Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/8Ap_012FHB3YIQ_qI3dHzapyZdM.roa
File: 8Ap_012FHB3YIQ_qI3dHzapyZdM.roa (raw, json)
Hash identifier: v2JMYMqdVX4PC3s4OaU/PX8RTBvcYIkJXe98BzsKXXg=
Subject key identifier: F0:0A:7F:D3:5D:85:1C:1D:D8:21:0F:EA:23:77:47:CD:AA:72:65:D3
Certificate issuer: /CN=fc8c97d1177428f61deaab91ca7cfbb552629ec0
Certificate serial: 01A06D545C42D64907D7DA39FF64756FD8DC
Authority key identifier: FC:8C:97:D1:17:74:28:F6:1D:EA:AB:91:CA:7C:FB:B5:52:62:9E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/8Ap_012FHB3YIQ_qI3dHzapyZdM.roa
Signing time: Fri 04 Sep 2026 16:50:40 +0000
ROA not before: Fri 04 Sep 2026 16:50:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 80.247.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:54:5c:42:d6:49:07:d7:da:39:ff:64:75:6f:d8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8c97d1177428f61deaab91ca7cfbb552629ec0
Validity
Not Before: Sep 4 16:50:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f00a7fd35d851c1dd8210fea237747cdaa7265d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:3c:72:cf:46:91:31:e4:77:f5:e2:12:b2:
88:96:82:24:b7:3e:e1:9c:d9:bc:c1:4a:65:17:e0:
28:79:7e:b3:77:79:92:61:d2:67:ac:58:ad:55:1d:
db:4b:98:0e:01:4e:a7:15:22:34:96:f6:4e:ee:c3:
b6:fd:6d:5c:be:18:9a:be:0a:de:2e:b6:2d:ce:fc:
cf:9e:88:76:21:f6:d2:b0:41:9f:2e:20:88:3b:6a:
ed:71:69:bd:ff:96:9c:f7:03:53:4a:ac:fb:7b:d4:
6d:8e:9a:1e:9b:b9:bf:c1:f5:e3:48:2d:a7:d7:d5:
5d:3a:1c:57:eb:82:83:da:03:c7:7e:27:23:62:5a:
21:d5:c3:37:ac:98:96:ea:82:2a:43:a6:fc:35:d0:
66:da:66:22:0f:0b:15:fe:5e:ff:75:ed:b3:ba:79:
6d:4f:d1:ca:23:d2:25:17:c9:75:7b:a5:08:03:9f:
a7:c7:1e:07:1c:ed:3f:ab:1d:bb:c4:6e:2f:3a:97:
38:cf:66:65:18:8c:1c:a9:bb:32:b1:f4:05:ef:9a:
3d:4e:14:95:aa:5c:c9:32:b0:59:aa:32:03:4a:d8:
bb:54:5d:85:27:8c:1e:04:80:9d:49:41:f5:c1:a9:
9f:9f:aa:8e:e6:61:80:b3:d7:eb:bf:03:c5:9a:13:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0A:7F:D3:5D:85:1C:1D:D8:21:0F:EA:23:77:47:CD:AA:72:65:D3
X509v3 Authority Key Identifier:
keyid:FC:8C:97:D1:17:74:28:F6:1D:EA:AB:91:CA:7C:FB:B5:52:62:9E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/8Ap_012FHB3YIQ_qI3dHzapyZdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.217.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bf:64:4a:cc:12:19:d7:f9:08:12:69:19:0b:7c:ef:2e:d2:
6e:5c:f7:31:b3:67:3e:5f:93:83:69:cb:48:0a:fb:9d:31:40:
45:94:66:6b:ce:97:39:0c:66:15:53:92:2c:e7:c1:de:82:c4:
ba:5d:b7:e2:9b:46:d3:fb:b9:b8:ec:f2:40:59:36:a0:8d:51:
b9:75:c0:f6:9d:6f:c3:a8:a4:c6:92:8f:bd:1f:d5:c6:b4:89:
fa:6a:ac:c9:bf:e0:41:1e:19:7f:31:bf:56:6d:db:34:30:6d:
8b:c8:cf:83:ae:0e:42:34:4d:ca:d4:1d:29:3a:09:85:8c:cb:
d0:91:3c:f7:1b:29:f6:39:7b:89:35:98:16:f2:5a:ab:29:c3:
92:30:cd:50:b1:c5:50:5c:0a:e1:44:ce:92:17:4b:91:eb:8b:
4d:ff:ea:98:58:2f:a6:d5:d7:14:95:d3:59:29:7c:a2:6f:95:
95:5d:6a:38:dd:de:fe:11:0f:7f:d3:9a:02:cc:e0:12:98:06:
22:ca:34:b8:a7:4a:2e:e7:93:30:37:e4:50:44:e2:f8:10:08:
e2:cc:da:b7:47:a3:98:f3:e6:b9:76:76:ed:3e:ec:6a:bd:a5:
25:35:10:b2:16:ef:9a:19:12:92:87:c3:fd:61:4a:8a:a4:7d:
15:e5:5b:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBtVFxC1kkH19o5/2R1b9jcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOGM5N2QxMTc3NDI4ZjYxZGVhYWI5MWNhN2NmYmI1NTI2
MjllYzAwHhcNMjYwOTA0MTY1MDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDBhN2ZkMzVkODUxYzFkZDgyMTBmZWEyMzc3NDdjZGFhNzI2NWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVs8cs9GkTHkd/XiErKIloIktz7h
nNm8wUplF+AoeX6zd3mSYdJnrFitVR3bS5gOAU6nFSI0lvZO7sO2/W1cvhiavgre
LrYtzvzPnoh2IfbSsEGfLiCIO2rtcWm9/5ac9wNTSqz7e9Rtjpoem7m/wfXjSC2n
19VdOhxX64KD2gPHficjYloh1cM3rJiW6oIqQ6b8NdBm2mYiDwsV/l7/de2zunlt
T9HKI9IlF8l1e6UIA5+nxx4HHO0/qx27xG4vOpc4z2ZlGIwcqbsysfQF75o9ThSV
qlzJMrBZqjIDSti7VF2FJ4weBICdSUH1wamfn6qO5mGAs9frvwPFmhNR2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPAKf9NdhRwd2CEP6iN3R82qcmXTMB8GA1UdIwQY
MBaAFPyMl9EXdCj2Heqrkcp8+7VSYp7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0l5WDBSZDBLUFlkNnF1Unluejd0VkppbnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNTQyZjQtN2M4YS00OGQ5LTlhMWUt
Njg2MDAzYjc4ODlkLzEvOEFwXzAxMkZIQjNZSVFfcUkzZEh6YXB5WmRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kNTQyZjQtN2M4YS00OGQ5LTlhMWUtNjg2MDAzYjc4ODlk
LzEvX0l5WDBSZDBLUFlkNnF1Unluejd0VkppbnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPfZMA0G
CSqGSIb3DQEBCwUAA4IBAQBIv2RKzBIZ1/kIEmkZC3zvLtJuXPcxs2c+X5ODactI
CvudMUBFlGZrzpc5DGYVU5Is58HegsS6Xbfim0bT+7m47PJAWTagjVG5dcD2nW/D
qKTGko+9H9XGtIn6aqzJv+BBHhl/Mb9Wbds0MG2LyM+Drg5CNE3K1B0pOgmFjMvQ
kTz3Gyn2OXuJNZgW8lqrKcOSMM1QscVQXArhRM6SF0uR64tN/+qYWC+m1dcUldNZ
KXyib5WVXWo43d7+EQ9/05oCzOASmAYiyjS4p0ou55MwN+RQROL4EAjizNq3R6OY
8+a5dnbtPuxqvaUlNRCyFu+aGRKSh8P9YUqKpH0V5VvU
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:04 2026 by rpki-client