Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/8GQama4kGymnU_xje0Yvb2zQH-o.roa
File: 8GQama4kGymnU_xje0Yvb2zQH-o.roa (raw, json)
Hash identifier: NKYIKebNipUgc9YPaLXeciFwdApi4ubVtrOcZFCvldo=
Subject key identifier: F0:64:1A:99:AE:24:1B:29:A7:53:FC:63:7B:46:2F:6F:6C:D0:1F:EA
Certificate issuer: /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial: 019EBBA67F94BE2237823EDCBC04260A4E7D
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/8GQama4kGymnU_xje0Yvb2zQH-o.roa
Signing time: Fri 12 Jun 2026 11:45:11 +0000
ROA not before: Fri 12 Jun 2026 11:45:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35793
IP address blocks: 45.11.128.0/23 maxlen: 24
45.11.129.0/24 maxlen: 24
45.11.130.0/23 maxlen: 24
45.11.130.0/24 maxlen: 24
45.11.131.0/24 maxlen: 24
45.95.100.0/24 maxlen: 24
45.95.101.0/24 maxlen: 24
45.95.102.0/24 maxlen: 24
45.95.103.0/24 maxlen: 24
91.221.209.0/24 maxlen: 24
185.151.160.0/24 maxlen: 24
185.151.161.0/24 maxlen: 24
185.151.162.0/24 maxlen: 24
185.151.163.0/24 maxlen: 24
185.174.140.0/24 maxlen: 24
185.174.141.0/24 maxlen: 24
185.174.142.0/24 maxlen: 24
185.174.143.0/24 maxlen: 24
2a07:7940:12::/48 maxlen: 48
2a07:7940:14::/48 maxlen: 48
2a07:7940:16::/48 maxlen: 48
2a07:7940:18::/48 maxlen: 48
2a07:7940:41::/48 maxlen: 48
2a07:7940:45::/48 maxlen: 48
2a07:7940:46::/48 maxlen: 48
2a07:7940:47::/48 maxlen: 48
2a07:7940:48::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:a6:7f:94:be:22:37:82:3e:dc:bc:04:26:0a:4e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Validity
Not Before: Jun 12 11:45:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0641a99ae241b29a753fc637b462f6f6cd01fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:73:17:30:64:3c:7f:4d:ab:ef:98:70:d8:
ef:87:e0:eb:d8:b6:84:93:8f:c5:e8:f9:0f:97:50:
54:4a:b0:db:d2:f4:0d:35:b2:ff:d8:88:be:ee:22:
f4:73:91:13:d8:f5:b1:46:88:bb:71:16:42:b7:92:
e0:a0:a2:40:2b:94:ac:3e:f2:f6:7b:99:8b:d3:9a:
85:eb:44:e6:df:4e:6f:cc:08:a5:6f:4a:55:4d:04:
a8:db:dd:55:61:d7:7b:49:64:5c:0a:97:77:ef:c7:
7a:38:5c:4c:15:2e:ef:46:64:30:0a:b5:38:15:f1:
4b:84:37:5a:69:4d:5b:be:98:5c:1f:8e:a5:82:75:
51:f8:26:e8:f1:c7:b3:53:f3:22:a4:f6:11:10:26:
0a:72:45:3d:07:43:73:ba:39:5f:d3:5f:21:a1:8a:
ee:5b:9a:0b:2a:2d:47:4e:dc:f1:4a:6b:f3:c8:bd:
1d:a8:b0:65:1d:76:97:0a:b6:2c:0a:cd:8e:4f:82:
c8:a0:29:b2:98:9f:f4:74:63:67:dc:91:01:05:6b:
c4:0e:a4:8b:27:c1:b1:21:81:27:23:26:ce:ba:84:
c5:c9:ee:a0:4d:99:2c:00:8e:39:d0:96:27:2c:11:
34:de:3c:c9:e5:cf:b2:2b:8b:28:25:bf:7c:b9:c7:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:64:1A:99:AE:24:1B:29:A7:53:FC:63:7B:46:2F:6F:6C:D0:1F:EA
X509v3 Authority Key Identifier:
keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/8GQama4kGymnU_xje0Yvb2zQH-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.128.0/22
45.95.100.0/22
91.221.209.0/24
185.151.160.0/22
185.174.140.0/22
IPv6:
2a07:7940:12::/48
2a07:7940:14::/48
2a07:7940:16::/48
2a07:7940:18::/48
2a07:7940:41::/48
2a07:7940:45::-2a07:7940:48:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c6:67:f3:39:fb:38:10:c0:b8:76:7c:7c:df:e2:ea:e0:e3:76:
61:6b:ce:3f:70:75:eb:f3:c9:9d:7e:fd:b7:0d:0b:cc:3d:e5:
df:10:95:bc:8a:bb:56:57:a8:75:89:a0:07:48:4a:2d:74:ea:
a5:26:93:4c:62:bc:4b:5c:0a:c5:73:d9:61:67:c4:61:04:59:
f3:05:58:b4:13:10:63:6f:29:94:4a:36:73:96:c2:7a:99:8a:
b2:be:db:06:0e:35:01:04:32:26:fd:89:05:d3:a0:e4:24:11:
c7:dd:43:f3:b4:c3:35:d9:57:de:d6:8c:05:dd:1f:28:78:a4:
03:41:4e:02:6d:a6:98:3d:48:b4:bf:13:15:e1:c4:88:78:e7:
0c:35:72:9d:49:d5:3a:3c:b0:8a:c4:dc:22:8a:f1:e2:4e:6e:
60:a8:c9:04:1b:18:9d:94:d3:24:45:09:71:f4:be:b4:06:ca:
78:3c:32:86:eb:ab:dc:19:4f:c9:84:3b:5d:8d:92:51:63:03:
42:db:02:a6:0f:f5:d8:a6:53:1e:d4:5a:96:a7:49:34:04:76:
d1:08:93:cf:bd:01:73:78:ac:e4:1f:bd:0f:f0:79:a8:86:01:
01:e9:ae:11:18:41:bc:5a:65:9d:bc:f2:c5:c8:26:8b:2a:dc:
99:16:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:39 2026 by rpki-client