Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/8s5mYxT0FSRplUfX2pjGSu5Ka04.roa
File: 8s5mYxT0FSRplUfX2pjGSu5Ka04.roa (raw, json)
Hash identifier: oOY6cZI+YmdFuCyChAP/z3GyHQKcVcfCKBCkx+0GXYY=
Subject key identifier: F2:CE:66:63:14:F4:15:24:69:95:47:D7:DA:98:C6:4A:EE:4A:6B:4E
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 01A0DCFA6D3CF9E3ED833CAADBE52C0AE892
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/8s5mYxT0FSRplUfX2pjGSu5Ka04.roa
Signing time: Sat 26 Sep 2026 09:09:54 +0000
ROA not before: Sat 26 Sep 2026 09:09:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202987
IP address blocks: 185.127.124.0/24 maxlen: 24
185.127.125.0/24 maxlen: 24
185.127.126.0/24 maxlen: 24
185.127.127.0/24 maxlen: 24
193.27.232.0/24 maxlen: 24
193.27.233.0/24 maxlen: 24
193.27.234.0/24 maxlen: 24
193.27.235.0/24 maxlen: 24
2a0f:5d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:fa:6d:3c:f9:e3:ed:83:3c:aa:db:e5:2c:0a:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Sep 26 09:09:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2ce666314f41524699547d7da98c64aee4a6b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:06:cd:97:a3:cf:2c:9d:1a:93:9d:2b:3b:
2a:e6:9c:21:5f:08:9d:38:1b:14:8d:78:10:eb:da:
b2:1e:8c:9b:14:e6:e4:6d:d8:a2:e4:47:54:bc:63:
25:6f:f6:54:8b:19:40:39:95:c6:17:58:a3:6c:b6:
cc:ca:d4:c6:88:d7:8f:87:1c:37:4a:b2:a0:44:32:
0c:a0:ad:d7:94:c3:6a:97:a9:e9:41:9b:f1:9b:85:
8d:a8:4e:a9:62:9e:9e:88:e7:76:cb:c4:ed:32:b5:
7b:76:c3:c9:60:a1:07:a5:c0:1e:97:d0:35:7e:1a:
32:53:bb:03:0b:0d:af:bb:29:25:98:51:4f:e5:a3:
36:dd:cf:02:c1:d1:3e:4e:ce:b6:2e:98:8d:06:58:
7f:5c:a2:f7:2c:aa:71:d8:af:a5:4b:ea:45:60:8d:
b7:4b:4a:3c:62:7a:22:90:9c:ce:2b:e8:b7:02:e7:
df:bd:9a:5d:5a:14:f9:f0:2f:bc:47:98:78:ed:11:
1d:64:62:af:c4:0a:db:e4:bf:bc:5c:9a:77:a1:33:
6f:08:53:38:4a:62:be:8f:60:50:63:25:97:d6:cb:
12:6a:2d:48:84:50:02:d6:97:a5:3f:6b:06:3b:40:
c9:54:28:9d:6f:fc:ef:e4:da:d5:21:0b:a4:2e:f7:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:66:63:14:F4:15:24:69:95:47:D7:DA:98:C6:4A:EE:4A:6B:4E
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/8s5mYxT0FSRplUfX2pjGSu5Ka04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.124.0/22
193.27.232.0/22
IPv6:
2a0f:5d40::/29
Signature Algorithm: sha256WithRSAEncryption
3b:c8:48:e9:53:b9:e2:51:14:de:3b:c5:f8:ab:c1:96:1f:9a:
97:24:90:ae:0c:09:82:88:96:58:20:4c:42:94:05:70:be:f7:
a9:9e:4f:8b:02:54:4d:61:7d:50:aa:0c:80:0c:7d:ac:89:a1:
08:05:69:e7:03:61:49:b1:2d:75:e7:13:4b:86:75:53:56:88:
7a:2a:1f:d9:30:6b:89:71:25:b9:79:71:40:c2:67:e4:28:a0:
cc:f2:dc:88:4b:12:47:2d:a3:34:de:d2:bf:87:eb:c6:fd:15:
be:fb:a8:c9:5f:a0:bd:f7:4b:22:a5:49:53:50:60:0d:06:f7:
32:cb:78:e5:8a:15:e2:cb:95:82:e2:21:32:e8:01:d6:cb:6c:
6f:dc:ad:8a:4a:16:6c:f0:b6:89:d1:43:1a:cd:93:f2:f7:e7:
d5:7b:6c:a3:a7:1b:fa:3b:6e:e8:34:c0:d8:a1:e7:6d:b3:93:
bf:13:b1:6b:32:b5:0f:c1:48:49:0b:83:4f:64:75:69:b8:81:
87:c4:d2:93:12:c9:58:05:82:3d:fe:fb:4e:b0:ce:76:e9:21:
ca:15:12:69:7f:7b:e8:a1:43:44:73:b6:fc:a8:49:5e:d1:72:
4b:08:c5:8b:f0:95:4a:33:b0:de:8c:36:62:78:db:56:59:54:
a7:52:de:42
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaDc+m08+ePtgzyq2+UsCuiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDI4NWRmNWIwMzllMGYwNGUyZGZlY2UyOGE1YThmYmVj
NmU5MzgwHhcNMjYwOTI2MDkwOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmNlNjY2MzE0ZjQxNTI0Njk5NTQ3ZDdkYTk4YzY0YWVlNGE2YjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoScGzZejzyydGpOdKzsq5pwhXwid
OBsUjXgQ69qyHoybFObkbdii5EdUvGMlb/ZUixlAOZXGF1ijbLbMytTGiNePhxw3
SrKgRDIMoK3XlMNql6npQZvxm4WNqE6pYp6eiOd2y8TtMrV7dsPJYKEHpcAel9A1
fhoyU7sDCw2vuyklmFFP5aM23c8CwdE+Ts62LpiNBlh/XKL3LKpx2K+lS+pFYI23
S0o8YnoikJzOK+i3AuffvZpdWhT58C+8R5h47REdZGKvxArb5L+8XJp3oTNvCFM4
SmK+j2BQYyWX1ssSai1IhFAC1pelP2sGO0DJVCidb/zv5NrVIQukLvdHiwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPLOZmMU9BUkaZVH19qYxkruSmtOMB8GA1UdIwQY
MBaAFMEChd9bA54PBOLf7OKKWo++xuk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUt
NTJhZmM3N2NhMThmLzEvOHM1bVl4VDBGU1JwbFVmWDJwakdTdTVLYTA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUtNTJhZmM3N2NhMThm
LzEvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuX98AwQC
wRvoMA0EAgACMAcDBQMqD11AMA0GCSqGSIb3DQEBCwUAA4IBAQA7yEjpU7niURTe
O8X4q8GWH5qXJJCuDAmCiJZYIExClAVwvvepnk+LAlRNYX1QqgyADH2siaEIBWnn
A2FJsS115xNLhnVTVoh6Kh/ZMGuJcSW5eXFAwmfkKKDM8tyISxJHLaM03tK/h+vG
/RW++6jJX6C990sipUlTUGANBvcyy3jlihXiy5WC4iEy6AHWy2xv3K2KShZs8LaJ
0UMazZPy9+fVe2yjpxv6O27oNMDYoedts5O/E7FrMrUPwUhJC4NPZHVpuIGHxNKT
EslYBYI9/vtOsM526SHKFRJpf3vooUNEc7b8qEle0XJLCMWL8JVKM7DejDZieNtW
WVSnUt5C
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:43:03 2026 by rpki-client