Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/8ZLVcQSbNPNVDWuXCmGCr0G7x1M.roa
File: 8ZLVcQSbNPNVDWuXCmGCr0G7x1M.roa (raw, json)
Hash identifier: R8MpU4UMaGBrjPkl0XC57+1S995gBZY7N8nvDLObasM=
Subject key identifier: F1:92:D5:71:04:9B:34:F3:55:0D:6B:97:0A:61:82:AF:41:BB:C7:53
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 019E82183D70DCB7B3FBFAAF1DFD70AC2846
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/8ZLVcQSbNPNVDWuXCmGCr0G7x1M.roa
Signing time: Mon 01 Jun 2026 07:31:26 +0000
ROA not before: Mon 01 Jun 2026 07:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 185.181.228.0/23 maxlen: 23
185.181.228.0/24 maxlen: 24
185.181.229.0/24 maxlen: 24
185.181.230.0/24 maxlen: 24
185.181.231.0/24 maxlen: 24
194.33.40.0/22 maxlen: 24
194.33.40.0/24 maxlen: 24
194.33.41.0/24 maxlen: 24
194.33.42.0/24 maxlen: 24
194.33.43.0/24 maxlen: 24
2a0a:d580::/32 maxlen: 32
2a0a:d580:40::/48 maxlen: 48
2a0a:d580:70::/48 maxlen: 48
2a0a:d580:801::/48 maxlen: 48
2a0a:d580:804::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:18:3d:70:dc:b7:b3:fb:fa:af:1d:fd:70:ac:28:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Jun 1 07:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f192d571049b34f3550d6b970a6182af41bbc753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:ac:27:53:22:48:11:61:b1:55:61:75:99:
fb:59:ef:30:39:5c:93:1b:77:3f:95:e8:f5:16:11:
ee:56:88:b5:9d:96:01:22:aa:a2:1b:3c:10:fc:57:
54:57:26:45:16:c6:fd:8e:4e:54:1c:fb:40:a6:c2:
8b:4c:65:96:e4:cb:35:75:30:de:ad:4e:87:f9:6c:
f0:7f:22:fa:bf:cb:95:9a:87:2b:74:db:67:16:ea:
7a:2b:26:09:cc:24:cf:52:df:26:cf:f1:6f:fb:93:
de:10:51:55:29:a9:7e:f6:ee:4d:cc:16:8c:4c:ad:
8c:57:aa:d8:09:69:f1:7b:38:a7:c2:15:9e:b3:81:
e1:16:4d:67:bb:c1:93:78:7f:5e:43:da:23:01:84:
e2:27:8b:5d:18:5e:90:85:5b:7d:97:17:4f:ec:f4:
d1:ee:be:46:f5:8c:d6:84:65:7c:53:8e:b9:ee:78:
ad:2a:7f:56:93:67:04:14:7d:ec:c5:4c:84:df:07:
18:63:83:93:ef:a8:4f:4a:4e:3f:7b:cb:40:81:ff:
e9:49:05:1f:61:d6:dc:7a:52:9e:fa:20:f6:d4:c5:
19:74:90:52:a0:78:27:39:80:19:f2:ff:81:33:d8:
7a:93:64:c9:eb:62:8d:60:ff:08:d1:8f:58:53:e6:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:D5:71:04:9B:34:F3:55:0D:6B:97:0A:61:82:AF:41:BB:C7:53
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/8ZLVcQSbNPNVDWuXCmGCr0G7x1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.228.0/22
194.33.40.0/22
IPv6:
2a0a:d580::/32
Signature Algorithm: sha256WithRSAEncryption
34:da:42:f6:30:c0:f7:e4:48:90:07:92:6e:82:06:4b:64:4c:
85:55:17:a2:bc:b7:4f:cc:3f:e1:96:0a:76:e8:34:79:d6:9b:
58:ff:b5:0f:9e:9e:13:e7:94:df:16:1f:bd:44:43:25:f0:2c:
e1:57:7e:43:4f:c9:30:09:2d:76:2f:33:24:fd:21:b6:28:bf:
e1:ea:58:8d:d6:e2:3c:c2:b9:56:13:b7:9a:c9:f6:b3:ea:5c:
bc:55:dc:5d:4d:29:77:4f:b1:a0:72:ee:b3:a3:f7:45:01:bf:
52:0a:ae:a3:9c:fd:5e:18:57:b8:81:a0:f5:6e:7f:f1:05:e7:
6d:dc:e8:b9:79:b2:78:ac:9d:3d:a0:ab:7d:d9:cc:bf:1d:15:
ac:47:97:9c:55:38:a7:0a:50:65:50:6a:3a:4b:fc:f7:d2:6c:
54:63:45:d1:ab:23:ce:a9:e0:20:fe:b5:f4:cc:27:4d:91:1b:
f5:ed:80:24:54:0d:fa:38:a0:0e:16:59:23:f7:8a:5d:f0:b0:
0f:1f:da:0b:df:ae:d5:a7:37:61:85:c7:97:40:1c:9d:96:29:
92:1f:1f:9e:e2:67:9c:24:69:55:29:c3:0b:fe:1e:81:34:50:
9c:ce:01:4e:43:0f:25:9f:d5:dd:7c:b4:44:34:4c:11:f6:5e:
b4:ce:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:02 2026 by rpki-client