Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/8p85fx3JZBOcgAOHbw9s6_zsb-0.roa
File: 8p85fx3JZBOcgAOHbw9s6_zsb-0.roa (raw, json)
Hash identifier: rvJEGF8dsaiOmCWCrtT6Pfn1uf3/SKAsnCTEKPBxvuI=
Subject key identifier: F2:9F:39:7F:1D:C9:64:13:9C:80:03:87:6F:0F:6C:EB:FC:EC:6F:ED
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 019EA8261ADC590EE4DC79F22273286518C3
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/8p85fx3JZBOcgAOHbw9s6_zsb-0.roa
Signing time: Mon 08 Jun 2026 16:52:09 +0000
ROA not before: Mon 08 Jun 2026 16:52:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 178.208.64.0/19 maxlen: 24
178.208.86.0/24 maxlen: 24
185.105.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:26:1a:dc:59:0e:e4:dc:79:f2:22:73:28:65:18:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Jun 8 16:52:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f29f397f1dc964139c8003876f0f6cebfcec6fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:c3:7a:c2:f4:83:99:a9:95:f6:26:37:cc:
f5:a3:67:07:91:07:03:91:cd:a8:e1:c2:07:19:06:
0b:2c:47:79:c7:4f:08:48:f2:e1:50:37:31:eb:59:
19:de:96:21:c6:e0:81:bd:40:96:51:45:eb:fe:2a:
7b:71:f8:85:ed:85:50:f3:03:6e:28:50:f5:69:67:
c8:f1:55:5e:26:c1:54:bb:36:ad:ff:96:5b:be:8b:
f2:b5:05:80:a5:a3:de:86:3d:b3:ca:3d:fa:8b:b8:
4a:fc:1b:ce:a6:33:0f:7e:64:3a:98:ce:f2:37:05:
61:40:fa:49:78:73:71:f2:87:d7:d4:10:99:a2:5b:
7d:4e:43:c4:6e:e4:19:ed:3b:52:22:5e:ec:d5:22:
81:aa:ea:2f:63:1e:8c:bf:cf:16:ea:db:fa:52:a2:
72:bb:0e:0e:fa:b4:63:97:99:27:71:66:38:dd:e2:
a2:b3:91:bf:3e:2c:d6:69:c4:f5:14:76:41:6b:76:
d7:fb:5a:82:3d:80:b9:47:0f:83:ce:6f:01:60:2b:
54:9d:47:4b:cd:68:f4:13:cf:fd:02:2c:f4:49:a0:
47:ee:eb:b4:d9:9d:c1:ff:81:c6:61:c9:c9:ab:af:
71:0a:6b:a2:6c:ab:06:24:a5:33:31:03:27:9d:62:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9F:39:7F:1D:C9:64:13:9C:80:03:87:6F:0F:6C:EB:FC:EC:6F:ED
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/8p85fx3JZBOcgAOHbw9s6_zsb-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.64.0/19
185.105.108.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8b:a9:e4:41:d4:b9:e4:49:16:62:09:d1:69:e7:0b:4c:01:
b5:16:9c:ba:2a:dd:a5:03:5a:9e:6a:dd:65:74:3f:38:b5:ed:
8c:e2:cc:e7:13:89:6e:2f:57:5c:52:6e:16:98:80:83:7a:18:
3a:aa:03:0d:3c:88:77:f0:e1:55:ee:83:ac:4b:7c:a5:20:95:
3a:fe:15:b1:27:8d:16:f3:07:1e:04:2b:8f:02:af:35:17:ee:
19:8e:c5:a2:8c:95:df:19:ca:d6:c2:7a:1d:75:4c:e5:1e:be:
a4:a4:be:40:3a:28:e9:2b:65:d5:b6:86:fb:3e:bf:43:a9:c1:
35:c4:aa:c1:5d:ab:ce:37:6b:e2:dc:55:c2:3a:e7:55:7d:a3:
f9:e8:dd:be:54:88:67:ee:02:0d:b3:0e:1e:6c:b0:2c:69:c9:
90:22:16:08:23:e0:cf:17:21:2a:db:ce:13:d1:6e:4e:5b:0d:
f1:e0:a2:35:35:2d:e2:4e:52:b6:49:0c:d6:39:bf:32:b6:a8:
7b:17:e2:ce:dd:8a:e5:ef:6b:a5:53:df:cd:ba:df:f8:f9:d0:
64:fd:0f:ca:64:ef:b8:5d:32:89:42:0c:99:23:61:5e:37:87:
63:49:7d:04:18:b8:b8:60:4c:ed:5a:ff:9a:d7:f2:a8:3d:89:
4a:4b:d1:09
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6oJhrcWQ7k3HnyInMoZRjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0
ZjJkOTIwHhcNMjYwNjA4MTY1MjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjlmMzk3ZjFkYzk2NDEzOWM4MDAzODc2ZjBmNmNlYmZjZWM2ZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOHDesL0g5mplfYmN8z1o2cHkQcD
kc2o4cIHGQYLLEd5x08ISPLhUDcx61kZ3pYhxuCBvUCWUUXr/ip7cfiF7YVQ8wNu
KFD1aWfI8VVeJsFUuzat/5ZbvovytQWApaPehj2zyj36i7hK/BvOpjMPfmQ6mM7y
NwVhQPpJeHNx8ofX1BCZolt9TkPEbuQZ7TtSIl7s1SKBquovYx6Mv88W6tv6UqJy
uw4O+rRjl5kncWY43eKis5G/PizWacT1FHZBa3bX+1qCPYC5Rw+Dzm8BYCtUnUdL
zWj0E8/9Aiz0SaBH7uu02Z3B/4HGYcnJq69xCmuibKsGJKUzMQMnnWKm9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPKfOX8dyWQTnIADh28PbOv87G/tMB8GA1UdIwQY
MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt
MGUxYjhmZWE4OTEzLzEvOHA4NWZ4M0paQk9jZ0FPSGJ3OXM2X3pzYi0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz
LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFstBAAwQA
uWlsMA0GCSqGSIb3DQEBCwUAA4IBAQCYi6nkQdS55EkWYgnRaecLTAG1Fpy6Kt2l
A1qeat1ldD84te2M4sznE4luL1dcUm4WmICDehg6qgMNPIh38OFV7oOsS3ylIJU6
/hWxJ40W8wceBCuPAq81F+4ZjsWijJXfGcrWwnoddUzlHr6kpL5AOijpK2XVtob7
Pr9DqcE1xKrBXavON2vi3FXCOudVfaP56N2+VIhn7gINsw4ebLAsacmQIhYII+DP
FyEq284T0W5OWw3x4KI1NS3iTlK2SQzWOb8ytqh7F+LO3Yrl72ulU9/Nut/4+dBk
/Q/KZO+4XTKJQgyZI2FeN4djSX0EGLi4YEztWv+a1/KoPYlKS9EJ
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:38:58 2026 by rpki-client