Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/g8OeD6r4eDhEMPfn3414hxmiJ9E.roa
File: g8OeD6r4eDhEMPfn3414hxmiJ9E.roa (raw, json)
Hash identifier: vf8SgCNUJ5bvvP0Qcq/M5qlOlr7ChLm0AoSQHa3FUFo=
Subject key identifier: 83:C3:9E:0F:AA:F8:78:38:44:30:F7:E7:DF:8D:78:87:19:A2:27:D1
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D008772CEF9ACF38169C5C2AFA0A5DA55
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/g8OeD6r4eDhEMPfn3414hxmiJ9E.roa
Signing time: Wed 18 Mar 2026 10:39:29 +0000
ROA not before: Wed 18 Mar 2026 10:39:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 14.102.53.0/24 maxlen: 24
158.173.164.0/24 maxlen: 24
158.173.219.0/24 maxlen: 24
212.32.68.0/24 maxlen: 24
212.32.69.0/24 maxlen: 24
212.32.72.0/24 maxlen: 24
213.254.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:87:72:ce:f9:ac:f3:81:69:c5:c2:af:a0:a5:da:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 18 10:39:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83c39e0faaf878384430f7e7df8d788719a227d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e7:44:bb:4d:f7:fc:e0:c4:f8:60:30:ad:66:
97:5b:1f:f3:a3:db:7b:21:d6:44:89:18:dc:cc:d2:
f2:dc:4f:fb:85:a9:a9:59:d3:90:93:0c:5c:be:f9:
32:2e:ce:b7:b8:22:d1:8d:f7:86:44:4e:6c:cb:a8:
23:8e:08:cf:4e:e2:09:0e:08:ab:34:c1:4a:15:a5:
08:72:0b:ca:03:c9:5f:d6:43:c3:f4:1b:42:18:15:
4a:59:cc:81:ca:c4:16:51:31:e8:17:78:ea:09:29:
78:df:da:ac:92:50:90:a7:79:ec:31:a7:b4:d1:ab:
7a:68:70:1f:23:8b:fd:57:84:c2:a7:20:3f:f7:51:
7d:71:a0:ea:df:5c:b1:d9:b7:2d:d0:e0:c7:2d:19:
ae:2e:26:44:6a:ba:bd:b9:d9:b4:da:b0:ff:cd:56:
92:16:7e:4d:f8:bf:e6:ed:27:c9:26:47:b9:99:18:
e6:f5:42:c4:8d:f1:64:78:3a:33:ae:a6:c0:79:5d:
ea:c7:ad:53:ec:b1:c0:8e:e1:47:a7:6b:6b:14:eb:
c6:99:1f:da:80:eb:73:b8:e1:dd:3e:1b:fd:93:9d:
a3:2e:d9:43:31:d6:29:4b:e9:3d:b0:57:eb:9a:82:
0d:8c:88:58:6b:55:46:30:85:04:e4:b7:fb:9a:1f:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:9E:0F:AA:F8:78:38:44:30:F7:E7:DF:8D:78:87:19:A2:27:D1
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/g8OeD6r4eDhEMPfn3414hxmiJ9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.53.0/24
158.173.164.0/24
158.173.219.0/24
212.32.68.0/23
212.32.72.0/24
213.254.161.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a0:7e:43:2b:f3:d9:38:02:0b:4b:eb:82:6f:9b:5c:f9:a6:
a1:52:9c:fa:37:c1:36:e8:66:47:0d:7c:92:93:bd:93:09:ac:
26:1c:22:1a:01:6b:c4:08:17:de:45:b2:95:e6:e1:f1:4f:65:
69:ad:1b:a4:ab:c3:2c:77:c4:26:a8:aa:6c:07:a5:08:0a:68:
e4:c8:2f:88:27:bb:de:46:6b:64:bb:30:ed:44:42:23:21:4b:
ef:08:e6:f2:bc:03:a6:ae:dd:fe:ec:69:37:c0:3d:dc:09:19:
4c:37:d6:63:d3:36:0d:8d:71:a3:b3:73:c8:33:8c:de:47:7d:
0f:34:1f:e4:94:b7:3d:62:30:a6:8c:9e:b3:3e:ab:02:d6:84:
c6:4c:e6:54:5a:ce:28:44:03:5f:35:5c:32:35:7d:62:76:37:
35:7e:8c:06:13:1a:7a:41:99:bb:b7:7e:80:87:5f:c3:06:00:
f3:db:f9:bc:6a:d4:72:81:4c:02:eb:50:ad:9c:c5:e4:b4:77:
a9:5d:bb:6d:11:e8:9a:72:7e:c3:b8:4e:04:41:ff:8d:50:ad:
03:4b:9d:5e:8f:4a:49:a1:20:ba:d3:79:9a:9d:a6:bd:26:3a:
16:86:5b:04:85:83:55:d6:fa:49:17:95:cc:59:68:2e:3c:c4:
e2:be:9d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:43 2026 by rpki-client