Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/1-Iasn8QfLlHYw1d3apIIRZdHnTA.roa
File: 1-Iasn8QfLlHYw1d3apIIRZdHnTA.roa (raw, json)
Hash identifier: akuumleUFXeZK5cFHJWvfQVycNhjGDQhhy8k92/fVaI=
Subject key identifier: F8:86:AC:9F:C4:1F:2E:51:D8:C3:57:77:6A:92:08:45:97:47:9D:30
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 019D00EA52BE1FE14CB4EF87C192E09AAC7B
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/1-Iasn8QfLlHYw1d3apIIRZdHnTA.roa
Signing time: Wed 18 Mar 2026 12:27:29 +0000
ROA not before: Wed 18 Mar 2026 12:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 45.94.220.0/22 maxlen: 32
146.19.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:ea:52:be:1f:e1:4c:b4:ef:87:c1:92:e0:9a:ac:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Mar 18 12:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f886ac9fc41f2e51d8c357776a92084597479d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:58:5d:db:00:22:b7:73:a1:75:32:51:70:
11:a0:85:bb:15:bb:9b:37:32:b7:d3:2f:9e:60:73:
e2:62:d4:eb:13:47:b9:51:36:0f:88:f4:48:dd:27:
70:8e:34:88:20:25:53:90:69:5c:e6:b2:20:10:48:
d6:e4:d9:e4:bb:88:6d:b0:d9:04:27:23:1a:80:96:
77:d3:99:ec:61:78:10:a9:46:a9:29:1a:87:9b:a3:
46:09:56:cd:5a:b2:ca:25:a1:b7:0b:70:01:24:b3:
07:5b:92:cd:7b:99:ad:34:cf:86:0e:dc:98:8a:63:
be:a3:a4:c7:a8:34:7a:52:2c:c4:37:84:9a:5f:6a:
6e:b3:a4:33:95:4a:3b:4b:35:81:a7:a6:45:2d:94:
8a:97:82:14:88:3f:a3:9f:62:2a:35:84:8e:e2:9f:
58:ca:e5:94:1c:ae:3c:a6:46:97:42:e5:b8:5b:bf:
a0:7a:5c:8d:52:46:fb:ab:c0:02:43:0f:65:da:f3:
f4:64:5f:b2:4f:48:ba:6b:77:d6:14:36:4f:e4:f8:
0d:61:16:33:30:14:71:5b:50:f4:92:a8:ab:33:59:
45:00:33:57:bf:06:9a:13:2a:d5:1c:e8:93:4b:7d:
fb:e0:48:21:eb:ba:b8:83:9d:59:db:e7:af:ac:eb:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:86:AC:9F:C4:1F:2E:51:D8:C3:57:77:6A:92:08:45:97:47:9D:30
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/1-Iasn8QfLlHYw1d3apIIRZdHnTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.220.0/22
146.19.162.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d3:43:bd:3a:41:2b:ac:73:03:a7:ad:fe:b9:32:03:29:10:
6c:b5:79:74:94:4d:d8:0a:cd:5c:e2:d6:3a:0a:86:90:66:70:
6f:f3:23:be:35:c8:4b:d2:b3:3f:ff:dd:72:7b:3a:65:26:7b:
df:bc:ef:76:2a:51:43:a6:8b:74:d6:57:5b:0c:54:a9:5d:2b:
d9:af:11:cb:c7:30:77:02:87:96:5b:38:79:82:05:97:4a:05:
3d:05:da:06:37:21:40:7a:02:90:64:cc:2f:57:20:cd:49:c9:
87:f9:8f:cc:1f:a0:4e:e1:5d:01:54:41:f5:71:a9:05:de:de:
98:2e:73:57:c1:80:d4:9a:d1:f1:4b:40:91:a1:6d:9b:8d:d9:
19:fa:14:93:9a:37:f6:ff:db:ce:67:a6:76:d5:46:34:f9:ea:
25:2c:ff:0b:dd:13:35:ce:81:29:d3:63:f3:04:ec:77:9b:be:
49:53:b5:f7:ae:29:0c:e5:a5:8a:64:60:8f:52:98:97:90:dc:
c5:0e:ee:3a:74:58:a2:63:5c:1a:2d:dd:13:af:bd:6c:4a:6e:
b5:68:39:f5:b8:75:5c:32:62:85:8e:61:95:2c:4c:d9:6f:59:
3f:63:d8:ae:2e:e3:5e:07:36:18:93:b5:23:79:3a:f8:3f:2b:
9c:3f:ff:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:07 2026 by rpki-client