Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8zAxNnzyYGd-l4ZQha5abZKCMVc.roa
File: 8zAxNnzyYGd-l4ZQha5abZKCMVc.roa (raw, json)
Hash identifier: 6C153S/anJrW22ResuuQUgkrMdUhZ1vtduTGO/HJ4YQ=
Subject key identifier: F3:30:31:36:7C:F2:60:67:7E:97:86:50:85:AE:5A:6D:92:82:31:57
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C9EA0D8D07B4A3C2757C8E208D16B4EE8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8zAxNnzyYGd-l4ZQha5abZKCMVc.roa
Signing time: Fri 27 Feb 2026 10:24:27 +0000
ROA not before: Fri 27 Feb 2026 10:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 45.8.70.0/24 maxlen: 24
45.130.202.0/23 maxlen: 24
45.133.4.0/24 maxlen: 24
45.133.5.0/24 maxlen: 24
45.133.6.0/24 maxlen: 24
45.133.7.0/24 maxlen: 24
89.34.126.0/23 maxlen: 24
185.165.45.0/24 maxlen: 24
185.245.7.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
194.5.82.0/24 maxlen: 24
194.5.83.0/24 maxlen: 24
194.61.40.0/24 maxlen: 24
194.61.41.0/24 maxlen: 24
203.25.124.0/24 maxlen: 24
204.75.229.0/24 maxlen: 24
220.158.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:a0:d8:d0:7b:4a:3c:27:57:c8:e2:08:d1:6b:4e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 27 10:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f33031367cf260677e97865085ae5a6d92823157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:17:6c:ca:3b:9d:06:8d:18:1a:87:d5:8b:
25:48:d1:c3:07:54:e2:5b:64:ea:34:d8:a0:f1:6b:
61:7c:d7:56:33:9c:e2:62:7d:9e:80:f5:99:c8:ca:
85:d5:20:71:85:94:e3:28:70:2d:f6:38:c8:42:f7:
6c:87:d0:10:e5:8a:f3:51:65:bc:2f:f3:89:b8:6c:
fa:a9:46:3b:85:01:4f:9b:15:5f:0b:f0:85:14:24:
35:48:fe:11:a6:71:12:4c:57:7b:c6:ed:77:b0:dd:
d7:44:79:10:7a:e2:e6:82:e9:d2:73:9c:27:c7:13:
7e:a3:05:43:72:58:01:b1:31:89:d4:9e:ae:36:fb:
63:f0:a1:51:ec:df:68:76:56:e5:74:e7:a0:46:5d:
ea:aa:08:94:50:e8:a5:7f:23:a7:50:1a:08:48:e9:
21:fc:66:e0:41:68:e1:4b:ef:b8:e3:ca:70:f4:f0:
19:16:6a:05:0d:65:35:5a:17:7c:9a:3a:af:8f:e2:
d3:53:08:31:de:ae:8e:43:2d:9f:3a:81:8a:1e:f4:
93:19:bd:4d:45:b4:4a:76:47:df:fa:f9:38:94:d4:
e8:db:a6:30:3a:b6:06:7a:d9:50:47:a3:b2:6c:9a:
6e:31:c3:f0:6c:f3:d7:a3:b6:f8:dd:a7:ad:cd:9e:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:30:31:36:7C:F2:60:67:7E:97:86:50:85:AE:5A:6D:92:82:31:57
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8zAxNnzyYGd-l4ZQha5abZKCMVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.70.0/24
45.130.202.0/23
45.133.4.0/22
89.34.126.0/23
185.165.45.0/24
185.245.7.0/24
188.213.202.0/24
194.5.82.0/23
194.61.40.0/23
203.25.124.0/24
204.75.229.0/24
220.158.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:33:7a:6c:d3:83:d4:50:f2:f5:6a:36:72:aa:47:a5:b6:30:
d6:24:85:90:1b:18:29:be:e8:2f:c0:e0:e2:4b:e5:9e:36:a0:
c1:fd:83:a0:7d:66:c9:63:b6:a2:9d:7d:b6:05:e5:f0:1c:b8:
ef:39:cd:39:46:6c:16:90:7b:e8:3c:d3:87:cf:cf:fa:77:14:
30:9f:15:f1:55:3e:22:6f:07:fe:08:86:9e:4c:a8:c9:87:3a:
46:6d:47:74:1e:e6:40:22:6a:46:8d:99:e8:dc:13:c3:6b:d3:
54:4d:6d:79:35:a0:cf:58:a7:27:92:89:61:01:e7:cc:d4:25:
5d:ab:dd:54:55:8c:c2:c3:87:79:5a:57:25:ed:8f:2c:48:a1:
4a:2b:bc:c2:6b:50:46:48:7d:b0:06:ee:05:61:5b:10:67:73:
75:7c:6f:3e:d2:c1:b6:5b:06:36:b2:83:72:d3:3a:5f:4a:ea:
0b:90:a8:8b:67:3e:c4:e0:16:f5:6c:3e:e2:fd:c6:43:03:51:
78:26:e3:e2:d6:3a:30:fb:47:a9:0d:fe:a3:c0:cc:64:47:2b:
0e:73:a4:99:f4:38:6c:15:c1:55:25:06:33:e5:ee:14:26:9d:
46:ad:38:1a:b3:d0:89:42:6e:24:0e:3e:e9:55:62:28:7f:a2:
9c:26:57:b4
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZyeoNjQe0o8J1fI4gjRa07oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYwMjI3MTAyNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzMwMzEzNjdjZjI2MDY3N2U5Nzg2NTA4NWFlNWE2ZDkyODIzMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoMXbMo7nQaNGBqH1YslSNHDB1Ti
W2TqNNig8WthfNdWM5ziYn2egPWZyMqF1SBxhZTjKHAt9jjIQvdsh9AQ5YrzUWW8
L/OJuGz6qUY7hQFPmxVfC/CFFCQ1SP4RpnESTFd7xu13sN3XRHkQeuLmgunSc5wn
xxN+owVDclgBsTGJ1J6uNvtj8KFR7N9odlbldOegRl3qqgiUUOilfyOnUBoISOkh
/GbgQWjhS++448pw9PAZFmoFDWU1Whd8mjqvj+LTUwgx3q6OQy2fOoGKHvSTGb1N
RbRKdkff+vk4lNTo26YwOrYGetlQR6OybJpuMcPwbPPXo7b43aetzZ52oQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFPMwMTZ88mBnfpeGUIWuWm2SgjFXMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvOHpBeE5uenlZR2QtbDRaUWhhNWFiWktDTVZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALQhGAwQB
LYLKAwQCLYUEAwQBWSJ+AwQAuaUtAwQAufUHAwQAvNXKAwQBwgVSAwQBwj0oAwQA
yxl8AwQAzEvlAwQA3J7HMA0GCSqGSIb3DQEBCwUAA4IBAQA8M3ps04PUUPL1ajZy
qkeltjDWJIWQGxgpvugvwODiS+WeNqDB/YOgfWbJY7ainX22BeXwHLjvOc05RmwW
kHvoPNOHz8/6dxQwnxXxVT4ibwf+CIaeTKjJhzpGbUd0HuZAImpGjZno3BPDa9NU
TW15NaDPWKcnkolhAefM1CVdq91UVYzCw4d5Wlcl7Y8sSKFKK7zCa1BGSH2wBu4F
YVsQZ3N1fG8+0sG2WwY2soNy0zpfSuoLkKiLZz7E4Bb1bD7i/cZDA1F4JuPi1jow
+0epDf6jwMxkRysOc6SZ9DhsFcFVJQYz5e4UJp1GrTgas9CJQm4kDj7pVWIof6Kc
Jle0
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:44 2026 by rpki-client