Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8n4dPL8KLxEQ-2_3ArsmO-lU_E0.roa
File: 8n4dPL8KLxEQ-2_3ArsmO-lU_E0.roa (raw, json)
Hash identifier: sXtsv9v2SK+0bYiMZm7Fq+v0x6S/nkybrqMZTSmGc7o=
Subject key identifier: F2:7E:1D:3C:BF:0A:2F:11:10:FB:6F:F7:02:BB:26:3B:E9:54:FC:4D
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019D18B1AB0B139EB932C3EE895F15CA88C2
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8n4dPL8KLxEQ-2_3ArsmO-lU_E0.roa
Signing time: Mon 23 Mar 2026 03:16:29 +0000
ROA not before: Mon 23 Mar 2026 03:16:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 86.110.34.0/24 maxlen: 24
86.110.44.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:18:b1:ab:0b:13:9e:b9:32:c3:ee:89:5f:15:ca:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Mar 23 03:16:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f27e1d3cbf0a2f1110fb6ff702bb263be954fc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:37:24:17:64:fb:9b:d9:6a:98:3a:0e:81:
d4:44:95:6f:ac:20:59:e2:50:7a:32:ac:53:4a:84:
71:34:05:54:8a:97:4c:fe:cc:34:59:3c:8f:e5:a8:
ff:3c:f0:5a:0e:ad:f2:cc:81:60:91:ea:7a:07:80:
c8:68:21:b5:40:04:bd:e3:8a:4b:b8:61:87:2c:90:
76:be:fa:a2:28:47:4b:c3:6b:93:98:a3:59:ce:d5:
1f:24:9c:a7:53:9b:7b:ce:c0:03:ad:9a:07:16:cf:
b4:da:94:b2:5f:fb:d0:40:e5:e7:67:f9:9e:42:bb:
4a:8f:94:57:37:ba:43:22:ef:f6:6d:4b:44:ec:d4:
46:fa:29:fa:74:f4:54:67:39:32:bb:ef:be:12:e4:
75:fa:b8:d8:fd:7c:59:90:71:f9:16:67:f5:00:cb:
1e:c6:4e:44:d0:1f:bb:b2:85:3f:f2:31:7a:73:60:
fa:de:5f:51:dc:ac:a3:17:89:f6:a3:00:9a:6f:75:
af:46:51:3f:16:1a:d4:25:08:15:53:9c:53:c2:dd:
73:f3:28:d9:08:40:d5:c9:75:74:e6:4e:82:ec:a3:
6a:80:82:27:12:de:06:00:66:d3:ea:3f:2f:9c:af:
5c:2b:ff:7e:72:4f:34:de:81:b8:b1:b2:53:c8:c7:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:1D:3C:BF:0A:2F:11:10:FB:6F:F7:02:BB:26:3B:E9:54:FC:4D
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8n4dPL8KLxEQ-2_3ArsmO-lU_E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
86.110.44.0/24
86.110.58.0/24
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ac:85:4b:92:ca:99:c7:63:4b:3e:be:6e:61:b4:aa:9a:a4:
2c:ac:81:c3:fc:c1:17:ec:c4:c9:a4:d7:00:86:02:3f:41:f4:
f5:b2:53:12:06:8f:30:0e:f1:46:63:47:a4:d2:7c:30:b5:5a:
03:0b:03:73:5e:90:d9:76:b9:6c:d1:a4:fa:37:5a:22:75:08:
37:e1:6c:8e:9d:54:26:51:cb:5c:49:81:ac:89:6c:71:04:ef:
bc:5f:74:bc:8a:da:e7:fb:ac:a2:53:55:bc:77:92:22:3a:7a:
ee:7d:39:70:e0:86:13:ab:f5:3a:4d:7c:7f:c5:e3:54:88:c8:
56:82:e8:2d:b6:ab:5d:ca:97:5d:e4:8e:20:0d:95:38:9d:8c:
2c:b3:ba:8c:da:7d:12:f7:d7:2d:54:5b:9a:9c:c0:eb:f4:9f:
80:08:28:18:ec:f3:56:d1:67:6d:90:3a:57:d6:6e:7e:3f:8a:
e4:0e:a8:7d:99:31:a5:81:70:9a:b7:42:ea:fb:5b:a7:b4:ad:
c8:6e:57:52:32:6c:b5:b0:2b:56:1a:f0:b0:a5:12:2b:61:51:
59:9b:5c:6c:22:2b:e3:7a:1e:f9:eb:f9:30:2b:af:e4:62:1e:
ee:e0:fd:39:a9:93:15:eb:ce:0c:57:5a:c9:95:a0:b6:fa:ee:
14:7b:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:18 2026 by rpki-client