Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/8HAXP0NYuNkh6EyoveYUGpIkxSg.roa
File: 8HAXP0NYuNkh6EyoveYUGpIkxSg.roa (raw, json)
Hash identifier: GuE049OXvSIVDUXmahqcqeUvOGnhrhD008vD02DXH2w=
Subject key identifier: F0:70:17:3F:43:58:B8:D9:21:E8:4C:A8:BD:E6:14:1A:92:24:C5:28
Certificate issuer: /CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Certificate serial: 019F2368D419E5FF42AFEB8E40145FFF34B0
Authority key identifier: 73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/8HAXP0NYuNkh6EyoveYUGpIkxSg.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204324
IP address blocks: 185.252.40.0/24 maxlen: 24
185.252.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d4:19:e5:ff:42:af:eb:8e:40:14:5f:ff:34:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f070173f4358b8d921e84ca8bde6141a9224c528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:4d:9e:22:c7:d6:d4:2c:83:65:35:43:6d:
3b:5b:05:d5:ce:29:a1:6b:a7:e9:b7:5b:fe:ea:eb:
91:2a:16:50:e2:0b:da:7f:04:43:78:0d:b7:72:3f:
80:df:02:b4:60:8d:e1:1b:d7:be:27:3e:c2:be:17:
b3:c0:45:ff:d1:49:f0:09:13:a6:15:a9:ff:41:45:
7a:e3:63:5d:9c:77:78:05:8b:d6:5f:f7:83:38:36:
e2:f8:bb:43:6a:7b:9f:2e:9f:f5:32:2e:45:22:d4:
f1:61:12:7d:39:ea:8c:95:76:7e:bd:e3:26:25:1a:
bf:a6:e4:70:59:1f:ca:e3:26:4c:2c:ab:56:7b:37:
f7:bf:7e:79:39:af:5c:03:cb:76:e0:91:da:65:d1:
28:79:d3:92:7f:75:19:d0:1c:b1:0a:91:cb:b7:ae:
4a:17:d1:dc:2c:0f:72:a2:4c:fa:d6:b2:b4:77:ce:
08:3d:aa:f8:c9:8d:ac:c2:43:f7:94:22:d4:0a:28:
dd:db:ef:f0:02:4d:6f:ec:8e:da:6f:a9:2a:eb:26:
c4:45:e6:c8:2b:22:02:3e:af:4d:6b:a1:6d:fc:fd:
98:3a:8b:8d:c2:d3:42:6d:8d:87:1e:cc:66:8a:36:
75:0d:ab:01:b7:c9:c6:da:ec:70:09:dc:1e:7a:d8:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:70:17:3F:43:58:B8:D9:21:E8:4C:A8:BD:E6:14:1A:92:24:C5:28
X509v3 Authority Key Identifier:
keyid:73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/8HAXP0NYuNkh6EyoveYUGpIkxSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.40.0/23
Signature Algorithm: sha256WithRSAEncryption
18:53:53:11:ae:bb:4c:e4:0c:59:fd:f0:db:1b:4e:f2:00:0e:
16:c5:1c:08:55:01:b3:cb:f3:d2:47:ce:b5:18:b7:82:eb:3e:
b0:85:5f:c5:8f:d5:f4:6f:15:46:10:9c:69:b2:9b:99:5f:a5:
6a:86:12:9f:70:dd:e0:06:b5:ef:48:af:94:52:00:13:ff:b0:
99:6b:79:54:98:a8:8d:e6:7a:01:1a:d8:f0:c8:97:63:62:28:
49:b2:a6:66:3e:26:f8:f1:21:b2:c0:be:c8:3c:67:8e:a1:d7:
8b:80:af:ec:49:3c:72:ea:c1:43:da:2a:ed:f9:4a:cb:5a:3a:
83:3a:1a:92:0f:3c:3b:2b:ef:a1:48:97:3c:b4:35:10:2f:4f:
93:20:70:41:fc:25:ee:a9:5e:78:52:e5:93:db:c6:90:99:49:
9e:43:1c:87:1c:26:67:08:43:e1:6a:51:33:56:7d:71:3a:1b:
37:d1:ff:91:c5:23:90:12:95:7d:2d:cc:54:2f:9b:16:0f:0c:
9d:a1:63:88:ce:c0:89:4e:5d:d6:76:26:49:09:a2:d5:52:15:
63:62:e6:34:f3:58:b1:07:0e:63:33:d9:3a:ad:46:6a:a0:71:
60:8f:83:2d:05:e5:f2:5a:b6:b1:5c:40:3c:b4:10:e6:4f:70:
13:fc:ab:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaNQZ5f9Cr+uOQBRf/zSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNTRiNmY0MTQ1YTdhZjUwZGM1YzExNTUwM2I3ZDI4ZGUx
YjBjNDQwHhcNMjYwNzAyMTUxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDcwMTczZjQzNThiOGQ5MjFlODRjYThiZGU2MTQxYTkyMjRjNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM1NniLH1tQsg2U1Q207WwXVzimh
a6fpt1v+6uuRKhZQ4gvafwRDeA23cj+A3wK0YI3hG9e+Jz7CvhezwEX/0UnwCROm
Fan/QUV642NdnHd4BYvWX/eDODbi+LtDanufLp/1Mi5FItTxYRJ9OeqMlXZ+veMm
JRq/puRwWR/K4yZMLKtWezf3v355Oa9cA8t24JHaZdEoedOSf3UZ0ByxCpHLt65K
F9HcLA9yokz61rK0d84IPar4yY2swkP3lCLUCijd2+/wAk1v7I7ab6kq6ybERebI
KyICPq9Na6Ft/P2YOouNwtNCbY2HHsxmijZ1DasBt8nG2uxwCdweetipRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBwFz9DWLjZIehMqL3mFBqSJMUoMB8GA1UdIwQY
MBaAFHNUtvQUWnr1DcXBFVA7fSjeGwxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzFTMjlCUmFldlVOeGNFVlVEdDlLTjRiREVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUt
OWMxYTUzNTgwZTM5LzEvOEhBWFAwTll1TmtoNkV5b3ZlWVVHcElreFNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUtOWMxYTUzNTgwZTM5
LzEvYzFTMjlCUmFldlVOeGNFVlVEdDlLTjRiREVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufwoMA0G
CSqGSIb3DQEBCwUAA4IBAQAYU1MRrrtM5AxZ/fDbG07yAA4WxRwIVQGzy/PSR861
GLeC6z6whV/Fj9X0bxVGEJxpspuZX6VqhhKfcN3gBrXvSK+UUgAT/7CZa3lUmKiN
5noBGtjwyJdjYihJsqZmPib48SGywL7IPGeOodeLgK/sSTxy6sFD2irt+UrLWjqD
OhqSDzw7K++hSJc8tDUQL0+TIHBB/CXuqV54UuWT28aQmUmeQxyHHCZnCEPhalEz
Vn1xOhs30f+RxSOQEpV9LcxUL5sWDwydoWOIzsCJTl3WdiZJCaLVUhVjYuY081ix
Bw5jM9k6rUZqoHFgj4MtBeXyWraxXEA8tBDmT3AT/Kuu
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:57 2026 by rpki-client