB_s6A.roa (raw, json)
Hash identifier: SJzDzENNLFTCkG0xRq9XVOdikvbwmssmU54q+OJF0sw=
Subject key identifier: F0:C3:81:06:A0:2A:7F:5F:05:4E:AA:05:24:3D:82:78:A0:7F:B3:A0
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 019CFB41F7A0A15F003642DE6DE5069F7665
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/8MOBBqAqf18FTqoFJD2CeKB_s6A.roa
Signing time: Tue 17 Mar 2026 10:05:30 +0000
ROA not before: Tue 17 Mar 2026 10:05:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 172.216.13.0/24 maxlen: 24
172.216.14.0/24 maxlen: 24
172.216.15.0/24 maxlen: 24
2a09:a702:24::/48 maxlen: 48
2a09:a702:ae::/48 maxlen: 48
2a09:a702:af::/48 maxlen: 48
2a09:a702:b2::/48 maxlen: 48
2a09:a702:b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:41:f7:a0:a1:5f:00:36:42:de:6d:e5:06:9f:76:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Mar 17 10:05:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0c38106a02a7f5f054eaa05243d8278a07fb3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:1c:ed:cb:87:40:ef:79:97:4b:92:42:1e:
7f:19:e5:22:05:61:93:4f:7a:09:4e:bc:e5:fd:2e:
2f:82:1e:c2:24:79:70:8f:5e:97:fc:02:b3:59:a8:
03:2f:d0:63:a9:7a:64:6a:be:6c:96:60:83:31:6a:
0b:4b:7a:21:3d:74:71:f5:b6:14:a0:12:d5:39:f3:
c1:46:0d:ff:d7:d0:b8:04:a9:d9:29:8d:24:85:b5:
80:d3:e4:f1:46:c1:83:5c:19:c0:c9:a8:46:60:be:
29:52:a1:ca:2b:9b:53:df:5a:c4:99:d2:1e:bf:35:
e6:5e:b2:33:5b:9f:1a:1b:ff:18:32:13:d2:da:fb:
7a:05:ca:5b:c9:70:9b:57:50:b3:b0:63:8e:ce:3d:
d0:5a:a8:cf:08:45:8e:aa:53:5f:39:e2:9d:3a:bc:
0d:57:2d:3f:88:fd:a5:5c:84:81:73:d0:58:51:1c:
93:7b:e5:93:3a:e0:1f:8d:49:96:4e:8d:1f:79:a7:
1b:c9:d7:26:60:7b:aa:42:e3:8f:ca:ca:13:ec:30:
78:13:e2:0d:67:10:16:49:52:d4:3a:d0:db:b6:9d:
5e:72:56:c1:f2:03:86:36:56:33:3f:28:e6:ec:8d:
03:cb:f5:12:10:b4:e2:32:6e:a0:67:bb:8d:51:f7:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:81:06:A0:2A:7F:5F:05:4E:AA:05:24:3D:82:78:A0:7F:B3:A0
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/8MOBBqAqf18FTqoFJD2CeKB_s6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.216.13.0-172.216.15.255
IPv6:
2a09:a702:24::/48
2a09:a702:ae::/47
2a09:a702:b2::/47
Signature Algorithm: sha256WithRSAEncryption
39:e7:0d:fa:82:ed:bf:ce:ca:fb:79:fe:1e:23:10:53:48:f6:
3a:ce:dc:3e:7b:64:01:4a:9d:a8:88:1e:08:6e:f0:22:31:db:
a0:ed:5c:c8:10:22:f7:25:56:d0:3f:89:2f:3b:99:05:51:36:
21:68:c1:d8:5b:c6:70:b4:34:63:ba:13:47:48:38:ec:e8:d4:
b6:3c:2d:4e:74:fe:e4:59:fa:ae:80:37:d2:da:65:f0:07:ad:
79:df:f0:4f:54:48:bb:41:63:2e:01:27:dc:b4:e2:09:7a:66:
f2:54:22:55:f2:01:24:0e:7a:a6:58:d6:4f:88:bb:08:c5:46:
23:40:0a:1b:03:00:0d:90:fc:f7:87:ec:b5:4a:63:c1:14:b3:
bc:a1:e5:5f:86:67:0d:f9:5e:1d:72:55:16:56:d2:3a:0c:6a:
44:4a:1e:43:3e:ba:09:9a:95:21:27:c3:1e:ea:51:b2:83:29:
7a:71:2f:ec:c9:51:e5:d6:7a:d2:36:15:12:c2:be:aa:a4:1a:
da:0c:7d:a1:c4:70:db:5c:46:6d:6e:c0:f9:ac:80:03:ff:00:
15:9c:ad:82:d7:5c:16:c3:9d:b8:d3:04:aa:5a:1b:4b:b8:e1:
7a:c6:61:9d:5c:8e:50:b7:e1:8e:1f:97:7d:2e:51:c0:79:bf:
b4:7a:02:85
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZz7QfegoV8ANkLebeUGn3ZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0
YmY4MDAwHhcNMjYwMzE3MTAwNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGMzODEwNmEwMmE3ZjVmMDU0ZWFhMDUyNDNkODI3OGEwN2ZiM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g4c7cuHQO95l0uSQh5/GeUiBWGT
T3oJTrzl/S4vgh7CJHlwj16X/AKzWagDL9BjqXpkar5slmCDMWoLS3ohPXRx9bYU
oBLVOfPBRg3/19C4BKnZKY0khbWA0+TxRsGDXBnAyahGYL4pUqHKK5tT31rEmdIe
vzXmXrIzW58aG/8YMhPS2vt6BcpbyXCbV1CzsGOOzj3QWqjPCEWOqlNfOeKdOrwN
Vy0/iP2lXISBc9BYURyTe+WTOuAfjUmWTo0feacbydcmYHuqQuOPysoT7DB4E+IN
ZxAWSVLUOtDbtp1eclbB8gOGNlYzPyjm7I0Dy/USELTiMm6gZ7uNUffMhwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFPDDgQagKn9fBU6qBSQ9gnigf7OgMB8GA1UdIwQY
MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt
NDhkNWZmNGJhMjU1LzEvOE1PQkJxQXFmMThGVHFvRkpEMkNlS0JfczZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1
LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAUBAIAATAOMAwDBACs2A0D
BASs2AAwIQQCAAIwGwMHACoJpwIAJAMHASoJpwIArgMHASoJpwIAsjANBgkqhkiG
9w0BAQsFAAOCAQEAOecN+oLtv87K+3n+HiMQU0j2Os7cPntkAUqdqIgeCG7wIjHb
oO1cyBAi9yVW0D+JLzuZBVE2IWjB2FvGcLQ0Y7oTR0g47OjUtjwtTnT+5Fn6roA3
0tpl8Aeted/wT1RIu0FjLgEn3LTiCXpm8lQiVfIBJA56pljWT4i7CMVGI0AKGwMA
DZD894fstUpjwRSzvKHlX4ZnDfleHXJVFlbSOgxqREoeQz66CZqVISfDHupRsoMp
enEv7MlR5dZ60jYVEsK+qqQa2gx9ocRw21xGbW7A+ayAA/8AFZytgtdcFsOduNME
qlobS7jhesZhnVyOULfhjh+XfS5RwHm/tHoChQ==
-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:43 2026 by rpki-client