Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8IBhbsA_4_ad2xtYmTIUCc8y8i0.roa
File: 8IBhbsA_4_ad2xtYmTIUCc8y8i0.roa (raw, json)
Hash identifier: tzn2FP7Ao78RHTUO7x3Ut7kZhVG+5eriHyLTaLDw9jE=
Subject key identifier: F0:80:61:6E:C0:3F:E3:F6:9D:DB:1B:58:99:32:14:09:CF:32:F2:2D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A0B865B3F85949A49F83DFBE8E1C2D07CD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8IBhbsA_4_ad2xtYmTIUCc8y8i0.roa
Signing time: Sat 19 Sep 2026 06:41:08 +0000
ROA not before: Sat 19 Sep 2026 06:41:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41575
IP address blocks: 31.148.32.0/21 maxlen: 24
31.148.224.0/20 maxlen: 24
92.253.240.0/20 maxlen: 24
93.171.16.0/20 maxlen: 24
93.171.48.0/20 maxlen: 24
93.171.80.0/20 maxlen: 24
93.171.104.0/21 maxlen: 24
95.46.34.0/23 maxlen: 24
95.46.48.0/20 maxlen: 24
95.46.144.0/24 maxlen: 24
146.158.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:65:b3:f8:59:49:a4:9f:83:df:be:8e:1c:2d:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 19 06:41:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f080616ec03fe3f69ddb1b5899321409cf32f22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:ef:6b:fe:dd:0a:a3:29:73:45:2f:64:c3:
3f:ef:33:62:97:2a:67:6b:21:6d:8f:1d:d8:ef:51:
db:19:a6:75:98:26:12:ff:15:d6:53:fa:8b:62:3d:
3c:bd:ed:86:b2:87:07:01:31:d1:31:82:72:dc:c7:
29:5a:54:9f:c7:fa:08:54:6f:8d:8c:26:35:7a:92:
8c:41:28:f3:b9:6a:a9:19:b2:02:45:ad:1d:d8:0d:
55:fb:b8:18:c1:d6:d0:65:af:46:8b:b9:c7:ef:75:
07:0f:58:8a:00:58:cc:1f:9e:ef:88:8c:79:e4:ae:
97:39:b4:41:83:b9:dc:00:f4:7a:97:30:5c:f2:68:
6b:0c:0b:19:83:d8:86:01:50:71:cd:54:c6:f5:5e:
87:14:6e:6c:a8:8d:8d:55:f7:82:68:71:f6:20:13:
ee:c5:37:7b:fb:20:54:85:a5:e0:65:a8:8c:78:68:
92:85:9d:11:62:8f:0f:77:e5:f3:c1:46:7a:c3:f9:
3e:20:77:af:d1:ab:5a:80:59:f4:20:dd:ac:dc:f1:
98:a8:4b:15:49:ee:cc:51:1b:1e:1b:f5:89:6c:4a:
c2:e3:27:f2:45:91:7f:86:ca:67:55:f2:31:65:b3:
44:41:ae:07:9e:98:4f:fe:b9:7a:9a:17:b6:29:f3:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:61:6E:C0:3F:E3:F6:9D:DB:1B:58:99:32:14:09:CF:32:F2:2D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8IBhbsA_4_ad2xtYmTIUCc8y8i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.32.0/21
31.148.224.0/20
92.253.240.0/20
93.171.16.0/20
93.171.48.0/20
93.171.80.0/20
93.171.104.0/21
95.46.34.0/23
95.46.48.0/20
95.46.144.0/24
146.158.32.0/20
Signature Algorithm: sha256WithRSAEncryption
93:89:28:2f:04:3a:00:6f:c2:41:5b:30:9a:c0:6b:2a:af:74:
1c:a6:c9:81:1c:8f:bf:a3:fd:5f:fd:77:06:37:e2:ae:2e:0b:
89:16:3a:72:c0:c0:12:99:cd:39:ab:54:ed:ab:48:90:19:62:
ec:20:21:31:82:e3:e5:8a:e3:63:ac:e1:63:a6:dc:b1:ee:e7:
de:b2:eb:3b:94:19:42:d8:5c:5f:9b:bf:b3:88:fd:29:0c:4a:
ed:62:65:0d:9c:ed:68:a9:8d:7d:d8:f4:7c:0e:a0:c6:fc:57:
39:26:9a:d1:8d:bb:7c:f2:a4:a1:0a:a3:ba:84:4c:b4:ef:af:
c0:cd:bb:d1:7b:5d:2e:02:27:4f:f9:eb:1c:b4:28:2a:05:99:
8a:26:8d:bd:52:df:f1:0b:aa:2a:11:3e:ab:95:f3:67:43:b7:
6e:67:f5:00:3f:2d:a0:61:af:2b:8a:04:a1:42:9e:e9:9a:87:
2c:73:a5:11:3f:49:6f:18:43:e9:d1:cd:3d:71:62:5b:66:8d:
f2:9b:ee:8c:bf:37:5a:c7:73:0c:19:c8:d5:bc:2c:84:fd:16:
c4:1f:f5:bb:ce:e9:ba:75:28:df:66:3c:06:5e:d8:e4:54:05:
bd:6e:12:01:e6:f7:e8:46:c6:9a:1b:16:28:41:b2:52:3a:1c:
9a:6b:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:51 2026 by rpki-client