Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa
File: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (raw, json)
Hash identifier: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=
Subject key identifier: F1:9C:0C:08:4D:06:2B:1B:71:1E:F5:B0:E2:20:99:93:97:1C:AC:B4
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 019C689C8063A61E098584FB50571C6369A6
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa
Signing time: Mon 16 Feb 2026 22:40:12 +0000
ROA not before: Mon 16 Feb 2026 22:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201353
IP address blocks: 109.95.186.0/24 maxlen: 24
109.95.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:68:9c:80:63:a6:1e:09:85:84:fb:50:57:1c:63:69:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Feb 16 22:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f19c0c084d062b1b711ef5b0e2209993971cacb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:32:52:f9:d0:82:df:cd:7c:26:2a:ce:a9:
75:16:eb:86:db:9e:67:dd:f2:59:01:1e:bc:d2:b6:
46:c6:b8:3f:d4:74:98:85:8e:f8:58:c5:f3:ae:89:
7a:cd:f3:5c:f3:f6:ea:6a:10:1c:8e:3f:6e:95:4b:
58:05:92:0c:91:79:da:b0:b3:37:f5:ce:df:44:3e:
28:de:7a:f8:a7:21:a3:c4:1a:8b:46:51:fe:7b:43:
50:c5:73:f7:7a:14:d9:ab:a0:dc:50:82:b6:09:36:
b9:a2:21:ed:7d:da:40:af:76:d1:40:2e:56:a8:24:
ea:80:c4:14:9c:d0:55:43:fe:fa:ff:db:ce:8e:41:
4c:99:61:20:a9:dc:79:63:88:cb:c7:76:24:c4:f7:
79:17:83:df:c6:23:b7:34:57:c6:30:ea:e1:b3:36:
42:1d:db:f4:db:7c:80:da:21:b5:cf:e6:74:bf:97:
3a:62:18:2e:b1:84:e1:90:c7:cd:09:1e:a8:84:6b:
16:74:e9:2a:5c:a8:84:b7:b6:dd:77:34:17:19:41:
52:4d:34:28:3e:1c:ad:4b:5b:07:cd:d0:7c:fb:39:
5e:f9:2f:a0:16:66:bb:17:b6:a8:dd:89:e3:80:6f:
81:ec:48:3a:a1:0a:9e:7f:df:92:b0:ae:89:36:79:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:0C:08:4D:06:2B:1B:71:1E:F5:B0:E2:20:99:93:97:1C:AC:B4
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.186.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:38:51:3f:9d:00:60:89:87:c7:1f:f6:c1:4f:b3:0b:9b:d5:
5c:e3:b5:16:f1:fc:9a:2e:fd:87:9b:78:4e:63:0d:28:e7:11:
6a:4f:68:60:09:01:1b:a1:e4:35:83:14:62:77:57:1c:2f:73:
05:3e:08:67:65:22:84:84:01:fe:b5:9f:99:11:85:b2:f3:38:
3a:ac:27:b9:0c:10:6f:e3:8b:f8:9a:a5:fa:1e:c4:de:d0:65:
e6:39:e7:12:a8:ed:43:bc:75:63:0b:d9:6e:fb:75:47:63:d9:
16:c2:b0:43:8a:23:81:e5:03:79:74:4f:03:28:48:40:1e:3c:
dc:8e:94:8f:3a:63:d5:18:16:ae:45:38:26:21:59:af:9c:21:
44:84:38:02:24:4c:1d:70:30:91:b0:5e:e7:49:d5:6a:d8:bd:
ef:62:05:24:54:b6:7c:96:31:85:c4:a8:bb:c6:0e:bf:e8:77:
f7:56:9b:5a:98:c0:0f:ee:af:60:2b:d3:1f:4b:74:88:58:1e:
91:71:53:f9:b2:7a:40:1a:f9:88:94:91:d9:9c:67:3d:d4:9f:
75:36:4b:fb:a0:a1:f5:78:be:ae:8a:76:ab:35:60:3a:a3:25:
3c:a6:46:5c:2b:b8:8d:5d:c9:ff:e1:f8:b9:de:69:1b:5e:86:
66:77:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:30 2026 by rpki-client