Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/8LnVsjH2EwUmwFrvwngeTt29sfc.roa
File: 8LnVsjH2EwUmwFrvwngeTt29sfc.roa (raw, json)
Hash identifier: zoMdGFAt0JgG0lcHzQngcTPabdRrKnSlHq63qMuC6dU=
Subject key identifier: F0:B9:D5:B2:31:F6:13:05:26:C0:5A:EF:C2:78:1E:4E:DD:BD:B1:F7
Certificate issuer: /CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Certificate serial: 019B7D5BB40DC398126BC62B6AEC505ADAC4
Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/8LnVsjH2EwUmwFrvwngeTt29sfc.roa
Signing time: Fri 02 Jan 2026 06:18:40 +0000
ROA not before: Fri 02 Jan 2026 06:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42100
IP address blocks: 91.212.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:b4:0d:c3:98:12:6b:c6:2b:6a:ec:50:5a:da:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Validity
Not Before: Jan 2 06:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0b9d5b231f6130526c05aefc2781e4eddbdb1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:e7:b5:85:8d:1f:46:64:b0:84:b3:93:32:
c4:36:e1:49:b1:55:3c:2f:da:f5:58:e7:40:e9:52:
b6:ad:5b:bb:0a:e1:07:2d:54:8e:13:71:43:1c:3e:
4a:c4:ec:b8:e9:61:c4:42:90:2a:cf:14:77:04:a0:
fa:7c:94:0f:94:3f:b7:0b:a0:bf:04:ad:88:df:32:
1a:07:72:29:2d:6d:b8:3a:7f:7c:12:cf:98:94:72:
75:ed:7a:0c:2f:9f:11:9d:80:40:37:23:51:20:1c:
09:ae:b3:16:4b:cd:e1:b2:30:10:f9:a1:11:a9:ea:
e4:10:31:fd:19:22:eb:fe:86:b4:61:4b:36:ad:30:
9b:de:c3:b2:b3:5a:74:86:4b:1b:53:9c:b5:06:0d:
95:b3:55:ba:16:c9:e8:47:90:63:68:ad:bb:f6:31:
ab:09:f0:1f:4a:21:fa:42:32:f3:38:51:36:d4:3d:
fc:b3:d5:ed:3c:3c:25:0a:70:d2:94:6f:a9:49:d1:
19:57:9d:c7:91:ac:1c:12:ab:e2:e0:88:1f:d6:ce:
6a:a7:78:4f:f8:c5:53:3a:ba:c6:e7:a9:d6:cf:55:
d6:42:46:c7:ff:20:a7:8d:76:f0:c3:c3:1c:0a:1e:
28:75:08:85:4b:e5:0c:54:d0:e6:02:b3:e6:27:d7:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B9:D5:B2:31:F6:13:05:26:C0:5A:EF:C2:78:1E:4E:DD:BD:B1:F7
X509v3 Authority Key Identifier:
keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/8LnVsjH2EwUmwFrvwngeTt29sfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.13.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8b:9f:ca:58:18:99:5b:c5:63:6b:d7:ef:82:00:a6:bd:15:
c2:58:23:f0:00:16:e8:e1:dc:83:5e:90:38:0b:87:33:72:96:
a2:d5:39:fa:05:3a:30:7c:b3:32:1c:d3:dd:66:dd:bb:ed:57:
1d:af:af:66:41:4a:d3:f6:d6:bb:f7:61:42:7f:05:62:e3:2a:
36:b9:2d:48:2c:bc:a7:32:1d:86:80:58:59:dc:f2:27:04:6a:
b8:bb:8f:f2:80:d5:cc:84:99:a5:6b:df:66:c5:41:08:85:6f:
4c:42:cd:c9:e9:94:b5:1e:59:bd:9e:08:61:b0:75:f7:7d:b3:
d8:ca:7a:50:4d:f4:c6:e0:d2:7a:1f:a7:b5:44:c9:ae:be:19:
da:05:69:dd:f0:8d:71:99:a5:a5:ef:a2:5d:bf:ec:41:73:d9:
ff:47:74:28:ef:45:3d:57:3e:65:2a:ef:c0:e0:f2:3b:ab:f7:
b0:47:4f:1d:93:41:6a:1e:ab:fd:64:14:2e:e4:03:38:42:4c:
45:5c:c7:ec:72:88:f1:e4:2d:8e:c2:fa:e8:23:24:65:97:bd:
3a:b5:a9:57:a1:00:39:4b:bf:de:4b:0b:9c:34:66:2f:ab:92:
c1:32:c9:7e:a7:76:09:b3:4a:06:16:c6:d3:ed:61:74:1d:69:
33:bb:32:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:28:44 2026 by rpki-client