Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/8dUy_LeA_dHCwYCNdghObTD8feU.roa
File: 8dUy_LeA_dHCwYCNdghObTD8feU.roa (raw, json)
Hash identifier: op6GapHbefJigi80QGwl7q9Vvm0nS8W9VoaYmo2946I=
Subject key identifier: F1:D5:32:FC:B7:80:FD:D1:C2:C1:80:8D:76:08:4E:6D:30:FC:7D:E5
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 01A0E98701C0A4D636C4AA69489E8947E02E
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/8dUy_LeA_dHCwYCNdghObTD8feU.roa
Signing time: Mon 28 Sep 2026 19:38:54 +0000
ROA not before: Mon 28 Sep 2026 19:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209505
IP address blocks: 89.33.9.0/24 maxlen: 24
185.250.8.0/22 maxlen: 22
2a0b:9400::/30 maxlen: 30
2a0b:9404::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:87:01:c0:a4:d6:36:c4:aa:69:48:9e:89:47:e0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Sep 28 19:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1d532fcb780fdd1c2c1808d76084e6d30fc7de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:30:e0:dd:74:f4:d6:9f:52:63:0b:ac:b0:
c8:57:a0:7b:e3:77:1c:88:cf:cc:43:d1:0d:a8:08:
82:87:33:fc:e7:70:1a:df:5b:51:34:eb:87:bc:83:
4e:89:88:12:4b:3e:9b:07:d6:00:4c:20:a1:81:fb:
56:b2:c7:a6:b7:cf:1f:c9:8e:5e:4c:ce:e3:d9:02:
79:55:de:32:42:b0:70:1d:e2:c5:9b:aa:da:1e:ee:
37:1f:74:35:19:06:d5:e8:08:33:63:c6:a0:42:a5:
22:bb:1f:94:88:ed:7d:b7:61:39:7a:c4:fd:31:26:
35:6d:11:77:be:52:55:21:4b:1b:90:2d:87:0b:ce:
ff:ab:dd:1b:60:6f:a7:aa:f4:96:63:53:43:67:e9:
cf:6d:2a:d7:d4:cd:ae:05:44:63:67:da:0d:c1:95:
e7:c7:02:73:38:b6:4e:cc:12:90:b4:01:e4:09:c2:
30:7b:df:1b:c9:0d:80:77:88:72:a4:7c:57:90:40:
d1:a7:42:78:2f:9f:e1:9f:67:0f:17:fe:b5:64:c9:
5b:ca:2b:c4:03:e0:52:44:f2:ee:de:c8:e5:53:12:
8e:a0:b2:61:c7:2a:b0:2c:8d:4e:71:1c:75:2d:ee:
eb:3d:56:2e:b2:ef:47:28:bb:5e:0a:15:e3:65:7d:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:32:FC:B7:80:FD:D1:C2:C1:80:8D:76:08:4E:6D:30:FC:7D:E5
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/8dUy_LeA_dHCwYCNdghObTD8feU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.9.0/24
185.250.8.0/22
IPv6:
2a0b:9400::-2a0b:9404:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b2:51:0f:05:74:39:87:34:1c:26:19:7f:5d:ae:f9:e1:18:86:
39:d5:23:28:3d:4e:2d:d6:00:01:bf:db:e3:8d:6a:7c:f5:f3:
e2:15:30:f6:2d:5d:39:6b:6b:67:c6:cc:98:84:60:99:0e:48:
70:83:30:6d:ed:80:91:2a:08:70:e7:8b:61:ab:3c:10:bf:55:
03:53:f0:94:be:b7:c6:64:b9:b2:7c:b7:0a:48:a1:5e:ef:9e:
5f:6b:fc:fc:2d:4f:ef:12:05:f7:fe:62:5d:f6:06:8d:94:db:
40:c1:94:51:fe:cd:4f:7d:74:92:49:3a:c0:a5:9c:74:49:21:
90:da:4a:0d:06:ad:04:25:36:ae:bd:cd:43:1e:e7:05:35:8c:
f7:69:23:45:00:81:86:e4:43:02:25:53:51:24:0c:ab:9a:fd:
e0:5c:a9:eb:24:22:9f:6d:b4:3b:5d:a1:65:ba:8e:cb:29:9a:
39:e0:96:8f:37:ee:0f:f8:fc:14:08:70:7f:23:0e:f7:ca:fe:
4e:9a:10:0a:cb:04:36:d0:1c:a8:d1:4a:fa:89:6e:ba:4b:ba:
bd:80:b1:6a:5e:d5:34:ba:eb:f0:fd:86:73:73:2f:a3:77:94:
51:e1:43:3f:81:e1:4e:b6:a0:70:4e:5f:45:59:4c:4c:03:a8:
c9:a4:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:16:52 2026 by rpki-client