Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/8QmIuePPjKmEzGNivjh_kLAuMAY.roa
File: 8QmIuePPjKmEzGNivjh_kLAuMAY.roa (raw, json)
Hash identifier: if+R+69YwCCEXsp6uMBg/VlJaAaaSa7+SPKc41aJRV4=
Subject key identifier: F1:09:88:B9:E3:CF:8C:A9:84:CC:63:62:BE:38:7F:90:B0:2E:30:06
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 01A0C9C552BC1A3B329015879A29653A4000
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/8QmIuePPjKmEzGNivjh_kLAuMAY.roa
Signing time: Tue 22 Sep 2026 15:39:07 +0000
ROA not before: Tue 22 Sep 2026 15:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5405
IP address blocks: 5.183.211.0/24 maxlen: 24
45.153.81.0/24 maxlen: 24
45.153.82.0/23 maxlen: 23
81.27.68.0/24 maxlen: 24
81.27.69.0/24 maxlen: 24
81.27.70.0/24 maxlen: 24
94.103.180.0/24 maxlen: 24
185.93.213.0/24 maxlen: 24
185.134.66.0/24 maxlen: 24
185.134.67.0/24 maxlen: 24
2a11:4140::/29 maxlen: 29
2a11:4140:1000::/36 maxlen: 36
2a11:4140:2000::/36 maxlen: 36
2a11:4140:3000::/36 maxlen: 36
2a11:4140:4000::/36 maxlen: 36
2a11:4140:5000::/36 maxlen: 36
2a11:4140:6000::/36 maxlen: 36
2a11:4140:7000::/36 maxlen: 36
2a11:4140:8000::/36 maxlen: 36
2a11:4140:9000::/36 maxlen: 36
2a11:4140:a000::/36 maxlen: 36
2a11:4140:b000::/36 maxlen: 36
2a11:4140:c000::/36 maxlen: 36
2a11:4140:d000::/36 maxlen: 36
2a11:4140:e000::/36 maxlen: 36
2a11:4140:f000::/36 maxlen: 36
2a11:4141::/36 maxlen: 36
2a11:4141:1000::/36 maxlen: 36
2a11:4141:3000::/36 maxlen: 36
2a11:4141:4000::/36 maxlen: 36
2a11:4141:5000::/36 maxlen: 36
2a11:4141:6000::/36 maxlen: 36
2a11:4141:7000::/36 maxlen: 36
2a11:4141:8000::/36 maxlen: 36
2a11:4141:9000::/36 maxlen: 36
2a11:4141:b000::/36 maxlen: 36
2a11:4141:c000::/36 maxlen: 36
2a11:4141:d000::/36 maxlen: 36
2a11:4141:e000::/36 maxlen: 36
2a11:4141:f000::/36 maxlen: 36
2a11:4142::/36 maxlen: 36
2a11:4142:1000::/36 maxlen: 36
2a11:4142:2000::/36 maxlen: 36
2a11:4142:3000::/36 maxlen: 36
2a11:4142:4000::/36 maxlen: 36
2a11:4142:5000::/36 maxlen: 36
2a11:4142:6000::/36 maxlen: 36
2a11:4142:7000::/36 maxlen: 36
2a11:4142:8000::/36 maxlen: 36
2a11:4142:9000::/36 maxlen: 36
2a11:4142:b000::/36 maxlen: 36
2a11:4142:c000::/36 maxlen: 36
2a11:4142:d000::/36 maxlen: 36
2a11:4142:e000::/36 maxlen: 36
2a11:4142:f000::/36 maxlen: 36
2a11:4143::/36 maxlen: 36
2a11:4143:1000::/36 maxlen: 36
2a11:4143:3000::/36 maxlen: 36
2a11:4143:4000::/36 maxlen: 36
2a11:4146::/36 maxlen: 36
2a11:4146:6000::/36 maxlen: 36
2a11:4146:8000::/36 maxlen: 36
2a11:4147:4000::/36 maxlen: 36
2a11:4147:7000::/36 maxlen: 36
2a11:4147:8000::/36 maxlen: 36
2a11:4147:9000::/36 maxlen: 36
2a11:4147:b000::/36 maxlen: 36
2a11:4147:c000::/36 maxlen: 36
2a11:4147:d000::/36 maxlen: 36
2a11:4147:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:c5:52:bc:1a:3b:32:90:15:87:9a:29:65:3a:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Sep 22 15:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f10988b9e3cf8ca984cc6362be387f90b02e3006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:b1:ad:84:3c:a9:64:17:0a:5a:80:a0:ef:
7e:55:5a:4d:8b:72:bd:2d:68:4a:b9:06:d1:59:73:
55:69:53:89:76:b7:02:b3:dc:8b:c7:dd:f7:90:e7:
f9:e9:4b:57:cf:ba:7f:d5:dc:94:ad:00:05:d9:85:
c0:c5:c7:0c:e9:47:b1:77:07:9b:92:3a:8c:8e:7d:
30:7c:50:de:2e:c0:92:db:21:01:15:c1:e3:c7:e8:
b8:bf:e9:d0:1c:33:93:60:4f:24:cc:63:17:50:ad:
13:4c:fb:ad:ec:3c:a2:a5:50:3a:e4:fb:72:73:fa:
41:73:ba:51:c6:82:27:69:4f:e4:08:00:23:07:e8:
04:7f:a2:0e:d6:a9:a5:05:1a:e8:0a:43:13:cc:8c:
26:4f:d9:aa:fe:cf:6c:d8:49:e1:b9:cc:8b:4c:6a:
24:9c:78:65:a2:7d:08:84:a2:c6:ad:cc:2b:04:7c:
a2:cb:e2:90:0f:fb:5a:fb:5f:e3:85:d2:26:a0:89:
a4:d8:60:2e:dc:f8:84:26:b9:0c:2e:34:71:ab:10:
9f:cb:83:e6:2d:f1:40:98:8d:5c:c1:1f:84:3e:14:
2b:ed:2d:12:fa:96:ed:2a:ed:3d:b7:6d:f9:94:22:
7b:58:98:ac:62:07:99:23:e4:7a:c0:72:e1:7e:ea:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:09:88:B9:E3:CF:8C:A9:84:CC:63:62:BE:38:7F:90:B0:2E:30:06
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/8QmIuePPjKmEzGNivjh_kLAuMAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.211.0/24
45.153.81.0-45.153.83.255
81.27.68.0-81.27.70.255
94.103.180.0/24
185.93.213.0/24
185.134.66.0/23
IPv6:
2a11:4140::/29
Signature Algorithm: sha256WithRSAEncryption
78:40:ac:d1:38:ee:c9:00:89:76:f2:24:01:3e:57:3c:02:74:
69:f3:95:4f:46:c5:fe:6e:b3:8c:e5:34:62:57:c6:fa:cc:82:
8b:c1:cc:06:c0:62:88:16:07:15:d5:7d:33:fa:1b:f9:e9:ba:
b6:a8:51:6c:06:bc:94:7e:db:4f:15:8f:d3:44:4d:12:9d:28:
eb:eb:41:b3:8e:27:83:e7:7e:3a:49:89:09:42:5c:92:9b:51:
fe:3d:41:83:46:40:89:1f:4b:46:72:d6:fb:f1:9d:7b:f3:b5:
30:cc:25:c9:b4:6c:4e:fc:32:98:43:e0:32:26:ca:5d:bf:c5:
a1:b9:d5:87:e8:93:47:34:b3:22:85:59:7d:17:83:4c:52:fc:
08:60:e3:51:e5:e1:11:a8:77:86:6d:16:c4:57:8d:22:3a:2e:
6d:e8:ca:01:9e:5c:0e:c2:a9:cc:b7:a3:d2:aa:dd:97:6f:a2:
35:e4:2d:23:24:e0:55:33:49:ed:e7:0d:00:51:d5:6b:08:26:
34:68:91:5b:7e:1f:f1:dd:84:97:26:51:ca:14:25:c5:a4:e3:
13:26:e8:46:59:99:bf:3b:87:dc:d1:9f:02:3a:02:c7:4f:5b:
6b:b1:0d:74:ac:42:73:e6:a9:57:7e:71:9b:9e:04:da:9a:cd:
a2:44:64:ba
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAaDJxVK8GjsykBWHmillOkAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz
MjA5MjgwHhcNMjYwOTIyMTUzOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTA5ODhiOWUzY2Y4Y2E5ODRjYzYzNjJiZTM4N2Y5MGIwMmUzMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7y2xrYQ8qWQXClqAoO9+VVpNi3K9
LWhKuQbRWXNVaVOJdrcCs9yLx933kOf56UtXz7p/1dyUrQAF2YXAxccM6Uexdweb
kjqMjn0wfFDeLsCS2yEBFcHjx+i4v+nQHDOTYE8kzGMXUK0TTPut7DyipVA65Pty
c/pBc7pRxoInaU/kCAAjB+gEf6IO1qmlBRroCkMTzIwmT9mq/s9s2EnhucyLTGok
nHhlon0IhKLGrcwrBHyiy+KQD/ta+1/jhdImoImk2GAu3PiEJrkMLjRxqxCfy4Pm
LfFAmI1cwR+EPhQr7S0S+pbtKu09t235lCJ7WJisYgeZI+R6wHLhfuroBQIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFPEJiLnjz4yphMxjYr44f5CwLjAGMB8GA1UdIwQY
MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt
ZDRlODgyMDgzZTRmLzEvOFFtSXVlUFBqS21FekdOaXZqaF9rTEF1TUFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm
LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0AwQABbfTMAwD
BAAtmVEDBAItmVAwDAMEAlEbRAMEAFEbRgMEAF5ntAMEALld1QMEAbmGQjANBAIA
AjAHAwUDKhFBQDANBgkqhkiG9w0BAQsFAAOCAQEAeECs0TjuyQCJdvIkAT5XPAJ0
afOVT0bF/m6zjOU0YlfG+syCi8HMBsBiiBYHFdV9M/ob+em6tqhRbAa8lH7bTxWP
00RNEp0o6+tBs44ng+d+OkmJCUJckptR/j1Bg0ZAiR9LRnLW+/Gde/O1MMwlybRs
TvwymEPgMibKXb/FobnVh+iTRzSzIoVZfReDTFL8CGDjUeXhEah3hm0WxFeNIjou
bejKAZ5cDsKpzLej0qrdl2+iNeQtIyTgVTNJ7ecNAFHVawgmNGiRW34f8d2ElyZR
yhQlxaTjEyboRlmZvzuH3NGfAjoCx09ba7ENdKxCc+apV35xm54E2prNokRkug==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:47:12 2026 by rpki-client