Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/8gINa2lFaHAK60FtqIDDhXwZP7w.roa
File: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (raw, json)
Hash identifier: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=
Subject key identifier: F2:02:0D:6B:69:45:68:70:0A:EB:41:6D:A8:80:C3:85:7C:19:3F:BC
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019C46B599BB22E4ECD97C2D2C2C644EBB6C
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/8gINa2lFaHAK60FtqIDDhXwZP7w.roa
Signing time: Tue 10 Feb 2026 08:40:32 +0000
ROA not before: Tue 10 Feb 2026 08:40:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49206
IP address blocks: 185.24.172.0/22 maxlen: 24
185.24.175.0/24 maxlen: 24
2a00:6fa0::/32 maxlen: 32
2a00:6fa0:3100::/40 maxlen: 40
2a00:6fa0:4200::/40 maxlen: 40
2a00:6fa0:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:b5:99:bb:22:e4:ec:d9:7c:2d:2c:2c:64:4e:bb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Feb 10 08:40:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2020d6b694568700aeb416da880c3857c193fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:19:ec:90:60:d1:44:5c:ef:25:c0:23:4a:
6c:60:44:37:47:4a:fb:aa:8f:d7:f6:48:63:f0:4d:
84:70:82:89:6f:61:71:58:63:f2:d7:3e:a8:ba:21:
43:b8:ab:b3:79:51:4a:02:95:eb:d7:9b:66:9b:95:
c8:8f:d8:16:fa:8b:d5:1a:59:9a:5a:8b:5c:17:ed:
0a:57:b8:dc:ef:eb:b4:bc:fc:74:2c:ed:db:36:34:
53:7d:f0:7c:be:f1:19:05:e2:8c:56:21:b4:4c:36:
0e:7d:fe:9d:f3:50:29:2d:75:f4:9d:ba:7f:f6:5c:
3c:64:1f:33:94:3b:e5:ca:eb:46:58:9d:23:15:86:
02:62:95:e6:cf:e8:44:66:ed:3d:b0:7c:89:87:2f:
6f:db:ca:64:fa:87:6c:5d:57:0b:95:6a:c7:70:90:
56:e4:77:4c:24:c3:53:b9:26:97:10:4d:70:09:11:
a8:c0:c3:1c:f6:eb:10:0b:d5:34:13:47:e5:d3:f9:
40:c6:c5:6a:2b:8a:2a:02:37:f3:a5:c3:34:c6:ce:
ce:46:50:ea:07:6d:99:ff:01:50:a1:32:07:ba:e6:
b9:68:91:e3:2b:43:2c:07:9c:80:12:da:30:ae:79:
02:da:f3:26:f5:9c:d6:0d:12:16:3e:b1:d9:1f:a5:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:02:0D:6B:69:45:68:70:0A:EB:41:6D:A8:80:C3:85:7C:19:3F:BC
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/8gINa2lFaHAK60FtqIDDhXwZP7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.172.0/22
IPv6:
2a00:6fa0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:8d:98:ba:23:fc:1f:4f:22:4c:09:06:48:c7:ce:12:69:8a:
6d:ee:48:8b:54:db:23:31:b2:9d:5a:bb:3c:30:0a:e9:d2:1e:
c5:a2:6c:a7:bb:9c:e4:5d:2c:d4:a4:4a:11:e6:a4:51:f7:3d:
96:9b:7e:27:1a:90:25:fc:18:89:e2:51:dd:79:25:79:68:4a:
23:e8:fa:1f:63:f0:20:0c:d8:be:a0:85:75:3b:7b:a6:15:12:
5d:1d:72:b6:d0:45:18:45:6e:06:a6:05:7f:60:8a:d6:3a:97:
43:ac:d4:37:fc:0a:29:2b:47:1e:e1:f0:42:4a:56:50:0b:1a:
f7:3e:27:6e:f1:e1:69:0d:6c:76:24:e5:3c:4a:38:5e:28:28:
1a:52:60:d4:8a:c1:7c:b5:cf:c0:41:0e:da:dd:49:84:cc:eb:
3e:94:b3:d9:83:3f:7c:fe:01:4e:f8:d4:39:58:a2:5b:a9:d5:
d0:3c:25:c7:23:b7:5c:7b:d2:6e:a1:0b:46:f0:d5:ac:9d:a9:
7d:92:ee:00:fe:61:28:85:2e:d6:11:e8:e1:8a:0f:34:a8:02:
97:c5:c9:90:08:6a:a9:6f:d2:ff:33:79:8c:2c:8f:75:31:f1:
56:74:2f:d8:af:0e:c6:41:e7:19:b8:1b:b4:2d:74:0f:53:5d:
37:f6:c8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:05 2026 by rpki-client