Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/8mGjCH9xqFpZOCJZc787zSGC4EE.roa
File: 8mGjCH9xqFpZOCJZc787zSGC4EE.roa (raw, json)
Hash identifier: kpbH01pKQ8NTLrxbYMEWBBlk5pUCb7DZ0viTFQjgJ0Q=
Subject key identifier: F2:61:A3:08:7F:71:A8:5A:59:38:22:59:73:BF:3B:CD:21:82:E0:41
Certificate issuer: /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial: 019CDC97F0139C9AAD2450913F1BD5116E0B
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/8mGjCH9xqFpZOCJZc787zSGC4EE.roa
Signing time: Wed 11 Mar 2026 11:11:10 +0000
ROA not before: Wed 11 Mar 2026 11:11:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215047
IP address blocks: 185.218.225.0/24 maxlen: 24
217.180.52.0/23 maxlen: 23
2a14:5fc0::/30 maxlen: 30
2a14:5fc4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:97:f0:13:9c:9a:ad:24:50:91:3f:1b:d5:11:6e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Validity
Not Before: Mar 11 11:11:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f261a3087f71a85a5938225973bf3bcd2182e041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:bf:96:f7:2f:61:b6:1b:37:c0:86:30:cc:
81:ff:e2:5b:da:8b:40:5b:f7:90:43:0a:e2:c2:b3:
c9:1c:c4:d8:33:22:f9:af:d0:f9:b6:65:dc:5b:01:
81:24:f1:23:c9:e7:1b:13:bd:e9:e8:93:1a:c4:49:
43:3a:08:d1:2c:52:62:eb:60:cf:7d:bd:eb:57:65:
95:91:42:2e:2f:d6:af:84:6a:7f:f3:0c:23:ae:d7:
b3:28:62:fe:c7:ae:76:4d:f4:01:30:bd:a7:7c:41:
9e:73:76:8b:e9:a7:7b:84:eb:da:ca:0f:8b:32:74:
7d:f5:03:58:bd:8d:ba:88:4d:99:96:c7:cb:f5:e0:
2b:f4:12:b0:ee:18:bf:54:25:cb:34:a6:92:c2:6c:
98:29:f4:51:42:18:05:fb:df:1d:15:57:dc:c5:d5:
d6:9a:12:b3:ae:8a:5f:fb:14:0c:82:69:3c:ea:5a:
83:aa:a2:14:67:14:30:68:16:1c:9f:ec:ff:8c:d4:
b0:1e:17:7d:36:f2:0b:8e:d8:30:dc:36:ac:36:64:
58:31:e6:b3:28:bb:10:ae:02:06:81:62:3e:11:bd:
47:fa:87:d6:71:15:f3:57:84:3a:59:30:a0:8b:30:
fe:22:bc:61:a9:cf:a0:73:56:69:a2:b8:e7:a0:f8:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:A3:08:7F:71:A8:5A:59:38:22:59:73:BF:3B:CD:21:82:E0:41
X509v3 Authority Key Identifier:
keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/8mGjCH9xqFpZOCJZc787zSGC4EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.225.0/24
217.180.52.0/23
IPv6:
2a14:5fc0::/29
Signature Algorithm: sha256WithRSAEncryption
38:2e:63:41:81:d2:c4:d7:c7:d6:05:f5:8c:95:0e:36:f0:d1:
00:d6:2e:25:d6:ef:e4:9a:6c:fb:f6:06:d5:12:01:da:0b:e8:
cb:f3:e8:07:44:79:06:44:3d:f2:85:40:ac:84:e2:81:30:30:
bd:30:4b:bd:79:da:71:4e:06:05:26:f3:7a:fb:6d:15:9c:60:
00:bd:77:3d:ea:38:05:d4:f0:55:39:b8:31:c1:15:22:0a:9a:
59:35:30:3c:5c:4f:09:b9:0e:3e:8d:8f:bf:c8:a0:aa:08:44:
68:71:7e:67:86:a8:d6:bd:66:92:70:9b:d8:a0:ee:a5:d4:9d:
61:64:1a:13:67:a4:3a:e3:b8:26:4b:7c:3c:89:3e:6f:50:8d:
73:06:a2:50:4e:be:ec:8b:fb:b2:24:1f:e3:01:e1:0e:6d:3a:
0e:62:6f:48:0a:66:32:01:c6:59:9f:70:0d:f2:08:11:d2:46:
34:3c:e6:cb:bf:dc:8d:eb:45:2e:c0:c6:ec:cf:3b:28:63:dd:
9a:59:13:24:22:cb:f1:0e:cd:a2:6c:46:fc:eb:bb:f6:62:52:
9e:01:ba:1b:9b:7a:be:d9:e4:77:56:f3:e0:11:3b:67:33:61:
7e:ce:6b:68:bd:f5:25:53:05:26:27:ee:c1:51:2b:55:a5:0e:
56:ba:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:14:36 2026 by rpki-client