Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/8SzZYJ9UpnTulHyeUHPHVjPySiY.roa
File: 8SzZYJ9UpnTulHyeUHPHVjPySiY.roa (raw, json)
Hash identifier: gpJwGPvf4OsehSE6/EMx/5p/RJPcEJmWMZnsFxVxJ80=
Subject key identifier: F1:2C:D9:60:9F:54:A6:74:EE:94:7C:9E:50:73:C7:56:33:F2:4A:26
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 019F8FCD74B871D2737A62CCC8A190F7024E
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/8SzZYJ9UpnTulHyeUHPHVjPySiY.roa
Signing time: Thu 23 Jul 2026 16:27:14 +0000
ROA not before: Thu 23 Jul 2026 16:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212994
IP address blocks: 185.39.28.0/23 maxlen: 24
185.39.28.0/24 maxlen: 24
185.39.29.0/24 maxlen: 24
185.237.216.0/24 maxlen: 24
185.237.217.0/24 maxlen: 24
2a13:f9c0::/39 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:cd:74:b8:71:d2:73:7a:62:cc:c8:a1:90:f7:02:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Jul 23 16:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f12cd9609f54a674ee947c9e5073c75633f24a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:18:b4:80:9d:74:ce:7c:6a:04:49:a9:80:
38:b4:33:6d:be:a2:c0:ad:95:44:f4:c6:50:2e:e9:
03:73:ed:61:aa:94:52:e1:a5:0b:b2:75:8b:dc:36:
f9:40:9d:87:92:12:e2:28:55:e0:fc:4e:22:b7:1a:
4c:a6:5f:0b:17:ac:28:4f:8a:46:22:db:23:6b:83:
2d:41:1e:e4:bc:52:9e:5b:b2:68:7c:60:4a:ed:2d:
92:7c:30:00:7a:7e:41:a2:8a:57:91:15:71:02:80:
55:df:7e:ec:f5:d2:51:55:cd:09:74:00:8b:b7:c7:
7c:12:fc:23:88:aa:47:49:1e:77:26:11:b1:77:d0:
0a:6d:55:74:2a:c5:8b:14:75:47:3a:5d:05:c9:2f:
a6:89:15:09:88:df:4f:6e:08:d4:8c:27:45:4c:0c:
9a:1f:8d:8b:a8:7a:f9:f6:68:b4:fa:10:a0:67:49:
98:75:7b:0b:e8:32:b6:f6:ec:1e:c9:8e:b4:80:5c:
db:48:8c:f7:28:ab:f6:f6:59:07:42:ca:58:f6:5a:
f2:5e:57:c6:98:e1:b9:7f:32:07:c9:ea:b3:20:4c:
8d:05:4f:f0:7b:a8:96:68:ce:35:c9:b1:54:44:3b:
b3:b9:95:e4:33:8e:d2:1a:82:3a:96:bf:78:1c:cb:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2C:D9:60:9F:54:A6:74:EE:94:7C:9E:50:73:C7:56:33:F2:4A:26
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/8SzZYJ9UpnTulHyeUHPHVjPySiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.28.0/23
185.237.216.0/23
IPv6:
2a13:f9c0::/39
Signature Algorithm: sha256WithRSAEncryption
31:65:ad:ed:a2:d0:28:df:e2:e4:80:f1:47:e7:11:0c:49:cf:
5d:1e:d3:69:c9:62:43:59:6c:62:d1:84:e8:17:31:f6:24:4b:
ba:c5:21:15:18:7d:46:8e:53:86:2c:d8:0d:79:0e:71:2c:63:
e3:cb:46:f4:9c:8d:cd:1f:e9:9b:19:5a:25:7d:70:77:7e:11:
08:44:d5:a7:bc:1d:66:6c:b0:d8:62:cb:6b:e5:0d:bb:1d:ef:
d5:0f:15:b5:7d:40:08:63:8a:06:fa:3a:3d:0a:fe:dc:bb:92:
bc:b9:94:ff:29:aa:6f:aa:d6:f2:8a:a3:0c:52:97:19:f6:11:
6a:ad:aa:97:48:37:52:89:fc:af:f9:15:cc:66:1d:5c:a3:62:
46:0f:e9:90:10:fa:ae:67:a3:b5:8c:65:bc:6b:98:3c:54:90:
68:0a:a2:d2:51:fe:66:bc:0e:93:5a:a7:d0:27:ee:9c:eb:67:
21:51:37:b3:37:f9:f8:05:0e:b5:8c:98:14:b9:cc:b8:f7:1b:
67:4f:8c:1f:c5:fd:29:84:b1:83:97:ee:54:eb:7a:c6:7b:d6:
28:ad:70:56:60:fb:f8:bc:a6:31:58:8a:56:63:42:c7:9e:1c:
ec:93:7c:f6:e8:a7:70:c1:4f:b7:0a:3a:ac:44:f6:f6:c2:d2:
c8:8b:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:41 2026 by rpki-client