Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/8jS75jCr3kyD49h3RwDHRKXbQUM.roa
File: 8jS75jCr3kyD49h3RwDHRKXbQUM.roa (raw, json)
Hash identifier: 7VTCQqmXyoi6eFQKQfXoq7RVIemzRyMgz7APg6Ck65o=
Subject key identifier: F2:34:BB:E6:30:AB:DE:4C:83:E3:D8:77:47:00:C7:44:A5:DB:41:43
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01A138CB51EFD63C46927130ED046252410C
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/8jS75jCr3kyD49h3RwDHRKXbQUM.roa
Signing time: Wed 14 Oct 2026 05:03:31 +0000
ROA not before: Wed 14 Oct 2026 05:03:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.102.0/24 maxlen: 24
185.160.193.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
2a14:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:cb:51:ef:d6:3c:46:92:71:30:ed:04:62:52:41:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 14 05:03:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f234bbe630abde4c83e3d8774700c744a5db4143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:b3:80:38:d2:d1:55:e7:b3:0f:5e:ce:7f:
ac:ec:d1:97:71:81:8d:89:e7:f8:8d:8d:fc:df:6b:
92:25:36:e3:1b:52:fe:08:01:e8:0e:ff:dc:72:a4:
76:6d:24:92:0a:57:b2:e5:63:71:f5:a8:75:53:f0:
5f:08:a9:6d:8b:5e:c1:b7:34:9a:9a:19:43:17:6a:
d3:04:40:85:bc:b5:69:8b:d8:f8:57:cd:3d:fa:14:
bf:f3:6b:ed:41:33:bb:63:7e:b1:ba:51:00:5e:aa:
fb:d9:e7:d8:a3:24:2d:6d:11:1f:75:f7:02:51:0e:
3c:44:98:22:f9:bd:56:b3:ed:49:9b:f1:fb:72:31:
29:61:98:73:cd:df:03:db:d7:d7:77:34:89:11:b4:
8a:7f:1f:b1:e4:56:12:24:f7:e8:94:83:f5:9a:3a:
1f:61:35:a1:01:0b:3c:31:2f:1d:79:04:fd:23:09:
96:48:83:eb:9e:98:db:20:f3:5b:26:33:de:5c:dc:
74:6f:fc:cd:71:8d:fc:36:19:2c:56:85:d4:90:9b:
9f:86:c5:a7:90:a1:79:ee:80:04:b2:ba:23:75:77:
70:a0:df:d7:6d:8d:db:24:78:8f:af:00:bc:7c:aa:
a0:48:a5:68:f1:19:8f:8e:0b:dd:9b:26:a8:47:b4:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:34:BB:E6:30:AB:DE:4C:83:E3:D8:77:47:00:C7:44:A5:DB:41:43
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/8jS75jCr3kyD49h3RwDHRKXbQUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.102.0/24
185.160.193.0-185.160.195.255
185.169.221.0-185.169.223.255
IPv6:
2a14:80::/48
Signature Algorithm: sha256WithRSAEncryption
38:cd:25:e3:6e:af:80:92:1e:8c:f1:02:35:b3:c8:2e:f3:92:
85:07:f1:28:96:8f:2e:71:4b:85:0c:85:a3:d9:30:b1:dd:fe:
46:5a:dd:3c:11:ee:df:54:8f:99:15:11:6b:35:85:3e:36:7a:
6f:91:03:e7:7f:0a:f1:a0:29:58:1e:19:47:25:7c:4d:d9:cf:
8b:c2:19:67:a9:1f:51:42:65:2f:40:83:7c:aa:c4:f8:1c:cc:
48:68:f2:4a:b1:c7:bd:f6:bf:39:a2:79:51:48:d8:e0:07:9d:
72:7d:e6:3b:ef:e4:cc:14:88:37:19:68:fe:f1:84:1f:bf:d4:
32:dc:ec:df:f7:b2:68:b9:0d:fe:64:42:5c:8f:73:b6:33:34:
04:25:82:90:df:10:34:f4:d8:04:63:5c:27:da:cd:21:12:d3:
c6:bd:cd:2c:b7:ef:6e:39:da:06:82:c0:db:e6:7e:ab:ba:e0:
01:0e:53:89:5a:d9:50:15:dc:ec:be:ba:6d:fb:ff:e8:30:23:
7c:33:57:21:58:c4:3d:64:65:36:7d:20:c1:bf:b6:62:66:d4:
48:c9:c7:8e:82:8a:3c:26:0f:b4:c1:9c:ce:7e:bb:e0:c5:7e:
c4:b0:f3:54:4d:48:51:84:db:ef:d0:ac:ba:11:53:3e:7f:4d:
06:29:2c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:44:19 2026 by rpki-client