Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/8Tje-qV6QLUefgoToblFnjxFOug.roa
File: 8Tje-qV6QLUefgoToblFnjxFOug.roa (raw, json)
Hash identifier: RaGHLexPAGlKd+1GFvQT68V+7VmWYOnxyCrKQ89UTuM=
Subject key identifier: F1:38:DE:FA:A5:7A:40:B5:1E:7E:0A:13:A1:B9:45:9E:3C:45:3A:E8
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019D6BEF5471984F1DAB03FC3327699FD81C
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/8Tje-qV6QLUefgoToblFnjxFOug.roa
Signing time: Wed 08 Apr 2026 07:12:20 +0000
ROA not before: Wed 08 Apr 2026 07:12:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.85.12.0/24 maxlen: 24
45.85.13.0/24 maxlen: 24
193.43.142.0/23 maxlen: 24
193.43.142.0/24 maxlen: 24
193.43.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:ef:54:71:98:4f:1d:ab:03:fc:33:27:69:9f:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Apr 8 07:12:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f138defaa57a40b51e7e0a13a1b9459e3c453ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:01:3c:44:d4:85:41:1f:47:3c:3e:c5:b4:
cc:40:69:da:5c:0a:a1:96:9b:27:82:a0:6a:b5:7e:
f4:55:da:ac:4c:9d:71:50:1b:d6:1c:98:49:31:33:
e9:23:eb:45:6f:88:31:0b:47:cb:67:40:40:13:7f:
51:8a:2c:d4:05:70:10:c9:d0:7e:90:f4:fc:c7:97:
dc:2d:e4:de:46:92:82:7c:99:b3:22:37:b8:72:9f:
4e:b7:27:19:32:70:1d:05:95:d9:6d:9b:f6:dc:b7:
e8:09:33:99:79:79:5f:93:a7:f9:30:86:15:33:67:
de:3c:28:cf:c7:19:cd:b6:34:da:79:2c:27:ff:e6:
69:07:b8:c3:f7:5f:4f:70:0a:28:84:12:ed:b1:91:
04:70:82:b1:a2:ac:b1:e0:0a:87:13:74:47:5d:9a:
ac:51:dd:61:e3:74:14:a7:5d:1f:9d:4a:49:9b:c6:
82:ce:0a:cd:65:cf:db:fe:a2:08:5a:4e:9d:98:bd:
c5:07:e1:a6:98:f0:30:76:c5:3c:af:51:f9:9d:45:
00:50:3c:6d:c9:12:b2:d7:dd:d1:db:ca:54:8b:c2:
0e:ae:93:1d:0a:2e:06:9e:6f:96:2b:0a:e9:20:58:
29:8e:f1:d1:2f:7d:36:4b:3a:ed:f9:1e:96:7c:67:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:38:DE:FA:A5:7A:40:B5:1E:7E:0A:13:A1:B9:45:9E:3C:45:3A:E8
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/8Tje-qV6QLUefgoToblFnjxFOug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.12.0/23
193.43.142.0/23
Signature Algorithm: sha256WithRSAEncryption
50:ee:e7:bc:e6:61:3f:bb:25:4d:22:aa:7a:c2:1c:71:fb:59:
d5:48:94:5b:14:30:f7:4f:3b:23:5c:77:20:5d:72:99:f3:1c:
e2:b1:47:bc:09:4d:b2:ba:c8:45:7d:ab:5f:20:71:34:f5:48:
a9:48:e5:74:d5:39:43:89:3c:b4:52:08:02:1e:2a:98:42:af:
8c:c0:57:24:01:29:88:ac:1f:25:2b:e9:ed:27:a6:da:1e:c2:
7c:a2:0a:85:56:40:6f:44:31:f3:ac:ff:51:46:49:59:8e:2f:
8c:a4:d6:6d:d5:f9:c3:fb:3b:f6:83:a4:ff:fa:43:30:05:76:
91:2c:32:90:74:15:1b:81:c1:fa:3a:03:8d:8d:42:e6:00:f0:
ba:99:15:a0:e8:77:28:ae:8e:08:83:77:75:c0:34:99:6e:29:
98:29:a6:83:18:86:37:45:db:d9:fc:91:07:a3:cd:1e:53:79:
c3:ad:18:88:6a:45:c9:d9:7e:73:71:02:db:ad:3f:b6:e3:57:
98:b1:20:63:6d:da:5e:fb:5b:71:79:06:f0:eb:40:8f:c8:e7:
21:8f:e8:2e:3e:02:ec:98:b1:10:a1:95:76:99:68:d4:78:ef:
17:00:8f:9a:9d:ee:c0:60:6e:c3:41:ff:18:75:bd:95:47:cd:
67:91:4c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:52 2026 by rpki-client