Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/8z4En2plcFrjsgMpeWFMiLDbrcc.roa
File: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (raw, json)
Hash identifier: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=
Subject key identifier: F3:3E:04:9F:6A:65:70:5A:E3:B2:03:29:79:61:4C:88:B0:DB:AD:C7
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 019C51E169F1597B02CA3E46175805BFD2DC
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/8z4En2plcFrjsgMpeWFMiLDbrcc.roa
Signing time: Thu 12 Feb 2026 12:44:13 +0000
ROA not before: Thu 12 Feb 2026 12:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48161
IP address blocks: 92.83.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:e1:69:f1:59:7b:02:ca:3e:46:17:58:05:bf:d2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Feb 12 12:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f33e049f6a65705ae3b2032979614c88b0dbadc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:41:ce:21:8c:69:f6:7a:24:fa:f5:eb:66:
3f:72:49:8f:ec:bb:5d:ed:30:94:da:44:c2:07:19:
7a:77:bc:d1:e6:36:57:c4:9b:5e:a4:b4:11:fa:0a:
8a:0c:6e:b5:ab:58:79:38:50:4a:7a:55:59:b3:7f:
34:64:6c:3b:b8:f1:53:de:8b:06:67:0c:6f:eb:ac:
6c:2b:6a:e5:9d:81:04:13:a4:60:b3:45:2c:b8:33:
c7:2f:7f:27:bf:ad:9c:9c:44:fd:84:5c:d3:6f:e0:
07:39:bf:41:81:ef:c1:8f:5c:1c:f1:93:1d:9a:41:
4b:3a:00:c5:c8:93:ad:80:f7:0f:83:d3:23:fe:51:
a4:5b:b7:dc:4a:01:48:79:57:d4:e1:a8:f9:ac:48:
13:e3:06:6d:3d:92:1f:b0:b2:bc:09:64:55:65:0d:
8c:98:8f:f3:80:fe:11:63:87:6f:d1:30:65:d1:8b:
78:e4:11:ed:bd:36:e7:bd:46:2e:e2:1f:9f:d2:2b:
c4:41:5f:be:71:68:10:32:50:9a:e2:2f:8e:3c:59:
a5:b0:56:e6:e5:70:a3:76:13:e2:e0:e0:7f:31:4b:
7e:5b:ea:0d:f1:04:5f:a7:6a:26:e9:ad:e7:8f:07:
9b:68:03:b1:f8:25:7e:9b:4f:2b:1a:1d:6f:87:d9:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3E:04:9F:6A:65:70:5A:E3:B2:03:29:79:61:4C:88:B0:DB:AD:C7
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/8z4En2plcFrjsgMpeWFMiLDbrcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.83.64.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:2f:29:03:50:67:6e:a6:b1:bb:91:c3:16:28:e2:35:d4:b4:
e5:0e:25:35:3f:63:47:49:83:df:fb:0e:b8:3e:40:53:df:6b:
66:e6:c9:49:71:20:48:e1:30:ba:da:0b:ec:9c:3c:46:11:3a:
92:d0:90:95:93:fd:81:a6:75:6d:a3:3f:be:9c:8e:27:a9:10:
9d:8f:8f:c6:50:dc:bf:85:b3:2d:f5:4d:39:6c:41:90:94:3d:
5b:e1:a7:89:33:5f:ad:97:78:0d:2f:b9:9e:bd:7a:83:e8:2e:
bb:52:8e:83:2f:60:e7:4a:e5:5b:ee:a4:8c:49:07:eb:ba:67:
6b:53:a7:26:ca:4b:92:31:3f:dd:75:34:e4:8f:e9:dc:53:8a:
c0:b8:26:75:1d:25:2d:90:df:24:39:24:99:df:64:19:cd:20:
ec:d1:4e:18:23:a7:5a:47:dd:d4:95:59:17:ea:fe:de:a5:a8:
dd:46:95:a1:a4:7a:72:e1:63:23:4a:c9:9b:a6:71:2b:5e:1a:
d2:ae:36:c9:67:24:a1:57:18:16:ae:41:d8:fd:fd:5c:c5:7c:
90:e4:5e:6c:5f:88:a8:9d:95:8e:f7:e9:b8:a3:72:fc:aa:31:
b9:fa:b3:dc:aa:76:c0:e3:88:b6:69:80:f8:8c:c3:fb:26:47:
47:57:ee:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxR4WnxWXsCyj5GF1gFv9LcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2
MTFkODkwHhcNMjYwMjEyMTI0NDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzNlMDQ5ZjZhNjU3MDVhZTNiMjAzMjk3OTYxNGM4OGIwZGJhZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNpBziGMafZ6JPr162Y/ckmP7Ltd
7TCU2kTCBxl6d7zR5jZXxJtepLQR+gqKDG61q1h5OFBKelVZs380ZGw7uPFT3osG
Zwxv66xsK2rlnYEEE6Rgs0UsuDPHL38nv62cnET9hFzTb+AHOb9Bge/Bj1wc8ZMd
mkFLOgDFyJOtgPcPg9Mj/lGkW7fcSgFIeVfU4aj5rEgT4wZtPZIfsLK8CWRVZQ2M
mI/zgP4RY4dv0TBl0Yt45BHtvTbnvUYu4h+f0ivEQV++cWgQMlCa4i+OPFmlsFbm
5XCjdhPi4OB/MUt+W+oN8QRfp2om6a3njwebaAOx+CV+m08rGh1vh9kWXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPM+BJ9qZXBa47IDKXlhTIiw263HMB8GA1UdIwQY
MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt
OTQyNDgyZjhkMmVhLzEvOHo0RW4ycGxjRnJqc2dNcGVXRk1pTERicmNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh
LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXFNAMA0G
CSqGSIb3DQEBCwUAA4IBAQCdLykDUGduprG7kcMWKOI11LTlDiU1P2NHSYPf+w64
PkBT32tm5slJcSBI4TC62gvsnDxGETqS0JCVk/2BpnVtoz++nI4nqRCdj4/GUNy/
hbMt9U05bEGQlD1b4aeJM1+tl3gNL7mevXqD6C67Uo6DL2DnSuVb7qSMSQfrumdr
U6cmykuSMT/ddTTkj+ncU4rAuCZ1HSUtkN8kOSSZ32QZzSDs0U4YI6daR93UlVkX
6v7epajdRpWhpHpy4WMjSsmbpnErXhrSrjbJZyShVxgWrkHY/f1cxXyQ5F5sX4io
nZWO9+m4o3L8qjG5+rPcqnbA44i2aYD4jMP7JkdHV+6q
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:15 2026 by rpki-client