Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/iHVc-I0D4U1Te_vkxACKnVHK0pY.roa
File: iHVc-I0D4U1Te_vkxACKnVHK0pY.roa (raw, json)
Hash identifier: cq22r4Ne1D5UlvzndIcqY6BmHjQFUZ46sNNxAKWhDNI=
Subject key identifier: 88:75:5C:F8:8D:03:E1:4D:53:7B:FB:E4:C4:00:8A:9D:51:CA:D2:96
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 019D53BFB45018B1D72EA8A6BAC8BB0CD512
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/iHVc-I0D4U1Te_vkxACKnVHK0pY.roa
Signing time: Fri 03 Apr 2026 14:29:25 +0000
ROA not before: Fri 03 Apr 2026 14:29:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56701
IP address blocks: 45.157.212.0/24 maxlen: 24
45.157.213.0/24 maxlen: 24
45.157.214.0/24 maxlen: 24
45.157.215.0/24 maxlen: 24
77.73.234.0/24 maxlen: 24
91.214.122.0/24 maxlen: 24
91.214.123.0/24 maxlen: 24
168.222.196.0/24 maxlen: 24
168.222.197.0/24 maxlen: 24
168.222.198.0/24 maxlen: 24
168.222.199.0/24 maxlen: 24
178.236.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:53:bf:b4:50:18:b1:d7:2e:a8:a6:ba:c8:bb:0c:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Apr 3 14:29:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88755cf88d03e14d537bfbe4c4008a9d51cad296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:56:b1:63:8e:64:26:48:b1:84:32:a5:de:
9c:57:ba:a4:2e:5a:16:09:58:4a:29:31:73:06:22:
4f:41:cd:1b:61:0a:7a:8c:7e:43:53:41:c3:ca:9e:
95:d1:5b:39:a5:32:b5:7e:73:d8:83:69:5b:b8:c8:
ed:dc:b4:d9:7a:05:12:c8:29:d6:1b:c6:2c:f8:c5:
a5:ce:8b:9c:f5:49:74:f0:23:74:bc:01:81:2e:61:
71:a6:69:4b:6f:1c:23:c9:0d:3e:49:79:88:bc:c5:
fc:d7:99:f8:9e:11:20:0a:39:aa:d4:7d:b4:c5:b7:
3e:a7:44:bc:f6:1e:97:1a:82:57:7b:a0:da:f2:fc:
7b:86:ad:a4:b4:dc:e2:11:e1:8c:a0:eb:be:a3:b8:
aa:75:3a:2a:7b:e1:52:6d:f6:b6:85:55:33:c7:17:
26:05:ab:c7:02:26:ba:38:c4:ff:56:f4:8d:53:e8:
42:aa:cc:5d:cb:3c:89:43:99:fc:6a:7d:ad:f9:a6:
5c:cd:5e:8a:c5:06:46:52:fb:0c:04:75:7e:3d:99:
d4:9e:40:3f:a6:34:99:bc:f8:1e:ad:62:0b:e0:18:
fc:ed:b4:e1:d9:c6:44:f3:11:07:f6:33:0f:22:c8:
0a:e9:c1:ac:8b:26:9c:47:45:5a:4c:71:0a:3c:81:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:75:5C:F8:8D:03:E1:4D:53:7B:FB:E4:C4:00:8A:9D:51:CA:D2:96
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/iHVc-I0D4U1Te_vkxACKnVHK0pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.212.0/22
77.73.234.0/24
91.214.122.0/23
168.222.196.0/22
178.236.29.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6e:04:67:85:37:dc:1e:b4:de:ed:15:96:cf:c0:5d:a8:34:
8e:55:05:31:99:e2:90:d3:84:78:ed:b9:a8:6c:c4:dd:c1:c6:
30:7e:14:a6:20:9d:a7:90:1d:b9:db:7e:2a:9e:87:1a:5f:e7:
39:d7:94:34:d5:f6:a5:c8:de:78:17:ea:85:d9:a0:f9:28:a7:
a3:f7:aa:61:03:46:af:2f:01:be:50:8d:28:25:98:92:10:52:
bd:a6:83:76:67:c9:55:a0:03:bc:69:e3:41:d5:96:4d:3f:00:
30:9d:e6:75:33:17:96:2e:28:ed:48:80:6f:26:e0:c6:db:c1:
8c:8e:41:3f:3a:c0:3f:c8:39:d3:6f:28:f1:b4:6b:21:5d:0b:
da:82:5e:3a:e7:d6:f4:7e:c8:64:19:f9:16:ad:52:c4:e5:a7:
ba:b9:bb:1d:c2:75:28:b3:ca:51:ec:ec:f5:84:99:53:71:b9:
25:5f:41:78:e0:f6:02:28:a2:bd:f5:d8:7f:90:24:69:f0:e5:
fa:58:ce:f0:f5:82:92:59:16:b5:12:c8:4f:17:e7:17:87:a9:
19:41:11:1d:2c:3f:2c:d6:c5:9a:6c:fe:af:4b:d9:07:47:7d:
1f:26:f1:0b:4e:d9:11:65:af:b0:7c:69:f3:38:eb:ba:97:94:
4b:ae:99:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:37:17 2026 by rpki-client