Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8NvryKpmyeDe7t1PaY3M3m8Ssvo.roa
File: 8NvryKpmyeDe7t1PaY3M3m8Ssvo.roa (raw, json)
Hash identifier: xm2Thtfm+yBP2wdQaYPOJrT9EgKdCMpWBroPP1gPDPI=
Subject key identifier: F0:DB:EB:C8:AA:66:C9:E0:DE:EE:DD:4F:69:8D:CC:DE:6F:12:B2:FA
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019CDC3F1DA7364FEC7BB42DFF73EA2D912E
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8NvryKpmyeDe7t1PaY3M3m8Ssvo.roa
Signing time: Wed 11 Mar 2026 09:34:09 +0000
ROA not before: Wed 11 Mar 2026 09:34:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215324
IP address blocks: 159.148.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:3f:1d:a7:36:4f:ec:7b:b4:2d:ff:73:ea:2d:91:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 11 09:34:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0dbebc8aa66c9e0deeedd4f698dccde6f12b2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6f:5f:73:c8:ef:4c:97:5d:dc:e5:a0:c0:8c:
6b:33:a9:5e:54:52:9e:63:1e:3c:43:06:d9:e8:9c:
f8:57:cd:db:99:43:79:a3:aa:df:b1:5a:3b:98:6f:
cf:17:67:04:1d:ca:ca:64:02:c8:26:55:27:4f:1d:
a0:a5:b4:10:1c:b7:d5:02:64:81:8f:27:3c:8f:09:
ce:25:7a:93:51:0a:e5:1f:84:df:22:16:e2:75:1e:
b4:00:37:f3:3c:0d:4c:7e:dc:e3:12:cf:50:9b:86:
6e:76:6f:16:bb:4c:a2:51:f6:70:1e:88:79:50:f5:
77:e5:e8:7e:83:cc:97:68:b2:54:66:a5:3c:e1:67:
0a:90:b2:4f:53:3b:24:06:f8:50:03:a0:11:34:28:
a5:a7:23:93:4a:5a:9f:2d:64:47:7a:ac:28:0c:4b:
4e:57:ad:76:fb:f8:c6:53:18:04:ef:8f:19:29:79:
5d:d4:42:ab:cd:c2:c1:6e:5a:df:d9:e7:88:77:58:
15:2b:1b:e0:0b:8f:07:31:06:10:95:30:3b:1e:af:
05:a5:6d:6c:5f:d7:08:17:11:7d:09:8a:c5:f5:55:
a4:8c:df:58:2b:f7:e9:a4:0c:db:03:57:63:e4:9c:
3d:7a:1e:92:21:d1:51:09:9e:c1:dc:2f:7f:16:b3:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DB:EB:C8:AA:66:C9:E0:DE:EE:DD:4F:69:8D:CC:DE:6F:12:B2:FA
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8NvryKpmyeDe7t1PaY3M3m8Ssvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b7:9c:b2:d0:1d:d2:ae:e5:83:c9:56:e3:bc:87:ea:f9:b0:
3d:0b:55:a8:f4:e9:2f:1d:ab:df:31:57:5f:66:13:9e:9e:16:
e1:48:ec:62:8c:18:e2:7a:a2:ec:85:95:b1:3b:f3:0d:ba:2d:
b8:04:24:8b:70:08:7f:69:68:55:9c:fd:36:1d:8f:b9:92:06:
1e:fb:93:85:6f:b8:46:0f:dd:42:e6:9b:3f:00:3f:b9:72:81:
a6:99:9c:c8:40:80:08:95:4b:58:ef:23:33:5a:a7:52:bb:50:
cf:9c:54:d8:9b:18:df:e9:20:1d:42:1c:43:03:f3:8a:6d:71:
f9:80:74:0f:a6:4a:fa:13:20:ab:44:c7:7c:b5:94:f4:52:b3:
a0:20:d7:69:83:8e:e7:ab:e4:42:61:bc:fa:4d:ea:bd:82:d1:
8f:cf:f9:ac:aa:c8:4f:56:bc:0c:eb:ff:64:ce:0c:a0:0d:c1:
d9:0b:cd:ff:7b:1b:8a:bd:4c:cc:fe:fa:7e:d5:c1:4f:27:79:
d6:87:13:4c:9e:67:ac:f5:9d:ad:2b:8f:fa:60:62:af:52:fb:
fa:fe:1c:ed:81:c5:4b:6e:e7:e1:6f:dd:5d:44:96:18:f8:af:
1a:0a:f7:02:91:a1:6a:55:0a:22:be:8e:eb:2c:72:52:21:e9:
ba:e0:1a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:03:04 2026 by rpki-client