Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/giX8_ecdQPItnFz-fq6feS4Jd-g.roa
File: giX8_ecdQPItnFz-fq6feS4Jd-g.roa (raw, json)
Hash identifier: 1ce47GoQT/QAgOwYZvUfKbOA8OpsLu0765OeChH/WJM=
Subject key identifier: 82:25:FC:FD:E7:1D:40:F2:2D:9C:5C:FE:7E:AE:9F:79:2E:09:77:E8
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 01A0143BA273B11770ADBC12DA038B54B157
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/giX8_ecdQPItnFz-fq6feS4Jd-g.roa
Signing time: Tue 18 Aug 2026 09:37:27 +0000
ROA not before: Tue 18 Aug 2026 09:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207790
IP address blocks: 89.56.0.0/16 maxlen: 16
89.57.0.0/18 maxlen: 18
89.57.64.0/18 maxlen: 18
89.57.128.0/18 maxlen: 18
89.57.192.0/18 maxlen: 18
185.12.88.0/22 maxlen: 22
194.97.96.0/19 maxlen: 19
2a03:7840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:3b:a2:73:b1:17:70:ad:bc:12:da:03:8b:54:b1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Aug 18 09:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8225fcfde71d40f22d9c5cfe7eae9f792e0977e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:af:35:63:ae:c3:5a:43:f2:19:41:a8:76:
35:80:7a:0e:5f:cd:7b:60:4b:30:7c:16:ae:c1:f6:
88:a0:3b:26:96:e0:f6:0c:d0:08:f9:f3:a3:2f:79:
60:88:e7:f0:0b:33:26:0e:13:70:68:60:a3:1f:b4:
1b:e2:ad:bd:ff:18:32:39:a8:c9:93:6a:8f:40:3e:
92:ed:5b:5e:bb:70:30:54:ae:35:1d:e1:ba:d9:8c:
10:c5:d4:83:ae:21:c4:21:50:9f:5e:58:3c:3d:c8:
7d:92:cb:42:45:0e:34:e1:e3:f5:a7:62:5a:53:b6:
ca:bb:86:91:08:08:7d:5d:f7:97:93:d8:77:a6:76:
d6:f9:35:de:9b:9f:fd:78:13:9e:3d:32:77:15:22:
7c:8b:67:cd:75:d7:61:97:b7:b4:c8:02:62:79:0f:
7e:d8:b4:7e:00:31:22:00:8e:16:72:45:7a:d8:a0:
2e:35:ac:eb:a8:94:e2:80:41:e8:d5:68:26:74:a0:
57:b0:bb:d9:1d:3c:d6:3d:aa:1d:03:9a:43:51:d7:
db:d4:fa:5c:7e:c5:b1:1c:0a:4d:f4:84:87:ec:44:
b0:d6:3c:48:d9:53:c2:98:a8:53:11:57:db:60:1a:
3a:8f:b9:4a:d1:70:00:f8:1b:49:27:18:40:7b:14:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:FC:FD:E7:1D:40:F2:2D:9C:5C:FE:7E:AE:9F:79:2E:09:77:E8
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/giX8_ecdQPItnFz-fq6feS4Jd-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.56.0.0/15
185.12.88.0/22
194.97.96.0/19
IPv6:
2a03:7840::/29
Signature Algorithm: sha256WithRSAEncryption
aa:99:19:f5:ed:44:07:83:a0:52:e6:8d:a0:6d:d6:57:17:b7:
e7:ee:e3:64:54:5a:61:64:fe:79:0b:0c:93:b7:ba:aa:bd:1d:
59:f6:23:a0:ea:cc:06:e2:a8:a4:92:20:60:63:5f:11:17:82:
0a:98:f7:5b:e9:41:04:42:a4:f9:b7:9e:98:cc:ef:a3:d5:c6:
31:28:6e:45:12:28:17:04:de:6e:1d:c6:20:78:af:be:b3:f3:
97:4b:4d:e2:c5:e7:f7:4d:36:d8:c0:a5:89:70:78:2a:71:11:
d4:1a:ec:c3:a3:1a:4a:52:e8:1f:08:04:02:e6:60:f9:2a:2a:
ae:7e:c0:99:c1:84:2d:72:88:84:a0:03:10:b7:a5:fc:e8:d8:
58:b7:de:a2:b4:58:9d:3d:ac:d1:b9:47:39:98:fb:66:b5:bc:
e1:f5:84:60:af:6d:e3:16:da:4e:eb:ba:af:27:51:cd:a8:8f:
67:a1:9d:26:70:de:2f:cf:d2:c9:12:39:cf:a7:d2:29:7d:bb:
4c:d3:86:03:a6:8c:69:fe:e9:90:ce:7d:69:c5:f8:a8:36:93:
8d:08:98:d7:8c:13:e1:49:8d:81:09:31:3a:5c:f1:98:01:59:
1b:de:f0:3e:23:15:c8:13:f1:80:15:aa:c1:d4:65:ec:f8:d5:
f5:cf:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:09 2026 by rpki-client