Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/8Sdn_zRpFhskilh__nZcK0vAVLI.roa
File: 8Sdn_zRpFhskilh__nZcK0vAVLI.roa (raw, json)
Hash identifier: DUSlHCdb+uvVk7ti41JXLYfoYk+XRA60FLGlRCRlYJw=
Subject key identifier: F1:27:67:FF:34:69:16:1B:24:8A:58:7F:FE:76:5C:2B:4B:C0:54:B2
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A1AAC8F8B7CA65297BEC472CD036F09C61
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/8Sdn_zRpFhskilh__nZcK0vAVLI.roa
Signing time: Thu 05 Nov 2026 08:17:39 +0000
ROA not before: Thu 05 Nov 2026 08:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.42.88.0/23 maxlen: 24
88.135.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:c8:f8:b7:ca:65:29:7b:ec:47:2c:d0:36:f0:9c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Nov 5 08:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f12767ff3469161b248a587ffe765c2b4bc054b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:34:ce:a8:f4:a7:9a:87:38:e3:d0:d4:eb:d0:
0c:84:f0:77:dc:93:db:ae:23:e7:90:f4:b5:07:f8:
f3:39:7b:59:2b:01:be:9d:64:d5:23:ca:e2:b8:34:
b9:9c:69:9c:b2:3c:a1:61:9c:32:2a:c8:f2:f7:2b:
3d:9d:45:37:e6:e6:55:90:c1:cd:1d:86:2b:7e:7f:
be:6e:b0:ec:ae:91:09:89:5c:9d:58:17:f9:3b:6b:
45:91:5b:76:82:47:f1:37:57:df:40:c8:f2:56:d5:
a6:44:30:e9:55:73:8b:29:d8:a1:7c:72:48:d8:9f:
7a:24:a2:38:0f:13:16:05:f0:9c:20:58:83:dc:3b:
52:3a:a5:d1:34:48:e6:65:8a:27:e1:3a:25:37:0f:
3c:64:6a:d8:c5:74:c3:c9:17:49:49:2a:3b:14:75:
28:90:56:4a:3b:f1:ba:e2:00:bc:41:58:5d:57:0b:
f1:7b:8d:06:88:32:e7:07:e5:f9:11:31:3f:52:74:
87:3e:f0:e1:13:30:ec:e6:bf:de:57:cc:71:4e:61:
1c:e5:c2:5c:4e:7c:b9:6e:37:c3:d8:fb:8b:0c:31:
5d:6e:20:01:45:22:01:2c:e1:a0:ad:82:d7:d2:88:
75:3c:03:5d:ed:0e:bf:05:cb:3b:1d:e4:8a:38:59:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:67:FF:34:69:16:1B:24:8A:58:7F:FE:76:5C:2B:4B:C0:54:B2
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/8Sdn_zRpFhskilh__nZcK0vAVLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.88.0/23
88.135.152.0/22
Signature Algorithm: sha256WithRSAEncryption
80:0b:7c:09:85:22:ad:7c:b6:2b:cc:32:4d:66:43:40:1a:c8:
55:04:db:4f:0e:60:a5:e6:40:20:0d:0b:ff:f4:20:54:af:65:
9f:2c:d7:4b:1c:75:fc:d5:4a:cd:0c:6c:33:ca:4e:10:01:a6:
1b:c3:30:2a:03:9a:a6:b5:41:2c:62:3a:be:2d:15:8a:6a:de:
23:70:a5:8e:0a:6f:1b:77:53:65:8d:52:c5:f1:6c:78:95:a5:
0e:a6:92:1d:79:52:38:dc:75:d6:fe:8a:dd:ae:42:84:fb:30:
0b:b0:ed:ff:22:67:9e:c0:02:ab:5a:d6:99:ac:e3:9e:01:6d:
75:ab:fb:92:61:26:7a:7d:2d:ff:a4:cc:ec:a4:a5:b2:1d:c4:
c4:18:16:62:06:9f:e0:66:f8:f4:20:f8:6e:46:06:e2:7c:07:
7b:7b:3b:d3:76:7f:b7:3f:6f:91:2b:2c:7f:c4:98:e7:43:48:
8f:bf:bd:c3:7e:3d:c3:63:d5:99:3d:0b:6e:4e:a1:c6:ec:ae:
be:e5:74:53:5f:a9:c3:55:81:c5:05:6b:9a:a2:46:29:e8:10:
44:54:ef:50:7c:0c:0c:16:13:d3:dd:91:65:66:a7:b0:11:27:
fa:3a:48:1d:c1:39:82:7d:ef:0a:cf:4e:ec:4a:26:9f:cd:32:
6b:a5:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:46:10 2026 by rpki-client