Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/8rkzQLcFUe-BQ2lYqW2VD3ECSQs.roa
File: 8rkzQLcFUe-BQ2lYqW2VD3ECSQs.roa (raw, json)
Hash identifier: v1HZn2C+BY993pN/gt8leEj8y1cA0DGtdDVhranmDdY=
Subject key identifier: F2:B9:33:40:B7:05:51:EF:81:43:69:58:A9:6D:95:0F:71:02:49:0B
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 01A115308E312C4FEA00F236FC7DE68F0F22
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/8rkzQLcFUe-BQ2lYqW2VD3ECSQs.roa
Signing time: Wed 07 Oct 2026 07:07:45 +0000
ROA not before: Wed 07 Oct 2026 07:07:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198024
IP address blocks: 185.124.88.0/22 maxlen: 22
185.124.88.0/23 maxlen: 23
185.124.90.0/23 maxlen: 23
2a05:b080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:30:8e:31:2c:4f:ea:00:f2:36:fc:7d:e6:8f:0f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Oct 7 07:07:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2b93340b70551ef81436958a96d950f7102490b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:7f:df:25:2f:12:ac:f6:d2:3c:66:ee:3e:
2c:16:73:c3:27:67:17:fd:5b:4c:7d:4d:7a:54:fe:
81:af:0a:a3:2a:d6:92:39:a0:c9:a1:db:66:c1:cc:
8f:7b:ee:fa:ea:85:2d:31:08:d9:2d:0a:39:2a:f0:
8d:d3:b2:7d:75:a2:e5:ed:cb:35:d4:d9:9b:9f:e7:
6c:21:9b:f9:9b:48:ea:91:b7:b8:12:f0:7b:35:34:
de:a2:43:f7:3d:97:e2:63:6c:ef:4f:ba:f1:be:f4:
ce:91:0a:ca:83:e4:e2:9c:2e:05:50:e4:05:1e:ca:
78:e1:3c:c3:db:f3:72:4f:10:9f:73:d6:66:4f:73:
be:5b:88:c3:44:41:80:bb:c1:fe:0a:33:28:cb:de:
82:3f:eb:71:45:c8:d2:95:e1:04:08:d3:ab:aa:64:
07:52:bb:b0:67:cd:d9:fb:45:6e:8b:ad:8f:18:ed:
fe:f6:49:a2:49:a6:2f:56:17:00:a5:be:1b:8e:aa:
75:b9:7d:fa:ce:52:7c:9c:6f:2d:35:d9:ac:19:98:
c9:35:86:79:6e:ea:89:c1:4d:b6:0b:b7:8b:0d:c8:
25:77:f9:cc:bc:d7:1b:33:9f:ec:14:28:16:16:fa:
9e:7d:5e:55:2b:1d:ec:f6:be:2b:3e:95:a8:cc:e1:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B9:33:40:B7:05:51:EF:81:43:69:58:A9:6D:95:0F:71:02:49:0B
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/8rkzQLcFUe-BQ2lYqW2VD3ECSQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.88.0/22
IPv6:
2a05:b080::/29
Signature Algorithm: sha256WithRSAEncryption
66:80:fd:ef:df:a9:0d:26:be:4e:d9:e2:d5:60:86:c4:ba:20:
5e:91:2a:5e:3f:ab:b3:ed:f1:29:e9:b8:76:f6:24:2c:7b:8f:
05:7b:0a:d4:21:60:d4:17:2d:51:c8:d2:70:2b:5c:c2:a5:4e:
12:1c:cb:37:b7:90:42:cc:93:7f:12:a5:98:83:2c:ee:54:a7:
63:6b:80:fb:9e:12:ce:e2:d9:91:c3:d1:57:46:13:81:2b:2b:
e3:be:ea:99:b2:00:6a:c9:77:6e:b0:a5:7a:52:54:93:47:13:
b9:dc:38:f8:dc:1c:30:53:61:52:ca:16:5c:9b:16:04:d1:11:
ad:68:d0:4f:61:29:a0:95:a1:b2:1d:7f:a7:bf:58:97:aa:80:
6a:78:bc:cf:1d:e1:4a:56:cc:72:de:4a:40:99:a4:4d:d7:84:
aa:78:72:9d:a4:e3:73:9f:30:38:bb:7c:ee:cf:61:06:bf:42:
2e:5c:a1:71:45:07:ee:e6:5c:23:58:6b:9b:d3:ae:7f:00:39:
bf:c1:df:39:a5:3a:f3:0e:b3:0f:26:8d:cd:9a:0e:77:8e:4b:
1a:fb:f1:99:a3:af:05:e3:74:35:12:84:50:f1:e8:fe:f5:89:
81:97:73:8b:a9:2c:fd:87:1c:67:61:4c:6b:6a:42:38:b5:f9:
be:fc:7c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:08:38 2026 by rpki-client