Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/8fe7vh9jlC7sRb2AcledmmwLoTI.roa
File: 8fe7vh9jlC7sRb2AcledmmwLoTI.roa (raw, json)
Hash identifier: XpslvQuy8ogh+8d35d9QaAhjHcrSzIzGG1EtFja7tAo=
Subject key identifier: F1:F7:BB:BE:1F:63:94:2E:EC:45:BD:80:72:57:9D:9A:6C:0B:A1:32
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 019D87485F6706938DEFA3195B85B217B949
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/8fe7vh9jlC7sRb2AcledmmwLoTI.roa
Signing time: Mon 13 Apr 2026 14:39:20 +0000
ROA not before: Mon 13 Apr 2026 14:39:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20880
IP address blocks: 62.117.0.0/19 maxlen: 20
62.117.0.0/20 maxlen: 24
62.117.0.128/26 maxlen: 26
62.117.0.192/28 maxlen: 28
62.117.16.0/20 maxlen: 20
86.56.0.0/17 maxlen: 17
86.56.0.0/18 maxlen: 18
86.56.64.0/18 maxlen: 18
89.16.128.0/19 maxlen: 19
89.16.128.0/20 maxlen: 20
89.16.144.0/20 maxlen: 20
158.181.64.0/19 maxlen: 19
158.181.64.0/20 maxlen: 20
158.181.68.0/22 maxlen: 22
158.181.72.0/22 maxlen: 22
158.181.76.0/22 maxlen: 22
158.181.80.0/20 maxlen: 20
158.181.80.0/22 maxlen: 22
185.9.224.0/22 maxlen: 22
2a02:2450::/29 maxlen: 29
2a02:2450::/32 maxlen: 32
2a02:2454::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:48:5f:67:06:93:8d:ef:a3:19:5b:85:b2:17:b9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Apr 13 14:39:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1f7bbbe1f63942eec45bd8072579d9a6c0ba132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:ba:11:15:48:eb:0c:79:72:58:04:63:74:
f4:5b:f9:48:0a:82:12:e3:f0:00:70:60:6a:ab:86:
70:bf:aa:84:f4:bf:78:ab:ed:58:b9:1b:a0:1e:48:
f0:8e:40:44:76:0a:7e:fd:b9:1d:5c:3f:21:f9:3f:
93:e1:f5:16:0e:ab:3d:b6:fb:41:27:8a:2e:f3:3d:
56:da:4f:78:8e:c2:2f:26:c0:95:ae:88:d6:7b:bf:
69:7c:5e:31:77:ca:a6:2b:10:c8:cc:c5:b4:d1:da:
f4:5c:9b:39:0d:b8:d8:48:d0:8d:95:1f:fc:0f:0b:
87:b1:68:4e:a1:0e:a8:51:5b:24:ba:e7:5f:cd:ac:
58:39:d5:53:87:31:e6:66:73:5e:a0:e0:d7:40:d1:
ff:aa:7d:52:83:19:cb:c0:66:e8:4e:ca:d2:09:90:
aa:c9:bd:46:12:af:45:eb:d4:52:1a:cb:87:01:82:
2c:75:99:eb:cb:02:5f:66:d0:ad:7d:f5:e3:60:80:
c0:22:35:a6:a4:43:ff:74:43:50:54:72:38:2f:be:
de:09:fd:61:f3:7f:4a:0a:c2:0c:33:8b:43:05:fb:
e5:9b:59:52:aa:c9:aa:a0:8f:8e:15:6b:3f:80:e1:
53:4f:c4:89:ee:fb:df:46:9c:0d:73:c0:f9:54:52:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:BB:BE:1F:63:94:2E:EC:45:BD:80:72:57:9D:9A:6C:0B:A1:32
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/8fe7vh9jlC7sRb2AcledmmwLoTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.117.0.0/19
86.56.0.0/17
89.16.128.0/19
158.181.64.0/19
185.9.224.0/22
IPv6:
2a02:2450::/29
Signature Algorithm: sha256WithRSAEncryption
60:92:d2:f7:99:e4:a1:b8:d2:f9:af:b3:06:fd:4e:2f:41:af:
72:9b:ae:a1:61:d8:f2:0a:c2:75:ba:0e:73:08:7f:2d:7a:51:
32:ed:12:50:c8:0c:bc:34:16:a4:4d:f1:b7:c9:db:7e:ce:8f:
fe:eb:40:91:9c:e0:b4:35:08:68:50:c1:6d:31:16:1d:c4:f7:
cd:dc:0c:37:bf:fb:f2:94:bf:31:4a:6c:52:81:8d:62:c4:b6:
43:74:cf:33:04:b1:1b:79:82:a2:65:f3:52:e2:f0:99:ef:3b:
b3:fd:6e:1a:73:94:62:31:c1:a1:cc:55:67:05:93:2b:14:12:
d0:9c:a0:32:76:47:ec:18:51:da:0b:b2:21:1e:b8:f0:91:da:
d0:72:1a:69:bf:fe:5a:6f:ca:97:4a:27:31:ad:8d:63:e5:b8:
68:9e:8b:01:4b:6a:e1:e6:62:12:ff:e7:c6:30:52:43:16:c0:
90:0a:ec:0e:16:1f:4c:10:21:38:5f:17:1d:8d:13:f8:76:6a:
b0:c0:c0:95:cd:80:78:61:51:67:0d:d4:c5:08:d6:91:a8:f2:
4d:e1:7a:02:81:a7:31:04:4a:fb:37:f3:07:ea:1d:3b:ef:00:
30:7f:30:f4:40:b7:79:51:a6:71:9a:f7:a9:71:ba:e0:7f:0c:
2b:3e:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:24 2026 by rpki-client