Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa
File: i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa (raw, json)
Hash identifier: cPsXapsQYVV5sthITpOROGImuL+pHXuvlOflhuTnK7c=
Subject key identifier: 8B:C8:C5:76:0E:4C:A3:0F:43:87:EA:6D:84:5A:C1:3E:74:58:FF:B1
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 019D2A9A709439ADCD4F3946D0B145118105
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa
Signing time: Thu 26 Mar 2026 14:44:17 +0000
ROA not before: Thu 26 Mar 2026 14:44:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47638
IP address blocks: 185.141.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:9a:70:94:39:ad:cd:4f:39:46:d0:b1:45:11:81:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Mar 26 14:44:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bc8c5760e4ca30f4387ea6d845ac13e7458ffb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:76:3a:70:6b:3d:e9:1c:71:84:87:45:cf:
a6:c2:74:d2:9c:03:12:ad:b9:6e:4b:25:da:00:f0:
91:92:ac:7e:a7:9c:c5:96:a5:4f:98:e7:99:7b:48:
24:42:3a:6e:6e:1b:f5:58:71:4f:ab:2e:0a:47:55:
a2:86:0f:ca:66:2c:3a:d5:31:a5:6f:bf:ce:20:53:
33:3c:50:03:32:22:33:b4:ef:10:e5:96:92:a4:91:
82:b2:ce:84:57:8e:88:c1:68:84:41:bf:aa:05:6a:
d4:50:a9:55:fa:3e:9f:fe:e9:fc:68:74:61:d9:40:
ec:6b:19:f0:e1:00:e1:49:5d:48:77:94:cd:95:15:
dc:d1:bb:6d:6c:a3:60:e0:12:e1:a0:b2:a1:9c:04:
2e:d3:f2:04:02:78:9f:ef:07:f0:62:a0:51:e2:41:
c2:85:00:bc:2c:4f:43:53:54:d7:39:68:99:e1:a9:
6c:b1:70:13:bc:12:ca:fe:56:11:b1:c7:7c:2e:9f:
7d:10:e1:12:bc:eb:43:8f:65:ee:3b:41:5b:30:da:
d2:b5:61:c1:15:98:fe:50:60:b3:05:89:ce:37:f6:
5b:38:66:40:99:75:d9:1b:99:b3:85:cd:84:cb:5a:
aa:24:7e:2d:6d:87:1f:45:a6:d9:78:d5:9e:56:eb:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C8:C5:76:0E:4C:A3:0F:43:87:EA:6D:84:5A:C1:3E:74:58:FF:B1
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:24:23:aa:b0:6e:d0:fb:4d:88:6f:a3:d5:4a:40:b8:b3:f1:
7a:65:ed:37:f0:45:6a:aa:7d:88:84:32:ba:28:e2:39:6c:91:
b3:0d:db:ce:a9:8f:ea:21:be:97:27:83:97:34:07:c1:a8:dc:
b9:b2:63:1d:aa:2b:55:e9:5c:dd:6e:15:b0:50:cf:13:b1:7a:
24:e7:76:e3:c6:b8:0f:f9:7b:17:54:74:a1:05:76:a9:6d:86:
45:39:e4:29:28:dd:ea:75:a0:34:23:66:7e:11:2c:1e:34:25:
68:89:c7:89:80:68:5a:b8:a6:a3:9d:de:af:76:1c:72:f1:da:
2f:6b:13:2e:27:5a:e6:17:75:d8:76:ba:06:48:7b:d5:52:2f:
79:0c:52:27:6b:e8:bf:2d:21:74:20:0d:a6:b0:0e:e4:b2:e3:
a9:68:ff:0b:87:11:39:07:65:7f:5c:6e:8d:3a:14:40:ac:c0:
3f:5d:34:31:16:e7:2c:c3:11:ea:a7:ff:40:98:be:2b:72:d8:
c3:60:eb:78:d4:d5:f1:a9:18:0e:85:6d:88:69:83:6b:e4:2e:
13:f0:aa:3f:3f:b0:b6:a4:22:0b:ad:0c:ab:ea:c2:43:37:d0:
b7:8f:20:83:06:d7:fb:84:2c:b0:19:17:f3:07:b3:d0:41:b8:
51:43:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:20:40 2026 by rpki-client