Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/8NyInp4NQyeUXdT0-Pl7fDVHE3E.roa
File: 8NyInp4NQyeUXdT0-Pl7fDVHE3E.roa (raw, json)
Hash identifier: WcPeEgtt73K4ehMT5+jBlt03GxGOky6ICfK40znhj7Y=
Subject key identifier: F0:DC:88:9E:9E:0D:43:27:94:5D:D4:F4:F8:F9:7B:7C:35:47:13:71
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A19BD0558BA4ECB770C4683641728DF44F
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/8NyInp4NQyeUXdT0-Pl7fDVHE3E.roa
Signing time: Mon 02 Nov 2026 10:31:24 +0000
ROA not before: Mon 02 Nov 2026 10:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200590
IP address blocks: 194.156.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:d0:55:8b:a4:ec:b7:70:c4:68:36:41:72:8d:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Nov 2 10:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0dc889e9e0d4327945dd4f4f8f97b7c35471371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:d9:02:f0:85:e6:2a:39:f8:2e:e1:38:d2:
ca:ee:79:13:1e:d6:00:7d:98:73:88:fb:ab:44:ba:
18:93:df:48:37:64:9a:77:86:8b:0d:0c:f1:09:26:
9e:4d:22:5a:78:14:dd:51:09:b9:84:36:7a:c2:69:
6d:b1:72:fa:da:54:d4:99:bb:f8:a8:a2:5f:13:79:
68:df:80:cc:97:f4:1d:50:89:d3:07:13:3a:aa:ca:
ef:f5:f4:39:e7:9b:8d:e2:b2:99:fb:70:db:c5:1d:
4b:cc:73:27:d0:6f:b1:88:8f:b0:93:1f:ad:91:44:
43:1e:bb:b6:9f:06:ac:15:dc:39:45:c7:fa:cc:00:
e6:34:1c:0c:12:0f:38:4c:82:88:bc:37:6b:46:64:
48:a6:c0:a4:d7:3d:93:64:05:a4:ca:b5:34:fb:05:
01:fe:6b:04:27:d8:b2:b3:94:2b:c3:56:bc:68:78:
12:89:22:8b:17:55:9e:be:ac:bd:c9:21:3a:2a:b7:
ae:3f:e6:3a:f1:1b:63:3d:e7:d7:90:8a:58:d6:d1:
87:65:24:b0:2e:a9:51:21:d0:2f:29:a6:24:90:92:
74:88:ba:0c:ae:0f:f5:8c:f5:a8:d0:24:b9:03:48:
9a:ae:b6:97:b5:66:bb:e5:c2:37:d0:a6:2c:a1:88:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DC:88:9E:9E:0D:43:27:94:5D:D4:F4:F8:F9:7B:7C:35:47:13:71
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/8NyInp4NQyeUXdT0-Pl7fDVHE3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.103.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:17:84:58:25:28:cc:eb:5f:6e:b2:af:68:4a:5f:e3:e9:05:
fc:27:2a:16:62:57:2c:c3:a3:e9:8a:8a:46:19:cc:58:d1:42:
a3:04:f0:e9:d7:d3:2e:a2:89:fd:ec:6e:16:5b:33:99:83:79:
84:46:b0:74:c2:d6:10:71:a6:4f:9b:fd:54:63:1c:61:ed:9f:
c8:71:f1:fa:61:27:85:c9:93:3c:a7:f4:0f:5b:9e:d8:40:5a:
b6:45:ac:a5:e3:0d:0e:52:a8:01:4b:5c:c7:b3:f9:00:e2:b0:
cc:da:6f:e9:ee:e2:89:82:a7:db:a4:84:26:94:dc:60:eb:16:
31:a0:a3:d7:ef:84:bb:c4:94:d3:3b:3e:a9:1f:89:7c:5f:1c:
ee:d9:62:09:d2:7c:17:ee:f5:d3:45:46:86:ca:33:e9:8b:66:
70:85:7f:82:97:97:8d:fd:3e:6b:14:4e:df:a7:90:75:18:d3:
2d:90:bf:a0:0d:46:cf:09:5a:bc:49:29:5c:a0:f9:eb:2b:f0:
19:01:7a:92:ef:53:4e:d2:69:4c:47:07:b0:d0:13:e7:40:0f:
30:e2:81:fc:fa:66:1d:f5:d1:9b:25:43:9d:8d:5d:ac:10:80:
fd:f0:61:c8:bf:80:b8:d3:c6:b0:ce:e0:55:25:b3:36:b8:50:
a0:af:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:59:42 2026 by rpki-client