Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/08zSoPkcJqEWOL5zXjiB46ebFpg.roa
File: 08zSoPkcJqEWOL5zXjiB46ebFpg.roa (raw, json)
Hash identifier: Yr+C3a0EKhV9C0QbW7a0T8qi78LwrjBLVAnA5hEVqDw=
Subject key identifier: D3:CC:D2:A0:F9:1C:26:A1:16:38:BE:73:5E:38:81:E3:A7:9B:16:98
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 019D2C0D3B6362D3454945CC8A4BCDEE7DC8
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/08zSoPkcJqEWOL5zXjiB46ebFpg.roa
Signing time: Thu 26 Mar 2026 21:29:17 +0000
ROA not before: Thu 26 Mar 2026 21:29:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399114
IP address blocks: 94.154.8.0/24 maxlen: 24
135.136.128.0/19 maxlen: 32
135.136.143.0/24 maxlen: 32
135.136.144.0/24 maxlen: 32
178.211.157.0/24 maxlen: 24
185.234.115.0/24 maxlen: 24
207.189.0.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:0d:3b:63:62:d3:45:49:45:cc:8a:4b:cd:ee:7d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Mar 26 21:29:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3ccd2a0f91c26a11638be735e3881e3a79b1698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:93:7a:07:16:85:98:42:35:3b:97:c4:7e:
b3:ea:de:33:c4:0d:0f:d2:71:53:04:c8:c6:3a:cf:
a4:eb:d0:64:de:31:e0:24:33:63:25:49:ce:3f:fd:
69:53:f9:3d:69:3d:bd:a4:3c:61:79:0a:fb:7b:df:
71:34:3d:ee:97:e1:3f:49:65:83:fc:32:c8:d6:bd:
c1:f7:e5:38:04:8c:fe:60:89:a0:2e:11:21:ce:b8:
97:b1:5f:84:2e:01:96:77:f4:f5:24:b8:36:93:67:
ef:8f:06:15:73:8f:aa:5f:4e:1a:5b:e5:c5:23:f3:
36:80:2f:bc:b4:d9:45:8c:1c:92:dd:cf:85:84:49:
a2:7a:27:c2:32:e5:64:15:c3:8d:7c:35:94:bb:6e:
1e:9e:65:3d:c1:d0:a6:c3:22:d3:e8:7b:4d:2c:7c:
e8:7c:3b:d8:cf:27:6f:ac:dc:0d:eb:a8:79:8b:83:
e3:04:0d:05:8c:40:97:58:d0:07:60:93:c5:24:8f:
2e:26:62:94:9e:3f:4c:19:08:74:b8:4a:5a:4e:e9:
12:2a:71:b6:53:23:09:a7:8d:c0:92:a0:e0:04:58:
18:89:77:69:77:05:a2:c1:39:38:90:94:65:ad:03:
7c:88:e2:5d:c5:20:0b:58:cc:81:1c:d4:0c:59:ed:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:D2:A0:F9:1C:26:A1:16:38:BE:73:5E:38:81:E3:A7:9B:16:98
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/08zSoPkcJqEWOL5zXjiB46ebFpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.8.0/24
135.136.128.0/19
178.211.157.0/24
185.234.115.0/24
207.189.0.0/19
Signature Algorithm: sha256WithRSAEncryption
64:4a:ae:fb:c0:4c:8c:02:3f:09:54:79:19:50:8a:ee:c5:33:
1f:0b:18:b8:86:0b:e4:66:2a:f4:d3:78:91:1d:fb:32:79:54:
11:ec:e1:23:f2:86:99:e1:59:d0:ee:e5:e2:ff:76:37:4e:cf:
df:8a:d0:a4:c4:d4:89:fc:29:70:69:c8:d3:8b:bd:78:56:ed:
47:67:79:17:35:c3:bd:ed:1f:d4:08:2e:18:71:56:8e:39:03:
0c:04:cf:e5:3d:8e:f2:0f:f1:2c:c4:c7:47:9b:c0:aa:28:52:
41:32:17:73:7c:ca:62:6b:a1:d6:80:e0:be:c8:68:97:e2:39:
09:88:e9:08:01:c9:39:2f:1a:22:0d:51:b0:c6:c0:51:93:b1:
58:eb:17:c9:36:63:b0:34:e9:11:29:09:c3:95:ad:6a:a6:5c:
e6:47:d3:ce:e0:83:ca:44:81:76:d9:94:9d:85:6a:85:e6:23:
c8:2c:79:6a:8c:67:cf:f8:8a:a6:d6:2f:52:eb:a1:e7:c0:5e:
9a:94:0f:b1:1b:a2:bd:77:9d:de:ce:c2:27:d6:79:e8:7a:18:
0f:d0:56:7b:a8:cf:3a:6f:bd:9d:29:e6:71:88:f0:b5:32:a9:
36:3a:1b:9e:82:1b:5c:5e:8b:d9:ee:4c:d8:56:af:af:b5:33:
02:54:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:23 2026 by rpki-client