Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8mwzZH_OXEz7FA8lqAFXwDrr_Pk.roa
File: 8mwzZH_OXEz7FA8lqAFXwDrr_Pk.roa (raw, json)
Hash identifier: 93ExGCTOLSZ9lGZoFgtRTWfyyivCmciBT/kOyuEIqvw=
Subject key identifier: F2:6C:33:64:7F:CE:5C:4C:FB:14:0F:25:A8:01:57:C0:3A:EB:FC:F9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E026FBD35FA98A50F15A821B942D586C4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8mwzZH_OXEz7FA8lqAFXwDrr_Pk.roa
Signing time: Thu 07 May 2026 12:35:37 +0000
ROA not before: Thu 07 May 2026 12:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 80.240.95.0/24 maxlen: 24
82.152.56.0/24 maxlen: 24
82.152.60.0/24 maxlen: 24
82.152.69.0/24 maxlen: 24
82.152.78.0/24 maxlen: 24
82.152.80.0/24 maxlen: 24
82.152.112.0/24 maxlen: 24
82.152.113.0/24 maxlen: 24
82.152.119.0/24 maxlen: 24
82.152.123.0/24 maxlen: 24
82.152.124.0/24 maxlen: 24
82.152.125.0/24 maxlen: 24
82.152.126.0/24 maxlen: 24
82.152.135.0/24 maxlen: 24
82.152.137.0/24 maxlen: 24
82.152.185.0/24 maxlen: 24
82.152.218.0/24 maxlen: 24
82.152.235.0/24 maxlen: 24
82.152.237.0/24 maxlen: 24
82.152.239.0/24 maxlen: 24
82.153.36.0/24 maxlen: 24
82.153.59.0/24 maxlen: 24
82.153.87.0/24 maxlen: 24
82.153.141.0/24 maxlen: 24
82.153.176.0/24 maxlen: 24
82.153.183.0/24 maxlen: 24
82.153.188.0/24 maxlen: 24
82.153.214.0/24 maxlen: 24
109.176.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:6f:bd:35:fa:98:a5:0f:15:a8:21:b9:42:d5:86:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 7 12:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f26c33647fce5c4cfb140f25a80157c03aebfcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:44:c1:1a:76:39:16:5e:09:f4:9d:90:05:
8a:e9:ab:bb:9c:6c:9a:ca:01:53:80:a7:a3:52:18:
4c:88:d0:4f:52:7f:c0:89:82:4e:81:73:ac:4a:9c:
e3:35:38:0e:05:78:9a:f8:24:78:77:db:c2:0f:1a:
f0:b2:8a:dd:9c:39:a4:c9:2c:a4:96:a6:27:02:2d:
9c:11:64:0b:35:dd:2e:00:06:19:3c:29:76:18:cd:
db:19:cf:79:2f:6a:0c:69:58:dd:a3:59:b4:f3:20:
f5:4b:55:a4:15:d0:5a:d4:2a:f9:8d:27:05:86:ef:
d4:5b:48:e5:b0:26:9a:23:98:48:f7:67:4f:7c:b9:
02:02:56:e0:c9:78:c9:87:d8:13:77:7c:26:85:e5:
21:da:36:85:cd:c5:48:85:0c:be:be:2d:99:64:e9:
e6:0a:71:87:60:bf:d3:74:84:10:5a:76:a3:94:33:
79:b0:34:8f:ac:6e:a3:b3:55:7a:cd:a4:54:aa:4e:
f0:a1:c4:fe:5a:f4:bb:5c:b0:01:c0:03:1c:d4:ce:
6e:32:b6:c3:78:99:ce:9c:d5:3b:a1:8c:fa:a3:ef:
4d:01:3f:2d:57:a7:60:f7:79:f5:2b:e4:b5:d5:38:
07:87:01:f2:6f:e7:1d:60:a4:25:8e:23:cc:6a:6f:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:33:64:7F:CE:5C:4C:FB:14:0F:25:A8:01:57:C0:3A:EB:FC:F9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8mwzZH_OXEz7FA8lqAFXwDrr_Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.95.0/24
82.152.56.0/24
82.152.60.0/24
82.152.69.0/24
82.152.78.0/24
82.152.80.0/24
82.152.112.0/23
82.152.119.0/24
82.152.123.0-82.152.126.255
82.152.135.0/24
82.152.137.0/24
82.152.185.0/24
82.152.218.0/24
82.152.235.0/24
82.152.237.0/24
82.152.239.0/24
82.153.36.0/24
82.153.59.0/24
82.153.87.0/24
82.153.141.0/24
82.153.176.0/24
82.153.183.0/24
82.153.188.0/24
82.153.214.0/24
109.176.20.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ba:0c:0b:b9:de:eb:b5:bf:60:85:db:7c:90:54:75:4c:27:
c6:34:1f:32:bd:e9:3e:55:6b:93:d7:c7:c0:17:f5:d2:d4:e2:
b1:38:71:55:df:cb:c7:66:b7:38:5d:0b:49:d4:77:16:ea:a7:
a1:2a:e1:70:50:dd:ce:4a:84:c6:9d:0e:cc:9d:e2:f0:50:ec:
56:d3:7f:b3:e0:bd:5d:23:9e:89:d5:f5:c3:1a:8a:f3:1e:49:
ec:e2:73:31:ee:63:c8:18:87:ed:bd:96:07:5e:42:7d:18:41:
eb:70:ff:ed:83:4a:ce:b7:ee:58:ad:9c:7b:25:70:b4:80:18:
95:e3:c6:43:c1:08:c9:d9:91:a1:65:f5:07:0d:77:c2:5e:84:
42:44:ac:3a:fc:d2:dd:12:3f:88:cb:7c:53:59:a6:ce:ab:a3:
7e:0f:14:3b:1e:00:a7:09:80:0d:f6:d9:ff:7c:0e:f6:cb:7a:
28:7f:77:3e:ad:64:ff:48:5f:07:c3:ab:e2:62:70:85:13:37:
2c:e4:15:05:31:1a:ec:b4:f9:ac:db:89:38:a5:29:ff:79:a9:
1a:e0:dd:9d:5e:26:f0:09:b8:17:20:bf:0c:50:3e:9d:0c:ba:
d9:69:3c:d3:2e:25:90:27:40:94:6d:19:b4:7c:f3:56:c7:f8:
7f:72:1a:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 06:47:31 2026 by rpki-client