Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8-FZZ6olfxRN0dvkfEQpO72VF94.roa
File: 8-FZZ6olfxRN0dvkfEQpO72VF94.roa (raw, json)
Hash identifier: mKeOWOaq2sD5iLbs4Hh6fHBoEx1Z5k0WxUxD8L34Kxg=
Subject key identifier: F3:E1:59:67:AA:25:7F:14:4D:D1:DB:E4:7C:44:29:3B:BD:95:17:DE
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EBB6DBD66AAABF238E64D7DDCBDF98033
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8-FZZ6olfxRN0dvkfEQpO72VF94.roa
Signing time: Fri 12 Jun 2026 10:43:11 +0000
ROA not before: Fri 12 Jun 2026 10:43:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 178.212.230.0/24 maxlen: 24
194.26.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:6d:bd:66:aa:ab:f2:38:e6:4d:7d:dc:bd:f9:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 12 10:43:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3e15967aa257f144dd1dbe47c44293bbd9517de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:70:d8:6c:5b:e5:bb:6c:ef:8b:32:03:d5:
e7:9c:c4:96:5a:a3:1d:47:43:40:f2:59:24:95:9b:
9c:06:0f:8d:78:c0:53:6c:e1:a5:5a:ea:1d:df:af:
e2:1b:9b:07:9b:a1:9c:38:9e:a8:25:75:66:f4:51:
8e:ff:df:9e:65:10:12:a9:4d:b6:67:41:63:b2:44:
ac:89:f3:20:09:17:3d:85:e2:bf:d8:96:1d:0c:b2:
aa:11:92:9b:21:3c:df:9a:c5:a4:eb:e0:41:91:79:
ba:73:3a:fe:d3:0e:73:01:5d:24:ee:3e:4f:63:14:
8e:95:19:18:a1:52:e8:5a:30:d9:5c:02:c4:73:fb:
13:11:f8:81:9c:e0:63:58:d1:3f:fc:c2:66:94:3e:
66:b4:d2:b1:83:15:d5:1e:d0:77:ba:8a:b5:f0:07:
5e:b0:0b:50:bc:87:21:84:c5:69:6a:c3:26:57:05:
5c:96:70:69:ba:28:a1:9c:65:19:73:bd:cb:cc:c0:
14:d2:f0:7f:99:04:e3:5f:1b:67:58:25:aa:c1:7b:
cb:25:c2:aa:83:8b:ae:39:21:4c:12:18:7c:aa:1d:
5e:e0:4c:d1:4c:cc:4a:a8:d0:a0:e4:68:62:88:10:
2b:90:86:31:d1:eb:24:15:58:22:2f:1d:dd:a0:22:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E1:59:67:AA:25:7F:14:4D:D1:DB:E4:7C:44:29:3B:BD:95:17:DE
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8-FZZ6olfxRN0dvkfEQpO72VF94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.230.0/24
194.26.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2d:b8:97:27:3f:64:a5:ba:51:d9:ca:f5:00:86:3d:4f:13:
dc:83:b8:40:12:9c:bd:c1:b3:6f:f0:3b:9d:36:d7:f9:9c:c1:
0b:7a:6e:0b:0e:2d:d8:54:4e:15:03:56:b0:cc:61:8c:e5:8f:
26:50:5e:61:58:38:33:e7:b5:18:17:1d:bf:5f:f7:84:64:13:
d6:49:9b:37:56:7e:96:d4:aa:f7:f4:a0:79:ae:cd:8d:bf:90:
25:90:b7:4c:43:36:81:bd:32:78:bb:e9:89:1e:48:06:4c:e5:
98:17:6a:a6:50:fa:d9:6d:20:a0:b0:f5:a0:a3:9f:b3:03:b2:
89:9c:e0:7e:f4:02:ab:51:98:da:78:1d:2d:32:79:6d:e0:57:
dd:70:ad:32:e8:7f:d7:f2:26:99:b6:8d:cf:58:83:95:1d:6f:
5f:31:c9:bd:b0:dc:60:7e:2c:20:82:b2:b1:1f:04:45:19:87:
5d:7a:99:56:01:ff:62:0b:ef:a0:7a:f9:bc:b7:35:69:2e:d3:
99:20:f3:32:32:82:4b:e5:74:67:51:17:18:2a:f0:04:63:bb:
79:e7:5d:c1:bf:ec:6d:cf:0c:ed:1a:fa:c5:9e:d7:1d:3c:10:
eb:9a:37:50:5d:dc:07:33:20:94:24:c7:4d:25:61:19:96:05:
a7:aa:ba:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:04 2026 by rpki-client