Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/8hIPh9NC_tu8aJZGw_JlJDyobA4.roa
File: 8hIPh9NC_tu8aJZGw_JlJDyobA4.roa (raw, json)
Hash identifier: WMHOYzoK2CldpXzLmVRcmE7+ZPDrZuaCYKkzPqQxl2I=
Subject key identifier: F2:12:0F:87:D3:42:FE:DB:BC:68:96:46:C3:F2:65:24:3C:A8:6C:0E
Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial: 019B76EADF239801B489DF2CCCEB9E1AB27C
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/8hIPh9NC_tu8aJZGw_JlJDyobA4.roa
Signing time: Thu 01 Jan 2026 00:17:42 +0000
ROA not before: Thu 01 Jan 2026 00:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2613
IP address blocks: 91.218.38.0/24 maxlen: 24
193.135.150.0/24 maxlen: 24
2a07:e640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:df:23:98:01:b4:89:df:2c:cc:eb:9e:1a:b2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Validity
Not Before: Jan 1 00:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2120f87d342fedbbc689646c3f265243ca86c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:84:cb:60:92:5a:db:51:9b:ed:aa:23:ba:
bc:f5:d4:a9:90:e0:68:52:fc:b0:60:27:31:43:ef:
37:a3:0d:61:e5:13:aa:b8:89:c9:e0:2e:25:99:e2:
a8:b1:01:23:25:f4:7e:e5:f0:7e:f2:de:68:51:6c:
43:67:ec:9e:e2:e3:87:42:a4:b6:57:b2:04:6f:35:
c1:5e:ad:2d:8a:ac:8d:af:47:9a:e0:4e:d9:0f:16:
93:a3:fa:17:ae:fc:30:c3:13:2d:2c:21:54:14:7a:
49:9c:ff:87:9d:96:59:b6:b7:28:ff:97:94:0f:14:
7a:15:01:b4:f9:d2:2c:63:cf:46:c2:43:3f:03:b6:
fd:42:af:27:70:e1:99:06:c5:36:a4:49:5f:19:4c:
58:12:f2:18:76:a4:a9:b5:7d:fa:b5:41:9e:92:70:
30:b2:05:3c:81:d0:17:b3:38:e9:cb:ef:a5:db:95:
ab:88:96:6a:50:10:71:65:bb:6e:2c:69:e3:c7:0a:
e4:1a:48:08:8c:b5:64:5b:a1:65:51:73:e9:8c:ab:
a0:7e:e0:47:b3:8b:2f:55:ab:e5:1f:8c:b9:3d:b9:
d6:10:b7:89:69:91:67:b4:31:69:dd:a4:da:b0:81:
6b:fe:7d:12:df:31:e4:ba:da:c5:fb:62:78:f4:0e:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:12:0F:87:D3:42:FE:DB:BC:68:96:46:C3:F2:65:24:3C:A8:6C:0E
X509v3 Authority Key Identifier:
keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/8hIPh9NC_tu8aJZGw_JlJDyobA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.38.0/24
193.135.150.0/24
IPv6:
2a07:e640::/29
Signature Algorithm: sha256WithRSAEncryption
99:1f:c8:fb:cb:14:45:7d:08:07:12:e2:bc:1f:ee:a9:bc:06:
ba:b6:70:48:93:01:fd:2a:7d:73:c2:ba:03:00:c8:05:84:47:
98:93:dc:14:8f:15:61:49:db:fe:06:b8:4b:05:a8:f9:9c:fa:
da:ea:76:28:85:42:ba:61:25:cf:26:57:f9:36:62:2a:3c:e5:
cd:9d:3e:ef:93:3c:c1:99:ed:36:32:44:25:c5:c9:fb:c1:bd:
0e:0e:7a:77:69:b7:a8:16:3f:8a:de:60:4a:0b:0d:ba:1e:67:
a5:c6:2c:ab:dd:bc:92:0e:8c:42:71:2b:0c:e8:10:ab:ec:aa:
2e:4f:74:32:97:c0:24:eb:b1:51:ba:a6:c6:6e:cb:0f:2a:87:
11:7d:a2:75:1a:c1:52:4f:ad:87:13:44:09:68:e1:84:65:39:
d7:e0:be:11:55:d2:98:6b:5c:60:e8:6b:6b:28:3b:3d:07:29:
2d:f5:5d:18:d1:a2:6d:bf:41:44:72:b1:15:15:34:4c:2b:9e:
fd:bb:88:e1:66:0d:aa:e7:a6:44:8d:cb:be:6e:15:94:eb:e6:
61:64:bf:40:67:97:36:50:85:d5:5a:7e:38:a0:29:8d:e7:03:
e2:03:1f:e5:fb:44:1f:f1:08:73:05:73:d7:64:44:73:57:f2:
19:23:1b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:41:30 2026 by rpki-client