Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/8IknHpKPRllW0MQBiUdxVDr9GKY.roa
File: 8IknHpKPRllW0MQBiUdxVDr9GKY.roa (raw, json)
Hash identifier: TR9K0gn1/vvxwOrEB1fss/ul5XwSQYatd14/mtJabTU=
Subject key identifier: F0:89:27:1E:92:8F:46:59:56:D0:C4:01:89:47:71:54:3A:FD:18:A6
Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf
Certificate serial: 019B7C12750C153E656813CBC04D2FBC41D8
Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/8IknHpKPRllW0MQBiUdxVDr9GKY.roa
Signing time: Fri 02 Jan 2026 00:19:02 +0000
ROA not before: Fri 02 Jan 2026 00:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196890
IP address blocks: 5.149.192.0/21 maxlen: 21
193.19.124.0/23 maxlen: 23
193.25.222.0/24 maxlen: 24
194.28.104.0/22 maxlen: 22
2a00:d5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:75:0c:15:3e:65:68:13:cb:c0:4d:2f:bc:41:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Validity
Not Before: Jan 2 00:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f089271e928f465956d0c401894771543afd18a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:67:19:7c:e3:75:16:e6:0b:c9:da:94:d4:
a7:57:ad:4f:66:68:3d:9d:d4:9b:5d:66:5c:aa:58:
9f:bc:7d:be:d9:1d:d6:2b:9b:1b:1a:87:1e:c9:02:
18:3c:68:11:52:0e:ed:27:c7:20:f7:0e:a1:b8:16:
96:ca:9b:63:c1:b2:1f:e9:d8:01:a3:3f:de:b6:75:
f4:e8:00:9c:fa:ca:3b:f0:88:52:85:8f:dd:42:74:
3b:aa:80:08:d6:df:68:e7:d3:e6:fc:bc:da:3b:4f:
25:de:c6:0a:05:37:c2:42:21:c8:ab:5e:b0:e0:78:
1b:59:17:e8:b0:cb:5c:ad:6e:bf:de:98:b7:b7:06:
cb:10:0f:20:5c:c5:8c:5e:86:76:07:20:a7:96:23:
c8:4b:1e:90:bc:48:0f:23:66:97:c2:bd:60:c7:f2:
fc:11:76:2b:60:ae:d6:a6:d7:7c:a6:ae:1e:2b:94:
2e:fa:65:84:d1:7c:ef:e4:06:d7:2e:7c:08:20:a5:
08:ee:19:93:7c:41:e0:19:de:73:25:29:12:4f:b4:
21:ad:7f:f8:df:b8:c7:3f:83:f9:f9:cc:f7:69:57:
26:da:61:5a:35:18:c6:79:25:eb:3f:eb:02:69:42:
49:c8:63:69:91:fb:e9:c3:7d:55:63:2a:a1:60:ad:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:27:1E:92:8F:46:59:56:D0:C4:01:89:47:71:54:3A:FD:18:A6
X509v3 Authority Key Identifier:
keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/8IknHpKPRllW0MQBiUdxVDr9GKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.192.0/21
193.19.124.0/23
193.25.222.0/24
194.28.104.0/22
IPv6:
2a00:d5c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:f3:bd:d2:e0:59:01:27:ab:3d:16:39:29:dc:ce:cb:76:67:
06:40:01:02:19:79:0e:29:2e:b5:af:32:1c:68:cd:26:7e:dc:
e3:d5:b5:5f:72:9f:28:18:a0:a9:1e:52:b9:ab:9e:94:82:2e:
1e:55:da:b5:fc:01:26:66:80:05:3e:9c:89:74:24:24:69:71:
9c:dc:e4:ea:c3:bc:c3:05:06:2a:db:2d:47:e5:a2:70:d3:49:
19:57:dc:b8:9c:f7:74:9a:0e:2e:22:ba:74:e1:4b:5f:ae:ad:
56:32:d6:55:08:9d:bd:21:ea:dc:73:07:bb:e6:1a:4e:da:95:
11:6b:38:be:ce:79:47:e3:4f:16:b9:04:15:71:c7:48:ed:00:
74:be:83:ea:9b:05:25:f6:9f:4e:01:da:84:40:fb:b5:67:0e:
b1:4f:fe:3a:30:42:7c:03:95:15:29:7b:a4:da:a2:cf:30:c6:
79:fc:23:cf:17:88:a6:ca:e6:46:cb:75:82:72:4b:61:e0:2b:
1d:48:a7:e1:07:95:be:0b:9c:db:fa:9d:35:d5:e9:a1:c8:16:
54:7b:06:11:99:c9:ff:ab:40:ad:ab:fe:bc:8d:3b:09:d1:d3:
37:2e:7a:be:6a:05:33:36:28:57:bb:c3:77:5d:c3:57:4e:ee:
db:1b:50:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:46 2026 by rpki-client