Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa
File: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (raw, json)
Hash identifier: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=
Subject key identifier: F1:19:B6:1F:E2:0B:E9:E3:6F:C3:79:69:1C:6B:7E:A3:53:DC:0C:9F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019C4774A5F3E56E408501BA03DAB1701E9C
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa
Signing time: Tue 10 Feb 2026 12:09:12 +0000
ROA not before: Tue 10 Feb 2026 12:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212408
IP address blocks: 213.177.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:74:a5:f3:e5:6e:40:85:01:ba:03:da:b1:70:1e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Feb 10 12:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f119b61fe20be9e36fc379691c6b7ea353dc0c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:31:08:1d:7c:a3:b0:9a:5f:7e:08:d3:c0:
98:20:c9:d2:73:03:ca:a8:b8:98:8d:47:cc:d6:45:
2d:67:b0:de:64:ea:cb:d5:1d:ef:58:75:e6:c0:3a:
20:db:b4:84:a0:8d:28:c5:9d:ac:38:00:30:c7:8f:
83:2b:7b:42:58:d9:fc:66:1f:7b:2b:03:75:8d:3d:
62:40:2d:ca:cc:34:fc:c9:4d:44:bd:06:1d:a2:f4:
5f:13:07:2c:18:e5:5a:20:1b:66:8b:e5:ad:7c:3b:
31:36:c8:12:37:f4:0e:f0:aa:45:0a:42:06:8f:5d:
f5:d2:3f:18:86:7f:a7:c0:e2:5e:ea:52:de:cd:a6:
e7:5c:c2:6b:5d:4f:22:ac:8d:fb:0c:cb:29:b3:80:
41:12:3e:00:33:be:87:7f:48:ad:56:19:2e:91:75:
d6:d3:fb:ee:8d:49:85:84:3e:40:b3:5d:4d:13:cd:
6f:94:30:d1:81:28:9f:f5:65:bc:a7:79:bf:9d:86:
a5:ab:f3:d2:02:c7:88:c7:38:2d:2a:3c:9c:c7:9b:
f9:5e:f3:83:fc:43:7f:4f:62:21:76:f3:96:d3:c9:
f3:82:43:fd:e1:37:a4:19:f5:c3:c2:a2:aa:09:43:
70:ad:d1:a5:b9:a7:c0:e0:8b:e2:a6:fc:78:7f:e1:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:B6:1F:E2:0B:E9:E3:6F:C3:79:69:1C:6B:7E:A3:53:DC:0C:9F
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.165.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:59:06:7b:d4:8e:c8:05:e0:36:1b:47:c6:19:17:f3:a9:c7:
7d:6e:ec:3e:01:4c:b0:c1:2f:c3:df:a1:b8:46:79:2d:de:74:
7c:cf:9a:e7:f2:b7:fd:2b:46:77:7f:22:be:49:4d:41:06:81:
f8:b2:93:97:54:9c:a3:cf:a6:db:5f:b0:ba:1f:f0:d4:07:d1:
26:f7:71:f6:1e:f7:97:03:30:ce:c0:e2:f2:0b:64:86:0d:2d:
3b:02:01:1b:e7:84:43:70:5e:7e:2f:73:fb:15:3c:8c:5f:fc:
65:a3:26:48:82:53:e2:17:3d:e2:89:71:3b:4d:bd:56:a4:de:
8d:93:2c:8c:0f:d5:03:c3:52:83:61:67:1b:45:b0:01:b1:66:
dd:09:e2:21:e8:ab:d3:e7:da:56:76:ad:e0:66:29:cd:11:3b:
6d:e7:f4:01:f7:dc:1e:ef:be:78:23:f0:59:8a:00:ba:7c:ff:
f4:f9:9f:39:7b:91:b6:5e:a8:de:e1:41:17:ac:91:4e:ff:b5:
a5:18:44:a2:5e:85:6d:ca:b8:c3:8d:18:7a:6d:3b:bc:b6:85:
f5:7e:98:be:d1:72:0c:a7:51:5f:60:ca:0d:47:6a:a7:25:52:
d1:e8:cc:6f:97:8f:02:7a:92:73:59:a1:80:d1:92:04:3c:ac:
45:c6:ed:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxHdKXz5W5AhQG6A9qxcB6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2NlODllZWE0NTFiODI5NGE4YmI2OTdjNDk5M2FlNDRk
MDVjNmYwHhcNMjYwMjEwMTIwOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTE5YjYxZmUyMGJlOWUzNmZjMzc5NjkxYzZiN2VhMzUzZGMwYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1sxCB18o7CaX34I08CYIMnScwPK
qLiYjUfM1kUtZ7DeZOrL1R3vWHXmwDog27SEoI0oxZ2sOAAwx4+DK3tCWNn8Zh97
KwN1jT1iQC3KzDT8yU1EvQYdovRfEwcsGOVaIBtmi+WtfDsxNsgSN/QO8KpFCkIG
j1310j8Yhn+nwOJe6lLezabnXMJrXU8irI37DMsps4BBEj4AM76Hf0itVhkukXXW
0/vujUmFhD5As11NE81vlDDRgSif9WW8p3m/nYalq/PSAseIxzgtKjycx5v5XvOD
/EN/T2IhdvOW08nzgkP94TekGfXDwqKqCUNwrdGluafA4Ivipvx4f+Hr9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPEZth/iC+njb8N5aRxrfqNT3AyfMB8GA1UdIwQY
MBaAFNbM6J7qRRuClKi7aXxJk65E0FxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEt
Njk2ZTNkMTg4ZjJhLzEvOFJtMkgtSUw2ZU52dzNscEhHdC1vMVBjREo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEtNjk2ZTNkMTg4ZjJh
LzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bGlMA0G
CSqGSIb3DQEBCwUAA4IBAQC7WQZ71I7IBeA2G0fGGRfzqcd9buw+AUywwS/D36G4
Rnkt3nR8z5rn8rf9K0Z3fyK+SU1BBoH4spOXVJyjz6bbX7C6H/DUB9Em93H2HveX
AzDOwOLyC2SGDS07AgEb54RDcF5+L3P7FTyMX/xloyZIglPiFz3iiXE7Tb1WpN6N
kyyMD9UDw1KDYWcbRbABsWbdCeIh6KvT59pWdq3gZinNETtt5/QB99we7754I/BZ
igC6fP/0+Z85e5G2Xqje4UEXrJFO/7WlGESiXoVtyrjDjRh6bTu8toX1fpi+0XIM
p1FfYMoNR2qnJVLR6Mxvl48CepJzWaGA0ZIEPKxFxu1Q
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:29:52 2026 by rpki-client