Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8wrMXoTx_3Qa8hFZdXNTjqGbxCg.roa
File: 8wrMXoTx_3Qa8hFZdXNTjqGbxCg.roa (raw, json)
Hash identifier: 6iUBY5VR98XzxRfXdLLY48/7yKnQPkwtpxJ7Lmvs/LM=
Subject key identifier: F3:0A:CC:5E:84:F1:FF:74:1A:F2:11:59:75:73:53:8E:A1:9B:C4:28
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 01A120B9E1823699B9A39C5222CC0C49D0EA
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8wrMXoTx_3Qa8hFZdXNTjqGbxCg.roa
Signing time: Fri 09 Oct 2026 12:53:35 +0000
ROA not before: Fri 09 Oct 2026 12:53:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201201
IP address blocks: 86.38.129.0/24 maxlen: 24
89.117.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:b9:e1:82:36:99:b9:a3:9c:52:22:cc:0c:49:d0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 9 12:53:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f30acc5e84f1ff741af211597573538ea19bc428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:b7:a1:85:fe:d8:85:cf:f8:0c:a9:53:af:
b0:75:6e:eb:13:5b:1b:86:12:7f:2a:f8:0f:e4:f5:
82:b9:50:7c:4e:73:e2:46:8b:c3:25:a0:03:40:e0:
46:34:1d:91:d3:ae:ef:d4:40:0f:00:db:8c:ae:b1:
15:10:56:23:75:d1:60:13:bd:49:80:fb:71:02:25:
cc:0f:af:3e:79:1f:bd:bd:3a:b2:63:bb:90:fe:10:
5f:39:fc:35:f8:75:f4:aa:4a:3d:58:00:26:2c:f5:
20:e3:f7:62:d1:84:c8:4a:11:f3:0f:2a:16:0d:51:
c0:d7:b9:4c:84:e0:40:20:99:08:6a:b8:6b:ac:48:
ef:d4:83:6a:c7:f7:bd:17:27:25:eb:c0:5e:12:13:
17:3c:9f:de:24:4f:26:c4:9b:af:e6:c6:1c:4a:f6:
eb:01:b1:68:36:fb:f2:cd:33:ae:a5:f4:7d:19:fe:
76:4f:b7:7a:7e:fb:fa:d8:30:8e:4d:96:ed:36:a3:
e4:c2:fe:b5:dc:ef:f2:82:80:5f:97:38:ef:d2:48:
d3:80:4e:f9:dc:2d:08:67:40:ae:76:b5:ec:04:c1:
48:10:b5:61:23:6d:6a:f0:c9:a4:1e:08:b6:73:0e:
20:cf:73:79:21:71:b1:4b:9b:4f:70:bb:f6:dc:6f:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0A:CC:5E:84:F1:FF:74:1A:F2:11:59:75:73:53:8E:A1:9B:C4:28
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8wrMXoTx_3Qa8hFZdXNTjqGbxCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.129.0/24
89.117.241.0/24
Signature Algorithm: sha256WithRSAEncryption
86:fa:5a:87:8f:bf:4b:ef:38:0c:c7:aa:64:57:fb:c6:7e:f8:
3f:fa:46:ab:81:09:9a:0d:81:60:a7:ba:40:0d:60:c0:04:85:
f7:43:15:bd:7f:18:36:41:2d:18:b8:f7:09:5d:93:fe:f7:ba:
14:1b:db:cd:22:05:03:18:b7:c9:88:70:54:63:7e:a8:2b:2f:
c8:33:c4:42:68:0b:e7:e0:a2:33:9a:ab:98:7d:26:9c:4b:47:
cb:ce:ab:0c:53:cf:d2:21:8b:4a:ec:46:9b:cb:2e:4e:4d:f2:
22:f4:7b:2b:95:21:d6:4e:0b:4e:ed:1c:ec:91:24:b6:6b:11:
61:56:c0:cd:f2:f8:83:65:c0:28:c2:30:a2:da:ac:82:f8:43:
9d:c8:13:f7:0b:fe:8b:12:bd:41:60:29:9d:a0:d8:ab:51:16:
16:c5:de:d4:e3:0a:ac:bb:a3:e3:5a:63:8e:3b:a4:fa:ee:50:
94:6a:eb:f2:37:4e:17:40:f7:6a:1c:15:01:d2:c7:97:38:20:
47:b5:12:4c:0f:46:21:e2:2f:27:4f:e3:73:91:04:b6:20:c0:
d6:94:1a:07:12:83:eb:48:9d:37:28:50:0b:3b:90:69:7f:3b:
33:38:45:a4:b6:4e:45:ac:bd:99:f9:70:6a:d3:88:c8:a3:ae:
f9:bf:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:23:16 2026 by rpki-client