Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/8CXXxXOl_TgN0Sp_A7Pbzfq6fKY.roa
File: 8CXXxXOl_TgN0Sp_A7Pbzfq6fKY.roa (raw, json)
Hash identifier: x6lpEzFYhwFVijSBlfFL06mSEvzg6Wxii04ehpDZw4U=
Subject key identifier: F0:25:D7:C5:73:A5:FD:38:0D:D1:2A:7F:03:B3:DB:CD:FA:BA:7C:A6
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01A0AE34BFC147F05F637DFB61E7BFC77AC0
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/8CXXxXOl_TgN0Sp_A7Pbzfq6fKY.roa
Signing time: Thu 17 Sep 2026 07:11:27 +0000
ROA not before: Thu 17 Sep 2026 07:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216192
IP address blocks: 85.159.89.0/24 maxlen: 24
194.177.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:34:bf:c1:47:f0:5f:63:7d:fb:61:e7:bf:c7:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Sep 17 07:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f025d7c573a5fd380dd12a7f03b3dbcdfaba7ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:11:6b:c2:89:26:61:b5:f2:d6:88:f5:fe:
1c:13:5a:e1:7f:44:b8:03:0d:c5:7e:db:bc:9d:90:
e9:4b:aa:e6:4c:a3:15:58:85:a3:90:bd:e1:92:3f:
4d:13:7f:c0:76:19:2a:7f:65:bf:9a:1d:bf:09:c1:
69:ee:72:48:b8:88:e3:ad:5e:2a:3e:8a:30:b5:40:
3d:09:0e:f0:2c:60:70:a2:2a:c7:05:3e:b0:c8:6b:
ec:3f:14:b1:36:f5:a0:27:71:ed:bc:e3:2d:09:d0:
c0:16:fa:db:23:99:e0:de:68:4f:a5:2a:78:0b:d9:
d5:7d:66:95:16:37:61:e0:1d:0f:6f:e4:3e:9c:c2:
cc:d0:e2:44:7e:02:4f:cc:45:76:4c:3b:43:62:c1:
2c:3e:87:73:38:8e:cf:56:a2:c2:0f:f3:33:61:0d:
62:21:5d:3c:4b:97:a2:dd:21:ea:5e:3e:ca:1e:19:
b0:a1:a1:66:7e:84:5f:ae:3e:92:a9:88:6a:f4:6a:
78:ac:b4:a6:25:fb:93:2c:27:ce:e2:fd:37:80:41:
59:f8:13:e8:79:67:5f:e0:7d:0e:42:5b:61:19:e8:
31:62:97:d8:8c:69:0e:b8:b6:e8:e6:30:2c:d9:5b:
db:31:9a:e3:95:af:bc:5b:c3:46:e1:06:68:68:8a:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:D7:C5:73:A5:FD:38:0D:D1:2A:7F:03:B3:DB:CD:FA:BA:7C:A6
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/8CXXxXOl_TgN0Sp_A7Pbzfq6fKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.89.0/24
194.177.14.0/24
Signature Algorithm: sha256WithRSAEncryption
21:cd:c1:de:0c:89:f7:ea:74:4b:98:88:b8:be:48:4b:03:f5:
c6:06:ef:69:bf:d7:30:a6:cd:e4:b9:98:83:91:65:69:c8:c5:
da:82:40:1f:ea:82:8f:f3:2f:bc:50:3e:f9:c8:97:69:07:aa:
fc:c2:f6:62:56:97:c1:b2:0d:39:74:3f:01:4e:47:a9:a6:f0:
36:ac:38:9b:15:fb:f2:7f:23:86:d9:85:33:ab:30:e5:52:7d:
1c:47:a4:fc:54:25:bd:f3:59:84:c3:a7:da:b7:45:47:f1:b4:
28:f4:8b:b4:25:22:ab:18:43:39:ed:c0:2f:22:ab:e8:f4:c6:
4c:b3:5e:cc:aa:8f:d5:8d:81:93:6b:a7:93:05:f5:31:a1:67:
d5:3b:fd:97:23:d5:af:22:91:f0:8d:b7:f4:42:c2:e5:17:44:
6e:82:ce:d5:84:44:b9:75:e3:9b:ad:78:5c:b7:9c:a4:8b:62:
51:f4:0f:0e:c4:34:99:25:25:db:3a:20:73:29:fd:6f:c8:a5:
c6:cb:92:9e:b1:91:21:61:64:31:6a:85:a1:1e:62:93:06:21:
67:8f:91:17:97:f7:7c:ab:73:fb:3e:5e:b5:33:42:d2:81:53:
c1:57:47:25:4d:69:43:6c:bc:a9:8a:02:16:08:63:cc:b2:e4:
bc:56:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:51:18 2026 by rpki-client