Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/8iSljF9yURlFbqs-gvEXq7OZBjM.roa
File: 8iSljF9yURlFbqs-gvEXq7OZBjM.roa (raw, json)
Hash identifier: ARcwma/vswYt5XBxVOW0CoTAWWMy+ZmtkB5FXlj5D4U=
Subject key identifier: F2:24:A5:8C:5F:72:51:19:45:6E:AB:3E:82:F1:17:AB:B3:99:06:33
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 019C6B144388143ACED82920A0A97DFAA981
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/8iSljF9yURlFbqs-gvEXq7OZBjM.roa
Signing time: Tue 17 Feb 2026 10:10:16 +0000
ROA not before: Tue 17 Feb 2026 10:10:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44578
IP address blocks: 90.156.220.0/23 maxlen: 23
90.156.220.0/24 maxlen: 24
90.156.221.0/24 maxlen: 24
185.209.49.0/24 maxlen: 24
188.244.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:14:43:88:14:3a:ce:d8:29:20:a0:a9:7d:fa:a9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Feb 17 10:10:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f224a58c5f725119456eab3e82f117abb3990633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:96:c1:98:f6:12:c5:4e:b1:af:56:43:32:
36:67:9d:18:33:33:dc:5e:94:b4:75:11:ca:d7:07:
2a:e8:10:18:c2:13:a1:64:dc:b7:f5:f1:3c:b2:de:
08:06:ec:1d:24:7e:72:73:b2:6e:57:58:eb:90:c9:
25:a0:eb:d7:a8:51:43:98:45:9c:fd:88:b9:11:08:
5c:84:4c:08:42:86:7b:58:9b:66:bc:33:dd:d1:b6:
96:93:4c:81:a6:ff:36:e6:58:6d:e1:73:78:e8:ee:
e9:f9:c5:58:d7:80:61:e6:19:2d:fd:45:98:32:30:
d8:d8:d4:5c:df:2d:a0:e9:b9:ac:3b:9e:6b:fd:5d:
26:5f:f7:24:38:47:41:8d:67:e8:b4:91:69:52:80:
9b:27:26:21:88:e3:ae:d7:83:39:8a:87:55:5d:53:
4f:f9:8f:cd:b3:28:0f:94:53:df:dd:0e:31:8c:b8:
d5:2c:5c:46:9f:7a:3b:46:0c:a1:9b:53:3c:d8:9e:
a3:1b:a4:1e:ab:98:ff:e3:48:a6:81:41:0e:0b:9b:
9e:30:26:f3:43:b9:8f:d2:47:e7:58:88:b0:19:7a:
d8:e5:d3:af:87:5b:82:75:f3:22:a4:81:2c:35:56:
e0:50:c5:51:f0:e5:50:bf:88:f9:10:9b:0f:2f:c3:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:A5:8C:5F:72:51:19:45:6E:AB:3E:82:F1:17:AB:B3:99:06:33
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/8iSljF9yURlFbqs-gvEXq7OZBjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.220.0/23
185.209.49.0/24
188.244.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:43:12:5e:01:f4:3f:1b:c6:2f:44:47:ec:b2:2c:d3:a6:c2:
76:92:af:d3:e7:d3:9f:3e:41:7b:41:e8:ea:1d:75:4f:de:32:
38:f5:7f:d1:ae:13:2b:63:d0:e4:48:f4:b5:bb:04:d0:a8:89:
d1:9f:52:85:d8:96:d6:e6:95:86:c0:76:9e:b2:8c:1f:ff:d0:
70:ee:f8:01:c4:fd:81:a5:e6:3c:b8:d1:8b:ff:5f:94:66:b7:
f5:8b:66:02:54:e1:45:88:b5:2a:4e:ed:32:b8:1d:51:4c:7a:
c0:19:c1:34:f8:6b:09:96:be:cc:5b:2e:c1:fd:14:f1:60:03:
24:a4:a1:52:28:52:fd:48:c2:14:7f:ef:f8:00:0b:8a:20:c7:
a5:7c:0f:d9:d2:7d:2d:2d:f7:8b:a3:7b:08:7a:74:bf:9d:20:
83:58:af:01:1e:38:20:10:2c:cd:ab:b4:d6:41:a9:d1:6a:90:
00:bf:b4:bf:ac:4b:70:64:d2:f7:61:c0:ca:28:9a:2d:61:8d:
01:c0:b1:fe:91:9e:b6:45:89:53:bb:0e:a2:a4:85:63:cf:a0:
64:c2:ef:63:16:8e:60:f4:20:3b:4c:9c:6d:6d:a9:b5:84:80:
a6:79:e4:d2:ac:23:15:02:19:88:6d:0e:f5:65:57:5f:bc:48:
61:b5:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:40 2026 by rpki-client