Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/h8_iQKnUS10_uCRU_ShfuQOsHqc.roa
File: h8_iQKnUS10_uCRU_ShfuQOsHqc.roa (raw, json)
Hash identifier: b5dwzj+CrnYHhtzY4/kbUe7P66Hg07WXFREDKous2Ls=
Subject key identifier: 87:CF:E2:40:A9:D4:4B:5D:3F:B8:24:54:FD:28:5F:B9:03:AC:1E:A7
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 01A154CF10EEB068A773593449C723ECF441
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/h8_iQKnUS10_uCRU_ShfuQOsHqc.roa
Signing time: Mon 19 Oct 2026 15:36:58 +0000
ROA not before: Mon 19 Oct 2026 15:36:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 91.107.88.0/21 maxlen: 21
159.253.124.0/22 maxlen: 22
185.91.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:cf:10:ee:b0:68:a7:73:59:34:49:c7:23:ec:f4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Oct 19 15:36:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87cfe240a9d44b5d3fb82454fd285fb903ac1ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:ac:77:70:4a:11:b0:9b:ef:03:d8:a7:29:
aa:6e:7c:98:2a:04:73:7d:95:fe:70:17:0b:93:47:
60:84:b3:97:d2:fc:ee:07:3a:a3:8f:4a:81:cb:78:
d2:06:5d:c7:95:33:1d:4e:28:b8:43:b0:f6:1b:09:
4e:8d:a4:cf:de:7c:9e:96:c0:54:b2:fd:ad:04:cd:
73:c2:fe:fc:d7:75:64:8f:b1:e1:38:07:8e:63:95:
fc:90:48:22:ac:af:31:b4:cd:e9:b2:54:a1:29:20:
6c:ea:22:c8:fd:cf:96:f4:1a:46:f5:73:ad:66:76:
d1:6c:d1:ac:c5:ce:40:de:6d:60:3b:9d:4b:a7:16:
ff:b2:07:44:3c:02:84:c0:4c:70:f1:9d:0b:ad:ad:
c6:50:35:03:d7:29:47:c9:2c:b9:1c:f3:b8:fc:90:
34:9a:9f:fa:7f:b5:7c:1b:ea:fd:51:de:77:32:1f:
56:b0:07:f7:9f:3c:4e:18:a3:39:c5:47:f2:4f:dc:
8b:81:e7:ed:db:65:53:81:fd:4c:96:88:07:3d:d2:
f5:fe:ca:35:e3:45:d5:c6:0f:f7:7b:b0:70:d1:5e:
31:46:9d:7b:1c:ce:d3:ff:3f:f8:b6:85:57:74:cf:
4a:7f:de:a7:3f:b1:55:7d:41:65:c6:d3:b3:46:cf:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CF:E2:40:A9:D4:4B:5D:3F:B8:24:54:FD:28:5F:B9:03:AC:1E:A7
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/h8_iQKnUS10_uCRU_ShfuQOsHqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.88.0/21
159.253.124.0/22
185.91.132.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:1b:38:5b:13:50:52:d1:a8:50:17:b4:31:ac:d4:bb:d2:37:
4f:6f:74:f2:47:be:01:b2:cd:ac:2b:6a:3e:58:56:49:ed:6e:
c9:15:63:41:86:e3:93:1a:81:63:6b:98:1d:44:12:1b:6b:24:
cf:98:b4:f1:d0:6b:be:01:15:4a:8c:29:9e:6a:91:ad:53:97:
a1:bd:a9:a3:5b:da:d2:74:79:15:cb:bb:4c:5a:16:e3:a2:e4:
d4:69:1e:73:a9:81:c7:15:c1:89:07:96:d8:c8:8c:81:54:d0:
07:1c:5f:8f:98:11:e1:37:06:14:bc:b2:bc:47:e8:ba:be:38:
c0:2d:99:db:06:9a:19:c0:7f:ae:90:64:8d:4c:9e:43:02:a8:
09:b9:4a:f7:00:a6:2a:e7:f6:f1:5a:01:41:1a:16:02:62:c9:
b2:a2:e3:48:91:1f:2a:9a:07:0f:49:bf:52:06:31:83:f0:13:
a0:30:cb:3e:f9:8a:02:7c:1e:cb:d8:74:01:03:9e:89:43:0e:
61:1e:f2:c9:d2:1f:71:74:94:6b:c7:ad:6a:b2:8e:f9:ec:cd:
0a:1d:17:83:02:f7:62:0f:9f:95:ae:b6:d4:1b:d1:df:24:e7:
be:26:3c:39:9f:e8:29:8a:0c:c7:29:b9:2c:5c:b4:c1:41:36:
21:f5:68:28
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaFUzxDusGinc1k0Sccj7PRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz
MThmODYwHhcNMjYxMDE5MTUzNjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2NmZTI0MGE5ZDQ0YjVkM2ZiODI0NTRmZDI4NWZiOTAzYWMxZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJqsd3BKEbCb7wPYpymqbnyYKgRz
fZX+cBcLk0dghLOX0vzuBzqjj0qBy3jSBl3HlTMdTii4Q7D2GwlOjaTP3nyelsBU
sv2tBM1zwv7813Vkj7HhOAeOY5X8kEgirK8xtM3pslShKSBs6iLI/c+W9BpG9XOt
ZnbRbNGsxc5A3m1gO51Lpxb/sgdEPAKEwExw8Z0Lra3GUDUD1ylHySy5HPO4/JA0
mp/6f7V8G+r9Ud53Mh9WsAf3nzxOGKM5xUfyT9yLgeft22VTgf1MlogHPdL1/so1
40XVxg/3e7Bw0V4xRp17HM7T/z/4toVXdM9Kf96nP7FVfUFlxtOzRs/LQwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIfP4kCp1EtdP7gkVP0oX7kDrB6nMB8GA1UdIwQY
MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt
Yjc4ZGFjMzdlYWM4LzEvaDhfaVFLblVTMTBfdUNSVV9TaGZ1UU9zSHFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4
LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDW2tYAwQC
n/18AwQCuVuEMA0GCSqGSIb3DQEBCwUAA4IBAQA+GzhbE1BS0ahQF7QxrNS70jdP
b3TyR74Bss2sK2o+WFZJ7W7JFWNBhuOTGoFja5gdRBIbayTPmLTx0Gu+ARVKjCme
apGtU5ehvamjW9rSdHkVy7tMWhbjouTUaR5zqYHHFcGJB5bYyIyBVNAHHF+PmBHh
NwYUvLK8R+i6vjjALZnbBpoZwH+ukGSNTJ5DAqgJuUr3AKYq5/bxWgFBGhYCYsmy
ouNIkR8qmgcPSb9SBjGD8BOgMMs++YoCfB7L2HQBA56JQw5hHvLJ0h9xdJRrx61q
so757M0KHReDAvdiD5+VrrbUG9HfJOe+Jjw5n+gpigzHKbksXLTBQTYh9Wgo
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:46:22 2026 by rpki-client