Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/D8cDoQ0K8hit95FHQt1_X8Q1QzQ.roa
File: D8cDoQ0K8hit95FHQt1_X8Q1QzQ.roa (raw, json)
Hash identifier: 1nMLoGLbOzvz6ErY3VhXlba63MdXQ3xJMt8eDYiYJ/Q=
Subject key identifier: 0F:C7:03:A1:0D:0A:F2:18:AD:F7:91:47:42:DD:7F:5F:C4:35:43:34
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A1158B82DFD97475CE6A0164EABD40496F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/D8cDoQ0K8hit95FHQt1_X8Q1QzQ.roa
Signing time: Wed 07 Oct 2026 08:47:06 +0000
ROA not before: Wed 07 Oct 2026 08:47:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28458
IP address blocks: 124.198.144.0/24 maxlen: 24
134.49.66.0/24 maxlen: 24
134.49.68.0/24 maxlen: 24
134.49.70.0/23 maxlen: 24
134.49.73.0/24 maxlen: 24
134.49.94.0/23 maxlen: 24
136.176.162.0/23 maxlen: 24
136.176.170.0/23 maxlen: 24
136.176.172.0/22 maxlen: 24
136.176.176.0/24 maxlen: 24
136.176.180.0/22 maxlen: 24
145.63.162.0/24 maxlen: 24
145.63.164.0/24 maxlen: 24
145.63.166.0/23 maxlen: 24
145.63.169.0/24 maxlen: 24
145.63.170.0/24 maxlen: 24
145.63.174.0/23 maxlen: 24
145.63.178.0/24 maxlen: 24
145.63.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:8b:82:df:d9:74:75:ce:6a:01:64:ea:bd:40:49:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 7 08:47:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fc703a10d0af218adf7914742dd7f5fc4354334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:b4:b4:5e:73:cf:3c:9a:23:07:97:59:92:
93:39:42:ec:f8:f4:43:b6:19:92:8a:d6:9e:14:0f:
9f:e8:f5:0e:38:fb:92:f4:62:56:40:85:82:9d:34:
e5:c0:0c:79:cd:29:03:0d:90:6d:1b:1c:d7:42:0a:
44:20:a9:f3:9f:99:6b:5d:fb:1d:cb:32:0d:12:2d:
cd:b9:f9:40:8d:82:53:e2:24:9c:2a:6b:e5:9d:e8:
c0:0e:db:45:0c:7c:ae:f6:4d:8b:c0:c2:a3:10:a9:
e9:e5:92:fc:8c:55:75:51:de:28:01:4b:b0:c8:9e:
86:28:48:85:35:6e:bd:43:21:1b:60:96:95:00:43:
b4:6d:48:f1:61:28:32:cc:79:b1:c9:20:e6:72:12:
8b:3b:c0:68:11:76:ee:5a:3c:bf:d5:ba:12:b5:a9:
60:02:bb:9c:81:81:2a:83:22:5d:58:a5:10:8e:41:
54:6e:c4:d5:0e:d4:77:30:fe:88:56:0d:55:33:6b:
32:7e:39:8a:94:32:98:10:f3:a7:ac:3d:8a:d7:bb:
8b:be:bf:a8:48:1d:43:c0:f3:03:24:b4:25:77:48:
be:5a:71:46:be:8e:5e:3c:82:60:4a:4d:81:46:18:
ef:cd:c7:d0:07:2d:69:8d:54:68:86:3c:35:be:17:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C7:03:A1:0D:0A:F2:18:AD:F7:91:47:42:DD:7F:5F:C4:35:43:34
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/D8cDoQ0K8hit95FHQt1_X8Q1QzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.198.144.0/24
134.49.66.0/24
134.49.68.0/24
134.49.70.0/23
134.49.73.0/24
134.49.94.0/23
136.176.162.0/23
136.176.170.0-136.176.176.255
136.176.180.0/22
145.63.162.0/24
145.63.164.0/24
145.63.166.0/23
145.63.169.0-145.63.170.255
145.63.174.0/23
145.63.178.0/24
145.63.190.0/23
Signature Algorithm: sha256WithRSAEncryption
98:3d:d6:35:7c:a2:58:e3:de:65:ed:7f:52:1f:27:e4:69:57:
bd:10:b7:06:04:f9:87:88:e5:db:f3:85:c4:1e:89:c2:cb:6a:
5c:54:1b:82:ad:32:b8:f0:b5:62:0f:b1:3f:bc:56:09:c9:fc:
c9:ba:6b:ab:a0:5e:9d:fc:d4:4f:aa:33:3e:05:39:7d:b4:38:
b5:40:c7:3d:28:fc:5c:3c:bd:3e:f3:ac:b1:9b:7b:5b:88:ac:
90:9a:bd:04:18:3d:b8:24:d0:de:d7:2e:5d:f6:1f:17:ae:87:
a2:56:7d:f0:e7:15:e5:ae:cd:91:6f:5f:0a:cf:eb:bb:8d:29:
b7:d5:22:2e:7b:8c:b4:85:49:7a:62:ed:bf:a3:c8:00:6e:04:
3d:86:d7:a7:d9:5c:20:7e:48:78:d3:a1:62:3e:9f:78:3b:bc:
e5:62:ba:d9:67:e6:eb:a0:93:a0:d6:58:58:7e:84:5b:2e:88:
bf:6d:a7:48:c7:fc:3c:dd:88:cd:7b:10:3c:b6:94:d5:0a:de:
b6:f9:94:f6:06:16:ae:ee:f7:61:b1:71:cf:92:d8:c4:5e:a2:
e8:f5:20:4e:ea:5c:a1:59:e7:18:64:07:c2:d3:09:36:2a:61:
65:96:5f:4e:9f:c0:11:80:b6:c2:f6:9f:a0:e6:cb:7e:35:4e:
70:c3:2d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:52:32 2026 by rpki-client