Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8xhN75ZTzYfHXA-_GkFPxgLAKco.roa
File: 8xhN75ZTzYfHXA-_GkFPxgLAKco.roa (raw, json)
Hash identifier: nZAOqQypJhwYOieBrhSKP1DS3zqCqCXKGh/wh2MMc6E=
Subject key identifier: F3:18:4D:EF:96:53:CD:87:C7:5C:0F:BF:1A:41:4F:C6:02:C0:29:CA
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F89B9531597EF9C77FD8BD5CD1CC92010
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8xhN75ZTzYfHXA-_GkFPxgLAKco.roa
Signing time: Wed 22 Jul 2026 12:07:31 +0000
ROA not before: Wed 22 Jul 2026 12:07:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 45.144.197.0/24 maxlen: 24
46.244.18.0/24 maxlen: 24
46.244.19.0/24 maxlen: 24
46.244.97.0/24 maxlen: 24
46.244.108.0/23 maxlen: 24
46.244.110.0/24 maxlen: 24
46.244.114.0/24 maxlen: 24
46.244.115.0/24 maxlen: 24
92.240.144.0/22 maxlen: 24
92.240.149.0/24 maxlen: 24
92.240.151.0/24 maxlen: 24
124.198.136.0/22 maxlen: 24
158.173.131.0/24 maxlen: 24
158.173.168.0/22 maxlen: 24
170.62.240.0/22 maxlen: 24
185.51.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:b9:53:15:97:ef:9c:77:fd:8b:d5:cd:1c:c9:20:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 22 12:07:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3184def9653cd87c75c0fbf1a414fc602c029ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:b7:35:c5:52:4b:58:e7:12:68:81:8c:7e:
37:e1:92:d6:b4:cf:51:b1:ef:df:91:4e:79:47:f4:
4d:4f:6c:4a:e0:0d:a7:5b:ff:61:32:db:51:ba:ab:
94:d0:bb:a3:fc:1a:bd:8a:5f:25:8f:2a:8d:d1:00:
1c:11:30:37:a1:0c:a3:b7:84:51:1a:54:dd:5d:77:
16:fe:1f:2b:79:84:1d:b9:4a:0e:6c:b9:0f:a7:5a:
e1:fa:02:eb:5c:d7:e2:48:53:c3:a2:1c:ce:57:c1:
88:fd:49:7f:cd:7b:3b:56:50:8f:b1:5d:c4:b8:19:
9f:50:da:ca:e5:84:47:1f:98:26:8c:c5:fe:2d:e7:
f1:aa:0e:40:b9:11:c5:2c:a9:a9:4e:b6:1b:a8:c7:
13:5d:81:71:b3:13:b7:0a:14:5d:f0:c2:12:b5:fa:
15:b1:d4:55:7a:60:a2:af:e0:ff:db:61:99:36:89:
b9:20:0b:bc:3e:f4:1b:37:c4:fd:c4:7a:07:80:09:
62:08:a7:a9:23:c2:30:cb:31:88:7d:ff:1f:56:48:
39:ed:2c:bd:38:06:10:0c:bf:8f:68:9a:b3:ee:8e:
b7:60:b5:6c:f6:f5:65:f2:16:e5:e8:6d:e1:80:59:
55:1b:b2:49:0a:a7:8a:60:db:69:c9:f8:93:eb:d2:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:4D:EF:96:53:CD:87:C7:5C:0F:BF:1A:41:4F:C6:02:C0:29:CA
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8xhN75ZTzYfHXA-_GkFPxgLAKco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.197.0/24
46.244.18.0/23
46.244.97.0/24
46.244.108.0-46.244.110.255
46.244.114.0/23
92.240.144.0/22
92.240.149.0/24
92.240.151.0/24
124.198.136.0/22
158.173.131.0/24
158.173.168.0/22
170.62.240.0/22
185.51.48.0/22
Signature Algorithm: sha256WithRSAEncryption
52:ee:24:5c:8c:8a:82:c7:cf:3d:e0:5b:5e:55:64:34:ed:26:
f8:c8:99:e7:62:74:17:bf:8a:72:16:84:bc:a8:6e:57:3d:73:
c2:81:a1:84:3c:5e:5a:2e:d8:92:b4:ca:31:26:9d:1b:95:e8:
f0:86:06:74:49:2f:16:8e:f1:a7:e7:6f:10:36:83:7e:fa:11:
98:a4:32:ed:5b:1f:be:b9:d1:8b:35:f3:6e:8b:ed:18:7c:b7:
ac:43:6e:45:f1:c3:9b:d4:b9:0a:02:b5:4b:d5:f9:15:6c:b3:
29:9e:92:bb:94:5d:41:73:16:b2:1a:14:9e:b1:35:f4:d3:a9:
85:e8:b2:61:b5:e4:99:b3:21:45:92:7b:34:26:24:4b:f6:f2:
3f:b8:7c:1d:5f:74:3c:00:bf:80:7f:a8:92:18:0d:87:4a:d7:
32:f6:88:a7:74:44:59:2a:63:ea:12:e5:db:a3:5c:f6:24:88:
50:37:2d:0a:df:85:b7:7d:e7:b1:fe:fb:a0:04:20:b7:c4:03:
91:f2:6c:93:b7:6e:12:59:bc:5f:01:df:15:6f:39:0a:1f:19:
8e:21:01:82:9a:da:00:0c:10:53:ae:82:c1:c1:23:f9:24:1f:
3a:31:c4:73:99:d0:a3:3f:25:54:a8:70:10:77:ae:cc:d4:c1:
e4:f9:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:06 2026 by rpki-client