Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1-8bxl4_rfbBwo8TCBr5odrr0ZmY.roa
File: 1-8bxl4_rfbBwo8TCBr5odrr0ZmY.roa (raw, json)
Hash identifier: cowmIq8yi7K6Ej80mk+QDIVVCB4mvUbDfkJB3Hrr7EA=
Subject key identifier: FB:C6:F1:97:8F:EB:7D:B0:70:A3:C4:C2:06:BE:68:76:BA:F4:66:66
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 01A1394EE27614B642D82D9C005A04CE3A7A
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1-8bxl4_rfbBwo8TCBr5odrr0ZmY.roa
Signing time: Wed 14 Oct 2026 07:27:13 +0000
ROA not before: Wed 14 Oct 2026 07:27:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35168
IP address blocks: 89.38.164.0/22 maxlen: 22
89.38.164.0/24 maxlen: 24
89.38.165.0/24 maxlen: 24
89.38.166.0/24 maxlen: 24
89.38.167.0/24 maxlen: 24
89.42.206.0/23 maxlen: 23
89.42.206.0/24 maxlen: 24
89.42.207.0/24 maxlen: 24
95.133.148.0/22 maxlen: 22
95.133.148.0/23 maxlen: 23
95.133.150.0/23 maxlen: 23
2a01:68c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:4e:e2:76:14:b6:42:d8:2d:9c:00:5a:04:ce:3a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Oct 14 07:27:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbc6f1978feb7db070a3c4c206be6876baf46666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:7e:48:d8:0e:30:36:f8:c3:02:ff:e5:22:
28:74:74:41:74:b3:aa:e5:93:c7:ae:85:ff:22:73:
74:0c:f5:4e:a6:a4:e8:80:2b:4a:a0:29:10:3d:66:
bd:36:87:90:e2:7c:d6:78:a7:e5:f1:ef:71:9f:99:
6b:42:0e:4a:ac:d0:3a:0d:a6:0a:93:fd:75:9e:25:
86:f3:b5:ff:5c:e8:79:99:77:22:1e:88:3d:3d:f0:
87:8d:c6:89:dc:17:d4:23:ac:2b:26:52:5b:42:00:
f2:26:d2:bd:49:ba:fb:4a:55:3a:fc:cc:46:60:4e:
85:52:cb:83:e3:d1:68:3d:4b:c1:a9:60:68:4a:74:
33:f5:38:63:58:60:18:31:65:29:8b:c3:5b:c9:c3:
83:af:1e:09:75:02:3f:fb:de:2a:04:37:3d:5a:ab:
e2:36:cc:45:79:4e:4f:f3:1e:7b:92:2c:48:14:43:
48:d1:58:6f:e5:b8:b9:57:5c:eb:84:10:ce:19:1a:
e0:db:a6:9b:30:09:0c:3f:dc:cb:e7:39:e1:4a:62:
4e:ba:10:d9:96:80:94:b6:72:0f:c7:e6:f5:2b:57:
3b:c7:c5:94:2e:aa:74:22:c5:f1:94:c9:4a:2f:35:
4c:a8:dc:5a:99:36:22:b3:8c:c2:ad:4f:77:ae:40:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:F1:97:8F:EB:7D:B0:70:A3:C4:C2:06:BE:68:76:BA:F4:66:66
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1-8bxl4_rfbBwo8TCBr5odrr0ZmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.164.0/22
89.42.206.0/23
95.133.148.0/22
IPv6:
2a01:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:e5:c6:60:26:b2:ec:16:98:ea:2d:53:93:4b:30:43:72:ac:
d9:34:9d:f3:39:a4:fd:51:8c:b4:1f:bb:2a:11:b3:2c:f9:8e:
69:84:ee:fc:77:79:06:e2:18:1d:62:9d:b8:ab:2c:8d:82:53:
45:38:34:f1:69:04:a8:6d:0c:3e:50:30:6d:7e:da:0a:19:ad:
e9:1e:c5:84:41:a7:f1:10:46:4b:91:86:e5:1c:15:f4:60:b6:
d4:cb:1b:af:72:7a:cf:ba:34:5a:d2:88:59:f3:84:59:fa:d5:
e2:55:bf:5c:6c:9c:cf:79:e1:2a:f6:4a:c0:e6:77:77:0d:3a:
f4:b9:e5:0e:d9:9f:f6:4d:bd:e8:4d:69:4d:ea:e1:ee:b7:cb:
aa:4b:d4:b1:55:4a:a6:85:d3:58:d1:00:3e:bd:1b:f1:e8:55:
e0:81:8a:1d:28:db:5c:b6:9f:ee:be:fa:f1:8a:82:ae:50:c6:
a8:6d:91:df:ae:c0:a4:6a:84:0c:a6:d2:35:6b:5e:19:c7:a5:
09:d8:1c:c2:e1:db:64:28:bf:4d:35:81:58:5f:f1:bf:20:ed:
43:d5:fb:8a:06:f9:5d:8c:2f:26:98:f3:28:fb:73:13:da:b6:
da:ec:1a:82:4c:4b:ad:9c:69:68:72:a5:77:27:f2:16:57:67:
2f:73:57:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:27 2026 by rpki-client