Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/8KJeCBfDeBIyavZ1WctKlr420vc.roa
File: 8KJeCBfDeBIyavZ1WctKlr420vc.roa (raw, json)
Hash identifier: LDf/JZH0zLtMx88N6zCd8v+gRLqRrAT9RTGvIZY5tC4=
Subject key identifier: F0:A2:5E:08:17:C3:78:12:32:6A:F6:75:59:CB:4A:96:BE:36:D2:F7
Certificate issuer: /CN=a9cbc126ed4d935c11ceb9dcf7d9728cc4ee8100
Certificate serial: 019CD6DC5957BCACD8A3E2C7AC9EF8EF39A0
Authority key identifier: A9:CB:C1:26:ED:4D:93:5C:11:CE:B9:DC:F7:D9:72:8C:C4:EE:81:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcvBJu1Nk1wRzrnc99lyjMTugQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/8KJeCBfDeBIyavZ1WctKlr420vc.roa
Signing time: Tue 10 Mar 2026 08:28:10 +0000
ROA not before: Tue 10 Mar 2026 08:28:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28972
IP address blocks: 79.141.240.0/20 maxlen: 20
178.216.144.0/21 maxlen: 21
213.226.224.0/20 maxlen: 20
213.226.240.0/21 maxlen: 21
2a02:5d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcvBJu1Nk1wRzrnc99lyjMTugQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:dc:59:57:bc:ac:d8:a3:e2:c7:ac:9e:f8:ef:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cbc126ed4d935c11ceb9dcf7d9728cc4ee8100
Validity
Not Before: Mar 10 08:28:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0a25e0817c37812326af67559cb4a96be36d2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2a:f3:49:8c:c3:2b:fb:b9:14:5d:bd:9b:cc:
53:c7:f3:05:be:ec:84:f1:36:09:a5:fe:f9:c1:a3:
4e:b0:74:8d:56:b8:31:88:53:9b:e1:b5:cc:33:a0:
ba:19:5e:cd:7a:37:e7:1d:fd:08:e4:e8:02:49:9d:
fe:0e:99:a6:e8:72:30:00:99:46:8f:ac:14:fa:20:
92:3c:e5:77:4d:e9:09:38:55:2d:dd:71:d7:f0:db:
7a:b1:52:6f:21:26:69:94:65:25:b4:a6:97:01:9f:
a7:24:5d:fd:c1:bc:dd:ba:f3:01:1a:54:09:dc:25:
03:43:4e:96:fd:69:53:16:34:82:e5:a6:92:c5:db:
f3:d2:4e:31:65:12:1f:9c:47:41:f9:98:b2:32:58:
d5:f8:f5:ff:3d:ed:c2:34:dc:8b:8d:f8:f0:0b:02:
f8:30:42:1b:e6:d0:62:c0:bc:0c:66:40:ac:fd:c9:
9d:e0:a5:57:66:4d:cb:e0:3a:b0:ea:98:f8:c6:3f:
ad:34:cd:36:03:4c:28:3c:b7:95:37:16:05:ea:a7:
d8:56:ce:f9:4c:3b:7a:ca:74:18:53:cd:5f:5c:4b:
30:26:57:17:91:19:32:ac:b8:bd:1b:f4:b7:3d:8b:
c1:ec:1e:33:b4:b5:2d:30:5b:b8:08:16:f6:66:22:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A2:5E:08:17:C3:78:12:32:6A:F6:75:59:CB:4A:96:BE:36:D2:F7
X509v3 Authority Key Identifier:
keyid:A9:CB:C1:26:ED:4D:93:5C:11:CE:B9:DC:F7:D9:72:8C:C4:EE:81:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcvBJu1Nk1wRzrnc99lyjMTugQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/8KJeCBfDeBIyavZ1WctKlr420vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.240.0/20
178.216.144.0/21
213.226.224.0-213.226.247.255
IPv6:
2a02:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
8b:75:a6:a0:6f:46:ae:4d:41:c2:ac:ca:ba:a8:15:8f:c4:cf:
96:4e:14:02:30:8e:24:c2:9d:e1:cb:1a:60:b7:45:80:93:e7:
e7:55:e7:18:d6:6a:d5:79:11:9c:e4:81:aa:83:0a:e6:4e:9e:
66:b8:84:af:31:ee:1a:fb:27:90:0e:da:01:4f:5b:30:80:e4:
92:c6:ad:ee:66:8d:7d:bd:52:e6:99:ba:a9:3b:f9:ea:0a:06:
20:55:83:74:be:c4:02:c4:e3:1c:17:cb:a5:39:12:ec:15:e5:
73:aa:4b:1b:e1:30:8b:8f:ed:9c:e5:58:10:99:c8:b7:54:8f:
64:e5:eb:7b:43:fb:02:d2:2f:d3:68:48:75:28:50:3e:62:6e:
18:8a:bc:26:dc:d6:e0:02:d2:9d:10:d3:b1:18:1a:ed:cc:da:
ce:53:a7:d7:7e:cd:29:38:97:02:ac:e2:84:13:16:d0:d7:5c:
bd:96:0f:1f:6f:fe:41:2f:f9:37:35:2e:55:51:fc:7e:09:41:
93:cb:a5:15:39:63:1f:af:d0:c9:f6:2f:9c:26:9b:2f:ea:6f:
68:c1:ea:86:a3:f0:7c:59:f7:44:7f:cc:c7:bc:45:b8:d1:e6:
16:8d:68:92:f0:39:f2:d3:c3:40:4d:46:de:8b:6d:2c:0e:74:
11:0a:4a:90
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZzW3FlXvKzYo+LHrJ747zmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Y2JjMTI2ZWQ0ZDkzNWMxMWNlYjlkY2Y3ZDk3MjhjYzRl
ZTgxMDAwHhcNMjYwMzEwMDgyODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGEyNWUwODE3YzM3ODEyMzI2YWY2NzU1OWNiNGE5NmJlMzZkMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SrzSYzDK/u5FF29m8xTx/MFvuyE
8TYJpf75waNOsHSNVrgxiFOb4bXMM6C6GV7NejfnHf0I5OgCSZ3+Dpmm6HIwAJlG
j6wU+iCSPOV3TekJOFUt3XHX8Nt6sVJvISZplGUltKaXAZ+nJF39wbzduvMBGlQJ
3CUDQ06W/WlTFjSC5aaSxdvz0k4xZRIfnEdB+ZiyMljV+PX/Pe3CNNyLjfjwCwL4
MEIb5tBiwLwMZkCs/cmd4KVXZk3L4Dqw6pj4xj+tNM02A0woPLeVNxYF6qfYVs75
TDt6ynQYU81fXEswJlcXkRkyrLi9G/S3PYvB7B4ztLUtMFu4CBb2ZiJJYQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFPCiXggXw3gSMmr2dVnLSpa+NtL3MB8GA1UdIwQY
MBaAFKnLwSbtTZNcEc653PfZcozE7oEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWN2Qkp1MU5rMXdSenJuYzk5bHlqTVR1Z1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zZGUxMWUtNmU2My00MjI0LThlNDIt
OTk1YTI4ZjMxMGUyLzEvOEtKZUNCZkRlQkl5YXZaMVdjdEtscjQyMHZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zZGUxMWUtNmU2My00MjI0LThlNDItOTk1YTI4ZjMxMGUy
LzEvcWN2Qkp1MU5rMXdSenJuYzk5bHlqTVR1Z1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQET43wAwQD
stiQMAwDBAXV4uADBAPV4vAwDQQCAAIwBwMFAyoCXQAwDQYJKoZIhvcNAQELBQAD
ggEBAIt1pqBvRq5NQcKsyrqoFY/Ez5ZOFAIwjiTCneHLGmC3RYCT5+dV5xjWatV5
EZzkgaqDCuZOnma4hK8x7hr7J5AO2gFPWzCA5JLGre5mjX29UuaZuqk7+eoKBiBV
g3S+xALE4xwXy6U5EuwV5XOqSxvhMIuP7ZzlWBCZyLdUj2Tl63tD+wLSL9NoSHUo
UD5ibhiKvCbc1uAC0p0Q07EYGu3M2s5Tp9d+zSk4lwKs4oQTFtDXXL2WDx9v/kEv
+Tc1LlVR/H4JQZPLpRU5Yx+v0Mn2L5wmmy/qb2jB6oaj8HxZ90R/zMe8RbjR5haN
aJLwOfLTw0BNRt6LbSwOdBEKSpA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:56 2026 by rpki-client