Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/8mWPiavSIhHhZrr_OyyIC3ldxIU.roa
File: 8mWPiavSIhHhZrr_OyyIC3ldxIU.roa (raw, json)
Hash identifier: 54lDOWiVIqMmT6MqaRlUv+jn9WnmFxvCPORtfhuO2us=
Subject key identifier: F2:65:8F:89:AB:D2:22:11:E1:66:BA:FF:3B:2C:88:0B:79:5D:C4:85
Certificate issuer: /CN=d465ac3621b226bc6916705bb5b2ea9b56259fc1
Certificate serial: 019F236900F408610F5D641F078FF12DC5A0
Authority key identifier: D4:65:AC:36:21:B2:26:BC:69:16:70:5B:B5:B2:EA:9B:56:25:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/8mWPiavSIhHhZrr_OyyIC3ldxIU.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202170
IP address blocks: 185.51.92.0/24 maxlen: 24
185.51.93.0/24 maxlen: 24
185.51.94.0/24 maxlen: 24
185.51.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:f4:08:61:0f:5d:64:1f:07:8f:f1:2d:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d465ac3621b226bc6916705bb5b2ea9b56259fc1
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2658f89abd22211e166baff3b2c880b795dc485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:c5:66:8a:a6:52:c4:1a:bb:20:88:82:49:
d7:ce:b0:e9:e0:a1:61:23:a1:fc:35:58:fa:e0:86:
b7:27:a4:4b:18:47:e8:c3:dc:89:88:86:1a:4f:e5:
a1:d0:3f:28:08:35:8b:b4:66:81:38:c2:8f:5f:f2:
ec:7f:70:38:10:cf:5e:ba:3d:2b:b4:54:9d:f8:d4:
f7:84:07:96:61:42:ec:96:eb:c7:6b:48:48:f0:96:
02:94:08:37:81:f0:5e:73:f9:9b:9c:c8:98:af:73:
81:ad:55:57:f7:f8:68:ec:38:90:13:d3:8d:8c:cf:
89:87:c8:19:fd:41:fc:45:b0:50:c1:21:fe:87:cb:
b4:5b:b8:66:a8:80:50:00:33:79:c0:47:4c:3e:16:
af:35:4c:2f:7f:75:46:e9:7b:90:bf:95:3e:9b:dc:
b1:e5:6c:8b:29:7c:dc:3f:36:7a:8d:b0:41:86:4d:
20:0c:b2:e3:b1:17:44:92:f4:e7:0e:8d:5f:a5:a6:
da:3a:56:d1:f8:4b:49:d4:fb:93:b5:66:26:5b:86:
69:af:58:1e:7b:5d:d6:05:9f:91:68:55:20:d4:ea:
e1:05:a4:6e:75:07:db:28:ba:c9:22:bb:83:01:20:
98:47:71:5d:42:c9:64:d0:b5:07:24:eb:af:d2:ec:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:65:8F:89:AB:D2:22:11:E1:66:BA:FF:3B:2C:88:0B:79:5D:C4:85
X509v3 Authority Key Identifier:
keyid:D4:65:AC:36:21:B2:26:BC:69:16:70:5B:B5:B2:EA:9B:56:25:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/8mWPiavSIhHhZrr_OyyIC3ldxIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.92.0/22
Signature Algorithm: sha256WithRSAEncryption
00:16:1a:50:c2:68:d0:db:c1:bc:95:f5:5d:0b:91:2b:85:2b:
df:e9:7d:db:23:d4:d7:cb:44:78:20:39:ba:34:09:d5:8c:d9:
36:7e:99:da:d6:46:93:a1:86:21:ee:c3:96:44:39:11:ad:41:
a1:4e:44:e5:c2:61:fa:bc:df:1a:48:7c:fa:53:99:45:3a:2d:
a2:a4:5d:e9:b0:bd:ed:9f:dd:e6:2d:91:b9:ab:fb:86:c8:22:
99:65:2d:d4:d1:fa:7a:da:c7:15:77:0f:15:81:f9:b3:4d:a2:
0b:c6:69:0a:5f:84:e3:4c:8a:90:3d:96:a1:2f:19:c9:d0:b8:
0c:b6:29:0d:09:ad:23:20:3d:5b:0d:9f:46:75:3d:2a:40:4b:
e1:fa:09:65:47:fb:bc:7f:f0:00:c5:97:11:a6:ec:b2:1b:f1:
17:02:3f:1a:13:08:1d:43:f2:2a:66:e4:52:2e:b0:bf:b8:fe:
6e:a0:19:76:58:4f:4b:f7:9c:02:32:c8:be:45:e6:e0:ca:2a:
b0:03:d2:1b:8d:8a:0a:aa:c5:82:de:59:bb:b5:a4:dd:e7:c2:
8e:3a:43:36:6a:e8:0a:e8:6b:b3:0e:e0:65:45:a5:23:b0:53:
ed:d7:19:34:b0:73:75:b8:89:f8:53:c1:77:77:fe:85:e9:75:
93:3d:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:10 2026 by rpki-client