Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/8lcUdDQu4-S0Jk_uhGH1tksSBMU.roa
File: 8lcUdDQu4-S0Jk_uhGH1tksSBMU.roa (raw, json)
Hash identifier: VZUajfKKZ+6/MW47DrUYLxT7wW97tV6tpTpEfd2c/3A=
Subject key identifier: F2:57:14:74:34:2E:E3:E4:B4:26:4F:EE:84:61:F5:B6:4B:12:04:C5
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A0C3D5C815323E8DD2F2E829B62F4F79A2
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/8lcUdDQu4-S0Jk_uhGH1tksSBMU.roa
Signing time: Mon 21 Sep 2026 11:59:22 +0000
ROA not before: Mon 21 Sep 2026 11:59:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 43.240.150.0/24 maxlen: 24
91.109.40.0/24 maxlen: 24
91.109.41.0/24 maxlen: 24
91.109.44.0/24 maxlen: 24
91.109.46.0/24 maxlen: 24
147.185.196.0/24 maxlen: 24
194.38.48.0/24 maxlen: 24
194.38.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d5:c8:15:32:3e:8d:d2:f2:e8:29:b6:2f:4f:79:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 21 11:59:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2571474342ee3e4b4264fee8461f5b64b1204c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:58:01:25:11:68:19:c3:d1:ad:1f:aa:4c:
51:df:7e:1e:52:ca:36:59:01:5e:24:a5:8b:d9:53:
52:33:4b:d5:a6:60:ab:52:2c:b9:a8:3f:09:70:04:
85:de:15:8d:4b:9c:6f:f5:85:4f:5b:ae:43:23:42:
14:7a:1d:37:f7:37:12:4d:b6:6d:0b:cf:29:17:20:
c5:2f:a6:7e:d7:da:ff:29:cc:b8:d1:fc:16:15:0b:
ae:42:9b:63:e8:10:96:24:29:12:4a:cd:f9:18:92:
85:9d:86:b8:77:f2:17:dd:06:e8:3a:2c:2c:e2:31:
17:25:04:f9:4d:99:27:a3:90:7b:56:dc:26:29:2b:
1c:39:31:ae:27:b5:57:d1:76:37:f4:52:b9:24:c8:
da:eb:81:f1:e2:fb:4d:4c:e6:e4:ed:1f:b6:77:80:
75:db:d0:30:5d:5d:b7:c0:e0:8e:0a:bd:ec:8b:9e:
2d:af:62:d1:9f:fa:cc:8d:c5:43:83:63:6b:6e:f0:
d5:1d:bf:81:75:67:aa:a2:18:2d:f3:09:87:c8:65:
16:18:e3:30:a3:03:03:21:7d:1e:62:bd:a6:9e:df:
1d:9a:be:68:98:a3:fb:8b:5d:28:12:9b:7e:64:12:
e6:97:87:62:1e:98:fa:de:8f:08:c7:77:af:40:7a:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:14:74:34:2E:E3:E4:B4:26:4F:EE:84:61:F5:B6:4B:12:04:C5
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/8lcUdDQu4-S0Jk_uhGH1tksSBMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.150.0/24
91.109.40.0/23
91.109.44.0/24
91.109.46.0/24
147.185.196.0/24
194.38.48.0/23
Signature Algorithm: sha256WithRSAEncryption
53:d9:f8:59:51:41:c6:f1:5c:50:88:13:cb:7f:fa:3e:fb:f1:
7f:8a:8b:38:e2:0a:81:44:fc:34:96:73:7b:54:51:38:60:27:
43:8a:b3:9b:42:b4:68:39:7b:fc:de:1d:9c:9e:a6:5f:c5:fe:
cf:5b:36:c1:48:aa:a1:1b:71:27:1a:75:db:d5:51:4e:e5:44:
49:57:b6:9a:67:46:4c:38:ab:d9:ca:51:23:4b:dc:c9:cd:97:
54:62:f5:3b:50:34:2c:17:13:9a:7e:25:5d:35:ef:71:e5:e0:
e0:65:b5:a9:fc:ed:7a:f1:da:d7:54:b2:12:cd:81:0f:79:24:
f6:9c:40:a5:3b:fd:b0:31:c3:3a:ea:4f:a4:b0:69:a4:a4:10:
54:41:89:23:49:77:c6:98:c0:d5:b0:e8:9f:5b:0d:9e:84:85:
bc:ef:a3:fe:53:13:b9:35:a5:a7:27:bc:8d:f4:e4:7f:23:72:
53:7b:1e:a9:af:2b:68:89:26:e2:da:48:f6:fa:a6:ff:fe:95:
14:00:6f:b7:fe:ef:87:70:82:74:ef:60:86:7d:81:ee:4f:33:
49:f5:19:4e:21:e0:65:f3:43:4d:45:d7:7e:e6:b6:d1:25:ca:
34:c2:28:43:49:2a:19:6d:72:5d:26:9e:0d:bd:5b:f2:2d:f8:
15:08:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:13 2026 by rpki-client