Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/vR8-TTbXfVDHZdgSnOr8TDlwnBk.roa
File: vR8-TTbXfVDHZdgSnOr8TDlwnBk.roa (raw, json)
Hash identifier: jMzlWmBuharjGRH2L1aGRJN/4ce3UkOwdCSnIziX6x8=
Subject key identifier: BD:1F:3E:4D:36:D7:7D:50:C7:65:D8:12:9C:EA:FC:4C:39:70:9C:19
Certificate issuer: /CN=e1c85b3df191bbb4874f212563f536f823ea4332
Certificate serial: 019D66C2A6F14BCCFE46C7EBDBC17F2F27AC
Authority key identifier: E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/vR8-TTbXfVDHZdgSnOr8TDlwnBk.roa
Signing time: Tue 07 Apr 2026 07:05:25 +0000
ROA not before: Tue 07 Apr 2026 07:05:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208357
IP address blocks: 89.186.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:c2:a6:f1:4b:cc:fe:46:c7:eb:db:c1:7f:2f:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c85b3df191bbb4874f212563f536f823ea4332
Validity
Not Before: Apr 7 07:05:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd1f3e4d36d77d50c765d8129ceafc4c39709c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:6e:e2:43:3a:c7:2d:aa:2a:64:20:76:0c:
fd:89:30:0e:de:dd:c8:bb:31:e2:4e:0b:94:3e:12:
03:1b:04:cd:cf:35:96:26:29:87:cb:bf:1a:ec:82:
46:dc:10:2f:d9:16:ea:20:6b:e8:cd:98:b6:16:b4:
c7:6e:91:f0:0d:bf:91:8b:25:28:11:ff:49:76:c5:
f2:48:54:1e:a0:83:74:9d:d2:c4:c1:b4:e7:88:3f:
e0:56:63:e0:d5:99:d9:af:ea:da:ca:63:80:43:b3:
16:f7:63:4a:5c:b8:04:39:ed:d4:6c:65:c4:75:2f:
d0:90:1a:01:c5:b4:fc:b9:12:b6:24:6b:4c:9a:c9:
a8:5b:e0:1a:b9:5f:b0:5a:3a:c2:0d:67:ff:01:71:
f2:76:ba:57:09:6f:c2:03:74:bb:a8:af:09:b5:a2:
02:c5:f2:90:4b:66:0d:22:a6:eb:7c:18:cc:a3:6d:
f4:53:9f:17:3b:c7:bc:c4:81:f3:48:fd:26:e8:d1:
30:d4:b1:05:67:83:32:b7:0c:ee:06:a7:c0:ef:44:
fd:e0:93:d7:62:8e:7a:f8:bb:e8:88:6d:cd:fd:50:
79:e3:a8:61:ed:4c:0e:8a:5b:07:82:47:b7:f8:6a:
f9:7a:ab:8f:3e:a6:a8:a8:33:67:c4:c4:2b:be:8d:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:3E:4D:36:D7:7D:50:C7:65:D8:12:9C:EA:FC:4C:39:70:9C:19
X509v3 Authority Key Identifier:
keyid:E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/vR8-TTbXfVDHZdgSnOr8TDlwnBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.186.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:3a:d1:66:2f:67:9d:59:d0:52:56:ca:14:dc:10:0b:56:ea:
14:e5:22:f3:47:7b:0e:7a:15:24:24:da:5f:85:e8:54:06:82:
5d:87:52:93:79:db:8e:a3:75:85:03:ad:a2:b9:2d:a7:1e:58:
7c:0f:cd:a3:1e:14:5c:1d:62:b2:00:87:7b:0b:c7:6d:a8:27:
89:5c:a9:ae:fc:13:cb:dd:97:8b:59:b4:d4:2b:3a:04:e2:4f:
0a:5f:52:cb:4b:80:83:1c:9b:c3:44:83:40:fb:df:da:a3:42:
4d:1c:f9:37:00:f3:0d:6a:ef:a2:f7:81:28:d1:dc:59:aa:d7:
e7:50:e4:66:a9:8a:a8:83:24:8d:1b:a5:4d:41:51:47:5f:73:
9b:b0:86:fc:f7:39:c6:35:97:92:67:02:5e:56:d5:ed:c6:8d:
04:25:e4:5b:86:a1:54:90:8d:0f:48:95:41:b9:d1:12:94:fd:
b2:5e:93:94:e0:01:d5:8f:07:44:98:67:4d:f7:16:64:25:5e:
10:e3:65:c2:2b:08:92:49:07:7a:b2:b9:89:8d:22:b8:56:51:
4c:00:9a:ee:c6:61:c0:f0:31:e1:c8:e3:45:6b:a5:79:18:d0:
59:d0:22:01:5a:a1:86:58:30:57:2a:f3:78:3f:d6:de:20:31:
e4:5f:fd:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1mwqbxS8z+Rsfr28F/LyesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYzg1YjNkZjE5MWJiYjQ4NzRmMjEyNTYzZjUzNmY4MjNl
YTQzMzIwHhcNMjYwNDA3MDcwNTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDFmM2U0ZDM2ZDc3ZDUwYzc2NWQ4MTI5Y2VhZmM0YzM5NzA5YzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0INu4kM6xy2qKmQgdgz9iTAO3t3I
uzHiTguUPhIDGwTNzzWWJimHy78a7IJG3BAv2RbqIGvozZi2FrTHbpHwDb+RiyUo
Ef9JdsXySFQeoIN0ndLEwbTniD/gVmPg1ZnZr+raymOAQ7MW92NKXLgEOe3UbGXE
dS/QkBoBxbT8uRK2JGtMmsmoW+AauV+wWjrCDWf/AXHydrpXCW/CA3S7qK8JtaIC
xfKQS2YNIqbrfBjMo230U58XO8e8xIHzSP0m6NEw1LEFZ4MytwzuBqfA70T94JPX
Yo56+LvoiG3N/VB546hh7UwOilsHgke3+Gr5equPPqaoqDNnxMQrvo0qgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL0fPk02131Qx2XYEpzq/Ew5cJwZMB8GA1UdIwQY
MBaAFOHIWz3xkbu0h08hJWP1Nvgj6kMyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGNoYlBmR1J1N1NIVHlFbFlfVTItQ1BxUXpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mYThjNTktZGFmNi00ZTZhLWIzNjYt
ZTU0NmMyYTFkMjI5LzEvdlI4LVRUYlhmVkRIWmRnU25PcjhURGx3bkJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9mYThjNTktZGFmNi00ZTZhLWIzNjYtZTU0NmMyYTFkMjI5
LzEvNGNoYlBmR1J1N1NIVHlFbFlfVTItQ1BxUXpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWbqwMA0G
CSqGSIb3DQEBCwUAA4IBAQA/OtFmL2edWdBSVsoU3BALVuoU5SLzR3sOehUkJNpf
hehUBoJdh1KTeduOo3WFA62iuS2nHlh8D82jHhRcHWKyAId7C8dtqCeJXKmu/BPL
3ZeLWbTUKzoE4k8KX1LLS4CDHJvDRINA+9/ao0JNHPk3APMNau+i94Eo0dxZqtfn
UORmqYqogySNG6VNQVFHX3ObsIb89znGNZeSZwJeVtXtxo0EJeRbhqFUkI0PSJVB
udESlP2yXpOU4AHVjwdEmGdN9xZkJV4Q42XCKwiSSQd6srmJjSK4VlFMAJruxmHA
8DHhyONFa6V5GNBZ0CIBWqGGWDBXKvN4P9beIDHkX/3F
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:30:43 2026 by rpki-client