Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8Zlic_UBiYs-JJIimPLUf5vn4k4.roa
File: 8Zlic_UBiYs-JJIimPLUf5vn4k4.roa (raw, json)
Hash identifier: txs+8l8mjpojD2fCRHYHiD6nSedFASErFeTFcqzglEQ=
Subject key identifier: F1:99:62:73:F5:01:89:8B:3E:24:92:22:98:F2:D4:7F:9B:E7:E2:4E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C8F4597DB26CACF5CFD1118769E8FFA4A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8Zlic_UBiYs-JJIimPLUf5vn4k4.roa
Signing time: Tue 24 Feb 2026 10:50:28 +0000
ROA not before: Tue 24 Feb 2026 10:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135402
IP address blocks: 213.130.151.0/24 maxlen: 24
213.218.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:45:97:db:26:ca:cf:5c:fd:11:18:76:9e:8f:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 24 10:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1996273f501898b3e24922298f2d47f9be7e24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:92:7a:6f:10:4a:18:d6:09:df:c0:5d:86:
52:f4:a8:7e:25:15:94:a3:e4:02:0a:29:9c:9a:50:
a8:bb:e6:c6:c4:48:d0:03:5d:ed:dd:43:b8:2a:12:
f8:56:9f:d2:ad:50:ee:5e:30:8a:17:a9:03:07:52:
1b:59:20:e0:ba:a1:ce:67:97:a4:94:e5:0a:25:fa:
10:82:5a:02:c5:fd:02:af:03:4c:c6:bb:83:f8:3a:
6e:55:f1:73:02:ff:1a:31:c2:51:f9:d8:c7:53:e1:
07:8c:2e:b9:c1:76:2e:b6:d9:96:3b:5a:87:1f:dc:
62:3b:2d:0f:5e:a7:15:b8:b2:18:1f:fd:f9:cf:0c:
d7:b5:fa:f7:a3:4c:0d:cb:bb:35:5a:90:a1:a9:e9:
d0:ba:b9:fb:5f:29:69:7f:b3:eb:12:d4:01:2f:5f:
39:67:67:e0:8f:5d:ad:91:bc:22:74:4b:9d:ae:b2:
d8:cc:9d:ab:74:23:64:0f:e0:54:24:73:b4:05:25:
f3:98:e4:26:cb:20:d0:b3:d9:0d:89:77:bf:c4:87:
46:cf:a1:19:d3:c3:77:29:bc:83:6a:eb:e3:b1:4d:
b8:3f:f7:f0:02:fa:6e:d5:5c:74:91:c8:95:d8:18:
b4:c5:ba:0e:59:b8:7e:a3:57:8a:ce:ca:c8:87:5a:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:62:73:F5:01:89:8B:3E:24:92:22:98:F2:D4:7F:9B:E7:E2:4E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8Zlic_UBiYs-JJIimPLUf5vn4k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.151.0/24
213.218.236.0/24
Signature Algorithm: sha256WithRSAEncryption
57:10:0f:66:e6:80:9b:bd:18:e4:33:11:5a:38:b1:27:1c:3c:
3d:14:2a:4f:96:15:9e:ad:bd:fb:8e:f1:85:4a:94:ed:ee:e3:
43:99:c6:b6:b6:f6:9f:9e:e3:fb:5b:5a:b8:d0:a9:1a:4e:b4:
26:db:f5:49:93:1f:ac:c5:ed:93:f9:44:e1:70:77:d1:26:2d:
23:04:44:8b:9d:9e:74:80:d3:86:99:3b:08:3c:59:28:bd:cd:
a0:51:a3:5e:a5:9f:e0:41:4e:ca:5a:b1:6d:e8:8b:5a:f9:32:
41:78:65:f2:22:90:99:ef:eb:f8:34:8e:1e:f4:23:eb:66:26:
62:58:31:19:19:77:14:5c:f5:b3:19:35:2b:62:f4:8f:8e:e9:
d0:71:ed:5c:b7:a2:c5:e1:64:58:08:e3:64:80:37:a2:b6:58:
c7:c1:95:42:3e:29:6d:34:99:7f:ac:5d:63:ac:8c:fc:c9:e2:
50:eb:f0:36:a4:bb:e3:09:c8:63:75:d3:ee:26:ed:9a:6f:b2:
9c:10:50:4e:d3:40:5b:3e:2b:5e:0e:82:eb:6c:2b:c4:b4:c0:
be:2d:ab:7c:b6:80:c2:07:61:0f:f4:de:a1:4e:2d:59:d0:0d:
e6:1c:86:18:ba:a3:08:78:98:d3:c4:aa:c5:20:bb:66:dd:38:
f9:5f:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:16 2026 by rpki-client