Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/8b9lZJQie7cjCoccTw9o5N6jdX0.roa
File: 8b9lZJQie7cjCoccTw9o5N6jdX0.roa (raw, json)
Hash identifier: gCAc7Riwd4/zgCRPf+ESh5/KqUCw3rdRTwl6RhutkM8=
Subject key identifier: F1:BF:65:64:94:22:7B:B7:23:0A:87:1C:4F:0F:68:E4:DE:A3:75:7D
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 019CDD591E736D18046C3F7C87079F8D3F18
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/8b9lZJQie7cjCoccTw9o5N6jdX0.roa
Signing time: Wed 11 Mar 2026 14:42:10 +0000
ROA not before: Wed 11 Mar 2026 14:42:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205845
IP address blocks: 45.154.168.0/22 maxlen: 24
185.204.120.0/22 maxlen: 24
185.204.120.0/24 maxlen: 24
185.204.121.0/24 maxlen: 24
2a0a:f740::/29 maxlen: 29
2a0a:f741::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:59:1e:73:6d:18:04:6c:3f:7c:87:07:9f:8d:3f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Mar 11 14:42:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1bf656494227bb7230a871c4f0f68e4dea3757d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:8c:7c:5d:f0:f8:2d:c6:1c:b4:5d:28:5d:
e0:27:83:5d:3b:61:8e:7f:a6:83:d7:28:d0:5c:42:
d0:ca:06:95:9e:62:a5:d9:76:5d:a6:40:c8:db:09:
9e:0a:12:df:c8:d9:33:97:10:b1:5e:e6:37:6d:0b:
cd:c5:0b:a6:c1:d0:ca:c5:59:d5:94:fd:9a:68:54:
a3:d5:3f:7b:82:7c:04:12:20:d5:f1:6a:79:5e:af:
e4:ad:b7:64:74:e7:f2:6a:93:1c:63:ec:d9:ac:70:
52:5e:f4:30:0b:64:c2:fb:cb:bf:bf:bb:88:97:06:
75:67:ae:31:f8:1b:06:b8:d3:72:c1:a2:1c:1a:40:
a2:05:aa:8f:ce:d5:13:1c:54:6e:e8:3f:8f:c2:ae:
0c:37:f8:dd:56:12:ee:e4:00:16:a0:d8:c0:e8:c7:
c5:35:2f:fc:b6:37:95:5e:55:b7:e1:e7:14:5b:71:
3a:3f:8d:14:37:56:1c:44:36:6b:ca:63:40:80:8e:
1a:fe:78:45:73:d5:d9:08:2d:db:2a:8e:f1:77:25:
f6:e5:9e:38:77:6c:bd:4c:17:94:07:40:4b:a4:59:
58:39:c6:d7:29:84:5a:5b:c2:30:1b:dc:90:4a:96:
3d:ce:39:9a:86:6b:0b:75:98:dd:fa:89:f9:de:34:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:65:64:94:22:7B:B7:23:0A:87:1C:4F:0F:68:E4:DE:A3:75:7D
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/8b9lZJQie7cjCoccTw9o5N6jdX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.168.0/22
185.204.120.0/22
IPv6:
2a0a:f740::/29
Signature Algorithm: sha256WithRSAEncryption
95:97:ea:1a:98:30:5f:e6:df:14:6e:be:68:c1:d5:8a:bf:c6:
89:f7:ef:6e:e1:8f:27:6a:28:a4:26:36:37:f9:ee:f2:56:01:
13:8c:5d:7d:28:d4:b4:a1:ce:33:c7:53:e6:de:e9:89:b5:ec:
28:a6:3c:88:14:df:fc:93:69:ff:22:ce:e8:94:79:ca:0f:9c:
a2:6a:4e:10:da:80:41:e8:25:97:b3:51:15:5c:c6:fe:01:3b:
6f:c7:33:a2:ef:76:17:aa:4a:30:53:e6:74:5f:b4:85:a4:c8:
4d:4b:1d:b2:1e:e4:65:bb:e1:ea:76:69:09:b8:3c:ba:db:f4:
21:35:a3:54:2d:7a:81:a2:24:7b:9b:36:d2:6c:85:dc:4d:38:
4a:ad:cc:ea:f8:83:14:3e:e5:94:80:b3:8b:a3:dc:b1:cd:9f:
75:74:d4:9a:05:eb:8f:19:c3:ca:38:7e:12:29:9e:ec:c7:31:
d6:7e:43:af:d3:bf:78:82:8e:fc:69:34:01:96:2d:35:35:df:
66:f8:16:20:67:f1:e1:06:bc:c9:68:1c:aa:8f:78:44:d5:98:
eb:27:2d:a4:73:08:8f:4a:c3:53:c3:be:b0:7a:11:e2:90:89:
29:84:08:f5:12:c8:e7:a6:aa:f9:ec:e7:99:74:7c:ff:01:a7:
6a:bd:c3:8f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZzdWR5zbRgEbD98hwefjT8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOWM0NWU0MzYyNTUyMjA4MGFlYzUzOTUyOTg5YTEzYTI4
YWJkMDAwHhcNMjYwMzExMTQ0MjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWJmNjU2NDk0MjI3YmI3MjMwYTg3MWM0ZjBmNjhlNGRlYTM3NTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuSMfF3w+C3GHLRdKF3gJ4NdO2GO
f6aD1yjQXELQygaVnmKl2XZdpkDI2wmeChLfyNkzlxCxXuY3bQvNxQumwdDKxVnV
lP2aaFSj1T97gnwEEiDV8Wp5Xq/krbdkdOfyapMcY+zZrHBSXvQwC2TC+8u/v7uI
lwZ1Z64x+BsGuNNywaIcGkCiBaqPztUTHFRu6D+Pwq4MN/jdVhLu5AAWoNjA6MfF
NS/8tjeVXlW34ecUW3E6P40UN1YcRDZrymNAgI4a/nhFc9XZCC3bKo7xdyX25Z44
d2y9TBeUB0BLpFlYOcbXKYRaW8IwG9yQSpY9zjmahmsLdZjd+on53jSO+wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPG/ZWSUInu3IwqHHE8PaOTeo3V9MB8GA1UdIwQY
MBaAFCOcReQ2JVIggK7FOVKYmhOiir0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt
OTc1YTIzN2VjZDA2LzEvOGI5bFpKUWllN2NqQ29jY1R3OW81TjZqZFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2
LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZqoAwQC
ucx4MA0EAgACMAcDBQMqCvdAMA0GCSqGSIb3DQEBCwUAA4IBAQCVl+oamDBf5t8U
br5owdWKv8aJ9+9u4Y8naiikJjY3+e7yVgETjF19KNS0oc4zx1Pm3umJtewopjyI
FN/8k2n/Is7olHnKD5yiak4Q2oBB6CWXs1EVXMb+ATtvxzOi73YXqkowU+Z0X7SF
pMhNSx2yHuRlu+HqdmkJuDy62/QhNaNULXqBoiR7mzbSbIXcTThKrczq+IMUPuWU
gLOLo9yxzZ91dNSaBeuPGcPKOH4SKZ7sxzHWfkOv0794go78aTQBli01Nd9m+BYg
Z/HhBrzJaByqj3hE1ZjrJy2kcwiPSsNTw76wehHikIkphAj1Esjnpqr57OeZdHz/
AadqvcOP
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:21 2026 by rpki-client