Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/s8gjGJ-WJzuZLdxqVdLqNSUiNUI.roa
File: s8gjGJ-WJzuZLdxqVdLqNSUiNUI.roa (raw, json)
Hash identifier: 8bzzgBYcDhEMUDdhZY+J2KEoANX8KfVAi4iwlT+sdJs=
Subject key identifier: B3:C8:23:18:9F:96:27:3B:99:2D:DC:6A:55:D2:EA:35:25:22:35:42
Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial: 01A135C8137179DE505695D66513ABFD48A5
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/s8gjGJ-WJzuZLdxqVdLqNSUiNUI.roa
Signing time: Tue 13 Oct 2026 15:01:06 +0000
ROA not before: Tue 13 Oct 2026 15:01:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9044
IP address blocks: 82.220.0.0/16 maxlen: 24
185.252.240.0/22 maxlen: 23
185.252.240.0/24 maxlen: 24
194.124.208.0/24 maxlen: 24
212.41.64.0/18 maxlen: 19
212.101.0.0/19 maxlen: 20
2001:1680::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c8:13:71:79:de:50:56:95:d6:65:13:ab:fd:48:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Validity
Not Before: Oct 13 15:01:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3c823189f96273b992ddc6a55d2ea3525223542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:e2:f4:cc:0c:31:06:2d:63:64:a6:ae:b5:
bc:e5:b5:09:22:91:2d:5e:e7:3d:11:c2:a5:2c:65:
15:a0:ed:0d:43:69:ba:b4:d5:c5:ed:4d:23:41:d4:
45:56:a3:2b:8e:7d:36:27:36:3c:59:67:ac:5a:eb:
bb:c6:0a:af:f2:52:76:e5:be:dd:4d:11:cd:ac:ab:
a8:ac:c8:e0:33:aa:4d:a2:5a:92:53:ae:4a:23:d3:
ff:b2:02:63:6f:f4:a8:00:d1:59:47:7e:05:30:ae:
35:40:26:1a:d1:ed:87:b9:1c:c4:0c:78:be:ff:0b:
00:f0:15:1e:df:0c:c2:e3:3e:2b:9e:a2:29:82:6e:
21:f0:e7:b7:d5:60:d1:20:3f:d5:2c:cd:5e:ac:64:
fe:03:75:c5:67:7c:6f:ce:ee:36:d0:0f:3d:f8:18:
c0:06:63:fc:f8:a6:42:60:9c:06:ac:41:49:d0:58:
6a:72:77:08:cb:bb:c4:89:8a:e9:d8:c4:49:08:d9:
89:79:73:db:c1:1e:a7:b6:46:f5:1a:07:17:3e:3e:
fe:c0:cf:de:68:81:26:06:fa:6d:e5:76:d5:54:e2:
9e:c4:b2:e9:8d:56:92:81:5e:9d:07:91:6b:fe:48:
8d:54:6b:4d:bc:72:20:c6:c0:20:bf:ab:67:7b:f3:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C8:23:18:9F:96:27:3B:99:2D:DC:6A:55:D2:EA:35:25:22:35:42
X509v3 Authority Key Identifier:
keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/s8gjGJ-WJzuZLdxqVdLqNSUiNUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.220.0.0/16
185.252.240.0/22
194.124.208.0/24
212.41.64.0/18
212.101.0.0/19
IPv6:
2001:1680::/29
Signature Algorithm: sha256WithRSAEncryption
13:24:37:43:77:9e:97:e3:0c:c0:ab:69:d5:ad:39:62:f9:43:
81:72:64:84:38:a5:3f:1a:a8:99:71:91:69:6a:5e:ec:1e:af:
3a:3e:26:21:53:a0:69:ee:d3:16:a8:bc:7e:b0:a9:c7:d2:e3:
4a:35:97:f2:54:c2:4a:3b:47:d9:da:82:aa:fe:78:be:7a:8c:
8a:91:2f:51:f9:2a:a5:8f:6f:e9:dd:28:d1:c1:9d:55:9e:29:
83:9b:8e:4b:70:01:4b:86:03:2a:b9:84:98:1f:84:f6:5b:1c:
01:80:02:c6:12:ae:d6:6d:d1:ff:a1:53:7a:fd:d8:e2:09:a4:
dd:c3:b6:6e:9f:5c:4c:22:15:99:f3:3a:9a:d8:b7:3e:e2:d8:
38:11:95:15:d2:46:bf:04:19:ad:9e:e8:4d:29:4e:43:06:4c:
cf:30:fe:99:88:25:17:73:c4:3d:28:6b:c0:94:bf:66:f3:12:
63:bc:4b:fe:18:2e:18:ec:4a:95:7c:3d:04:6e:f2:66:fd:cb:
a7:6c:8a:c5:6f:f0:61:9b:7d:03:67:bf:c8:af:4c:c1:44:e9:
02:92:79:1b:de:55:90:a3:ae:cd:4b:e7:9c:d2:5a:f0:6b:b8:
54:53:cd:c7:d5:74:a1:0d:3f:14:b0:91:0d:00:5e:78:4c:30:
5e:41:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:31:40 2026 by rpki-client