Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/8KG06O_ShOw-fAgF9hGpdzf3xEY.roa
File: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (raw, json)
Hash identifier: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=
Subject key identifier: F0:A1:B4:E8:EF:D2:84:EC:3E:7C:08:05:F6:11:A9:77:37:F7:C4:46
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019C66A8A0D420E9E561F4784B7083124BE5
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/8KG06O_ShOw-fAgF9hGpdzf3xEY.roa
Signing time: Mon 16 Feb 2026 13:34:13 +0000
ROA not before: Mon 16 Feb 2026 13:34:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14576
IP address blocks: 45.145.128.0/23 maxlen: 23
193.202.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:a8:a0:d4:20:e9:e5:61:f4:78:4b:70:83:12:4b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Feb 16 13:34:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0a1b4e8efd284ec3e7c0805f611a97737f7c446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:96:e4:15:41:dc:a9:6b:63:06:76:0e:56:
47:39:ac:a4:b4:e2:00:c1:ba:50:0f:a6:f4:c0:27:
f8:1a:bf:2e:83:8c:6b:ee:11:79:df:5d:04:9f:c2:
27:f1:80:65:71:1d:9e:4a:4a:03:42:07:6d:7f:5c:
f8:2d:36:9a:70:d8:76:cb:f2:90:6e:e7:64:36:a4:
42:a7:71:e8:00:4a:a3:11:4e:e4:cc:0c:7b:21:e3:
cc:08:3b:5b:59:3d:33:a6:2e:d3:a3:f7:52:72:2b:
fa:a3:80:7e:11:05:7a:2f:ae:73:84:27:6e:5c:3a:
96:31:f7:62:66:f6:2e:b8:0b:8c:76:c9:0e:be:2c:
0a:95:07:08:b6:94:ae:83:72:b2:9a:3c:60:2b:9f:
78:38:6c:8b:f1:0a:c1:4c:5b:23:ff:54:4a:51:bf:
bb:b3:d8:f3:4c:55:9a:d0:cf:a7:52:17:43:91:8d:
d1:ee:3c:7c:71:f6:33:de:b3:3c:91:f5:0d:c6:94:
da:31:19:2a:85:8a:25:c1:c3:ee:d8:0a:44:e1:7a:
31:ce:ae:b7:55:42:62:8e:32:96:3e:3b:3d:49:0d:
64:7b:48:fb:41:72:13:ef:83:fd:53:00:8f:d8:70:
fe:9d:c9:9e:d7:7d:87:ea:ff:4b:d2:fc:cc:aa:30:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A1:B4:E8:EF:D2:84:EC:3E:7C:08:05:F6:11:A9:77:37:F7:C4:46
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/8KG06O_ShOw-fAgF9hGpdzf3xEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.128.0/23
193.202.12.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:f1:94:fa:08:b1:06:b3:b6:c0:28:d9:18:e1:d2:70:68:f7:
4d:c8:2a:fd:52:c9:56:cd:37:32:06:12:eb:96:b7:0d:b2:d0:
70:d1:0b:db:d9:42:ee:cf:d1:51:fe:95:d2:ac:c6:cc:a0:8b:
af:88:24:40:c6:f2:cf:40:7e:98:e5:33:58:e5:2b:c5:a9:50:
7d:3f:37:2e:82:a6:36:38:73:b2:a3:e3:e1:cb:3f:c8:6c:e2:
7c:7d:d7:6b:00:5a:17:36:ed:cc:79:3e:ef:b5:fe:43:a2:85:
4a:db:fb:ea:32:9e:56:d4:df:29:40:28:70:80:d2:16:10:fb:
c4:79:a0:fc:5e:b2:84:eb:70:c2:c1:9b:2f:29:b6:4c:36:d6:
ef:2b:b3:01:3d:88:9f:1a:e2:9f:43:82:80:21:8b:8b:e1:3a:
24:21:f2:fd:d4:b6:a4:83:6b:3f:7f:e6:38:e6:19:c4:74:d6:
e6:56:df:0d:b7:88:c8:81:45:de:ae:b9:2c:1a:e2:43:38:c9:
87:9f:54:c4:6b:0d:d1:41:4e:38:2b:59:94:2f:f8:28:87:b9:
d8:df:6c:30:02:d1:ec:ff:79:e5:f3:8a:d4:46:e2:e5:4c:bd:
9a:dc:80:dc:de:d5:02:6f:50:8e:f0:ea:ed:89:c6:38:e2:b9:
89:17:4e:01
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZxmqKDUIOnlYfR4S3CDEkvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjYwMjE2MTMzNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGExYjRlOGVmZDI4NGVjM2U3YzA4MDVmNjExYTk3NzM3ZjdjNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT6W5BVB3KlrYwZ2DlZHOayktOIA
wbpQD6b0wCf4Gr8ug4xr7hF5310En8In8YBlcR2eSkoDQgdtf1z4LTaacNh2y/KQ
budkNqRCp3HoAEqjEU7kzAx7IePMCDtbWT0zpi7To/dSciv6o4B+EQV6L65zhCdu
XDqWMfdiZvYuuAuMdskOviwKlQcItpSug3KymjxgK594OGyL8QrBTFsj/1RKUb+7
s9jzTFWa0M+nUhdDkY3R7jx8cfYz3rM8kfUNxpTaMRkqhYolwcPu2ApE4Xoxzq63
VUJijjKWPjs9SQ1ke0j7QXIT74P9UwCP2HD+ncme132H6v9L0vzMqjCwNwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPChtOjv0oTsPnwIBfYRqXc398RGMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xLzhLRzA2T19TaE93LWZBZ0Y5aEdwZHpmM3hFWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAEtkYAD
BALBygwwDQYJKoZIhvcNAQELBQADggEBAD3xlPoIsQaztsAo2Rjh0nBo903IKv1S
yVbNNzIGEuuWtw2y0HDRC9vZQu7P0VH+ldKsxsygi6+IJEDG8s9AfpjlM1jlK8Wp
UH0/Ny6CpjY4c7Kj4+HLP8hs4nx912sAWhc27cx5Pu+1/kOihUrb++oynlbU3ylA
KHCA0hYQ+8R5oPxesoTrcMLBmy8ptkw21u8rswE9iJ8a4p9DgoAhi4vhOiQh8v3U
tqSDaz9/5jjmGcR01uZW3w23iMiBRd6uuSwa4kM4yYefVMRrDdFBTjgrWZQv+CiH
udjfbDAC0ez/eeXzitRG4uVMvZrcgNze1QJvUI7w6u2JxjjiuYkXTgE=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:31 2026 by rpki-client