Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8VBWQ2XfCMC5lByDcRYfdGeXThw.roa
File: 8VBWQ2XfCMC5lByDcRYfdGeXThw.roa (raw, json)
Hash identifier: HzqPO66uE1+HiOwrkh0W6gUEqECAgV0PXkfjdzoF6Fc=
Subject key identifier: F1:50:56:43:65:DF:08:C0:B9:94:1C:83:71:16:1F:74:67:97:4E:1C
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368A98CCA82E3EA8C088B35ABF08E1C
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8VBWQ2XfCMC5lByDcRYfdGeXThw.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5396
IP address blocks: 195.130.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a9:8c:ca:82:e3:ea:8c:08:8b:35:ab:f0:8e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f150564365df08c0b9941c8371161f7467974e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:d3:e5:52:fe:27:14:38:39:70:51:ed:7f:
75:72:0f:7e:9b:7f:34:7f:ce:34:e7:a8:2c:20:19:
0d:70:e1:68:72:0b:64:99:69:de:e7:18:f9:69:ff:
ad:3a:5f:f0:be:f4:d8:5f:36:c2:24:73:5a:2e:c8:
00:d7:94:30:0f:97:07:87:26:ad:29:12:96:b6:3b:
18:b6:f8:4a:3c:2b:1d:e8:87:9b:30:1c:50:5b:03:
88:79:39:9c:2b:34:e0:b0:a2:27:9a:5d:92:88:08:
db:66:81:a3:04:7c:5a:6d:cf:55:01:2e:df:f3:ad:
7e:30:19:83:d7:84:c0:69:2a:4c:1d:de:fa:4a:3d:
20:54:0e:7d:92:1a:f5:63:d4:a1:74:e8:f2:f5:65:
db:13:b7:41:a1:fe:e5:22:fc:0f:77:98:72:bc:13:
e2:3a:a9:cd:9d:16:c3:fc:f9:40:96:a7:79:ad:1f:
99:a5:3b:5d:1a:0e:07:6d:b3:b8:ba:d6:de:b6:f4:
29:b0:f1:02:fa:9c:34:69:45:b7:49:f9:cd:8f:bc:
5e:19:f5:31:11:cb:af:2a:07:2c:b0:9a:70:e9:d3:
91:30:db:cb:56:7a:a3:45:b9:5f:cc:7e:c3:ee:ac:
f7:12:7c:1b:14:f0:c3:0d:cc:cd:39:f4:f0:bc:a5:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:50:56:43:65:DF:08:C0:B9:94:1C:83:71:16:1F:74:67:97:4E:1C
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8VBWQ2XfCMC5lByDcRYfdGeXThw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:26:31:ba:d6:98:19:23:cd:5f:f6:57:cd:5f:34:01:1c:bf:
a2:93:da:e1:4c:e6:a6:f7:43:2b:df:81:d3:28:1a:51:ac:c5:
2e:fb:ff:5f:2e:49:f6:dd:17:6c:6b:18:47:e5:8a:01:3e:f6:
c7:f8:21:cd:cc:65:f1:66:d2:4c:da:1f:b4:9f:6c:8d:27:92:
3c:18:2b:e1:c0:10:b4:07:0a:7d:f6:1b:30:29:d5:25:27:0b:
71:b4:8e:ee:4d:89:ff:c5:eb:56:1a:ae:a7:79:ac:0f:f4:f6:
67:07:0a:32:3a:3d:d7:59:98:fa:f6:04:ce:2f:0c:20:14:38:
c1:1d:68:5a:b9:66:5e:b7:e1:75:bf:4a:b3:c1:98:7a:d9:af:
c6:63:62:bf:70:e4:d3:a6:b2:19:d7:e7:15:4f:62:6f:f3:ec:
e8:3a:15:ca:c9:01:17:ef:19:b4:e7:3a:0c:ba:46:1d:6c:2e:
5a:30:b6:75:da:aa:3d:b0:b3:88:5f:5b:90:11:f2:fc:1c:2e:
46:fe:5b:89:f7:f7:ee:df:f9:1f:fa:01:02:c3:6e:05:ee:f5:
15:70:23:67:28:49:8d:44:ba:1e:75:82:ae:7b:9b:46:39:4c:
33:8f:a6:85:ce:14:fb:89:58:a6:b0:ee:ae:eb:56:fa:5f:e3:
ad:4b:62:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaKmMyoLj6owIizWr8I4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzk5NTMxNGQ3YzJjNzA1M2IxY2ZmM2UxM2Y5NjUwMmFh
ZWFiY2YwHhcNMjYwNzAyMTUxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTUwNTY0MzY1ZGYwOGMwYjk5NDFjODM3MTE2MWY3NDY3OTc0ZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18HT5VL+JxQ4OXBR7X91cg9+m380
f84056gsIBkNcOFocgtkmWne5xj5af+tOl/wvvTYXzbCJHNaLsgA15QwD5cHhyat
KRKWtjsYtvhKPCsd6IebMBxQWwOIeTmcKzTgsKInml2SiAjbZoGjBHxabc9VAS7f
861+MBmD14TAaSpMHd76Sj0gVA59khr1Y9ShdOjy9WXbE7dBof7lIvwPd5hyvBPi
OqnNnRbD/PlAlqd5rR+ZpTtdGg4HbbO4utbetvQpsPEC+pw0aUW3SfnNj7xeGfUx
EcuvKgcssJpw6dORMNvLVnqjRblfzH7D7qz3EnwbFPDDDczNOfTwvKX9zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFQVkNl3wjAuZQcg3EWH3Rnl04cMB8GA1UdIwQY
MBaAFPA5lTFNfCxwU7HP8+E/llAqrqvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERtVk1VMThMSEJUc2NfejRULVdVQ3F1cTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvOFZCV1EyWGZDTUM1bEJ5RGNSWWZkR2VYVGh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvOERtVk1VMThMSEJUc2NfejRULVdVQ3F1cTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4LDMA0G
CSqGSIb3DQEBCwUAA4IBAQC2JjG61pgZI81f9lfNXzQBHL+ik9rhTOam90Mr34HT
KBpRrMUu+/9fLkn23RdsaxhH5YoBPvbH+CHNzGXxZtJM2h+0n2yNJ5I8GCvhwBC0
Bwp99hswKdUlJwtxtI7uTYn/xetWGq6neawP9PZnBwoyOj3XWZj69gTOLwwgFDjB
HWhauWZet+F1v0qzwZh62a/GY2K/cOTTprIZ1+cVT2Jv8+zoOhXKyQEX7xm05zoM
ukYdbC5aMLZ12qo9sLOIX1uQEfL8HC5G/luJ9/fu3/kf+gECw24F7vUVcCNnKEmN
RLoedYKue5tGOUwzj6aFzhT7iVimsO6u61b6X+OtS2IM
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:14 2026 by rpki-client