Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/8fGG8Tv4WNAQ4RCHYBbNJs1eKto.roa
File: 8fGG8Tv4WNAQ4RCHYBbNJs1eKto.roa (raw, json)
Hash identifier: SgO/P537q3vAhj6DO7s9EJP2JmPeHZPclIyQgjWdkQo=
Subject key identifier: F1:F1:86:F1:3B:F8:58:D0:10:E1:10:87:60:16:CD:26:CD:5E:2A:DA
Certificate issuer: /CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Certificate serial: 01A009E8B794746141B42702654C240923E7
Authority key identifier: 41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/8fGG8Tv4WNAQ4RCHYBbNJs1eKto.roa
Signing time: Sun 16 Aug 2026 09:30:41 +0000
ROA not before: Sun 16 Aug 2026 09:30:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208636
IP address blocks: 185.253.89.0/24 maxlen: 24
185.253.90.0/24 maxlen: 24
185.253.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:09:e8:b7:94:74:61:41:b4:27:02:65:4c:24:09:23:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Validity
Not Before: Aug 16 09:30:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1f186f13bf858d010e110876016cd26cd5e2ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:0f:39:fb:83:1f:b7:db:3e:c2:cf:03:48:
2f:aa:bc:23:59:dc:2e:ce:0e:c5:4a:bf:6a:c1:e7:
d1:c1:8e:d9:e7:da:4b:11:6a:26:38:fe:6c:1c:45:
b4:db:e7:58:52:5e:1c:72:aa:96:eb:6b:f7:51:35:
a5:03:13:f0:7a:b7:28:ec:4e:33:9b:07:86:ed:c3:
e3:37:5b:d6:00:f8:c1:ee:b2:b8:d5:10:3f:ee:6e:
97:13:08:c0:5a:95:a4:98:20:cc:11:e7:16:35:52:
08:d4:ec:fd:6c:a2:19:b0:9a:42:67:74:96:34:16:
a4:3b:c0:b5:6b:7d:72:bb:2b:90:b1:00:e3:5c:f0:
86:b7:7a:f1:b3:69:0f:ec:b0:74:65:b4:5e:49:38:
46:22:55:b6:03:aa:01:d4:b4:45:79:64:c4:6d:7a:
07:52:21:5f:08:7e:68:17:d4:0c:b2:09:3d:c6:f2:
48:78:2d:27:af:26:79:73:e2:c7:b4:10:0c:07:95:
82:8f:07:85:e7:b7:d2:f8:9a:14:2b:a7:0b:c6:7c:
69:67:f7:e5:7e:ff:c6:94:c1:93:de:e5:88:91:06:
d5:8b:9f:6d:20:e9:06:e8:c0:84:03:93:c9:8c:60:
06:ea:00:bf:07:bf:95:09:39:b9:07:c8:15:64:2c:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F1:86:F1:3B:F8:58:D0:10:E1:10:87:60:16:CD:26:CD:5E:2A:DA
X509v3 Authority Key Identifier:
keyid:41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/8fGG8Tv4WNAQ4RCHYBbNJs1eKto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.89.0-185.253.91.255
Signature Algorithm: sha256WithRSAEncryption
33:b6:61:42:5d:df:fe:38:af:67:f2:d7:50:67:73:bb:18:e4:
74:61:6a:b0:16:34:eb:6c:25:2b:3c:08:bf:02:72:e9:f5:46:
50:35:f9:97:20:49:b8:4f:3a:97:85:3e:4d:82:14:36:d2:c4:
b0:df:b7:ec:86:e7:63:cf:4d:c8:69:5e:e9:87:f2:08:35:99:
b8:2e:47:f1:c6:03:9f:6d:a8:2d:27:45:ad:97:0c:b3:91:a5:
0c:8b:73:4d:18:e4:c0:1a:11:bb:f3:f6:f0:ed:b8:09:59:76:
7d:e9:22:81:07:c8:51:f2:64:55:24:3e:80:ee:63:56:54:48:
03:7e:24:91:4c:d5:7d:ef:5f:2c:c4:6b:30:33:dd:2a:f4:3f:
9a:da:f4:e0:82:16:b9:41:df:e5:bc:23:79:28:44:a9:18:49:
ea:6e:56:a6:30:d8:95:8e:29:e8:30:2b:93:13:86:fc:4a:06:
a3:9f:cf:80:93:1c:d1:1b:86:07:ae:de:09:e0:d6:6c:3f:4c:
a4:f4:97:04:87:14:7c:2f:51:9b:e1:b4:b1:32:b2:77:74:a5:
29:a1:5e:47:0d:0b:d8:e1:5d:21:4e:49:bc:18:f2:75:59:0c:
4c:fe:19:bc:01:a0:bc:0e:e7:ff:6a:cb:e1:18:07:c0:01:e8:
00:3c:09:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:47:09 2026 by rpki-client