Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/8meTSesX-bzpkzyvx9ELA1ZiM5Y.roa
File: 8meTSesX-bzpkzyvx9ELA1ZiM5Y.roa (raw, json)
Hash identifier: wPyw7XGgTqagRr/B70qwK48d2umXqb3H9XJBsVrBmTU=
Subject key identifier: F2:67:93:49:EB:17:F9:BC:E9:93:3C:AF:C7:D1:0B:03:56:62:33:96
Certificate issuer: /CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Certificate serial: 019F236890CB977266D74FF1FDAE17637C44
Authority key identifier: AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/8meTSesX-bzpkzyvx9ELA1ZiM5Y.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134094
IP address blocks: 185.190.17.0/24 maxlen: 24
185.190.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:90:cb:97:72:66:d7:4f:f1:fd:ae:17:63:7c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2679349eb17f9bce9933cafc7d10b0356623396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:9d:c2:d9:7f:21:92:b7:39:8a:5b:54:33:
7d:0a:bf:f0:90:b9:b3:b7:d9:59:af:c2:1f:bf:b6:
54:a4:73:06:15:4f:65:5b:0b:49:be:3b:3f:1f:c4:
33:31:5b:78:69:7f:b9:98:a8:f7:a7:69:05:2c:e4:
f4:88:4f:5d:60:3b:c3:5a:43:d0:0d:15:4d:38:dc:
50:36:34:ad:0d:51:f7:ab:71:fb:22:2d:79:40:f6:
3a:99:c5:47:f9:ef:3e:fa:ff:b1:c3:fa:70:70:57:
50:21:25:a7:f5:a8:9f:b5:e7:47:bf:c4:b0:1e:ab:
ea:84:9b:48:65:1b:7c:bd:b0:c5:21:81:67:e3:f1:
b8:ee:9e:22:67:1f:54:dd:63:52:48:ac:8f:5e:89:
7f:d2:45:5e:66:88:cd:73:9d:85:de:59:1d:d4:07:
77:f0:9d:99:68:60:16:21:d5:a7:5c:c5:e6:0d:a9:
f3:f7:e1:cb:fc:e5:ff:1d:14:3d:a8:3c:b3:41:5d:
6f:b2:a1:62:d0:1d:2a:eb:4f:76:84:df:fd:04:86:
48:b4:7a:91:c5:dc:91:ab:87:d6:b7:65:0a:54:cf:
e1:55:6d:18:0c:eb:ff:f3:f7:33:6b:1c:59:2e:99:
4a:36:03:8b:ab:4c:6f:b2:89:0c:4a:6e:1a:04:67:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:67:93:49:EB:17:F9:BC:E9:93:3C:AF:C7:D1:0B:03:56:62:33:96
X509v3 Authority Key Identifier:
keyid:AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/8meTSesX-bzpkzyvx9ELA1ZiM5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.17.0-185.190.18.255
Signature Algorithm: sha256WithRSAEncryption
77:2f:d3:20:55:95:be:b1:10:4f:9c:bf:9a:27:88:55:0e:02:
5c:60:4e:14:45:b2:bb:6f:ab:7d:8f:03:40:22:37:ba:63:25:
43:82:a3:9f:57:ec:99:6a:a5:f4:71:2c:28:b7:b1:a6:ec:b8:
64:a6:96:b1:9f:8b:c0:ba:fd:5d:43:12:de:8f:d3:56:fa:0a:
bc:2f:35:68:07:73:0d:97:b4:b5:04:3f:66:e9:e0:a1:11:20:
46:86:ed:00:93:58:90:10:cc:03:c3:98:3a:c7:c3:1f:c7:64:
19:f6:71:df:9b:63:e4:70:d5:55:0f:a7:5b:4d:55:16:c4:75:
35:78:1f:7c:24:36:22:2c:c4:42:d1:b7:5f:c4:11:d8:74:fc:
98:9c:67:ac:80:88:b9:5a:12:f4:cc:89:1c:90:b1:88:fe:09:
18:77:db:99:75:18:bc:f5:65:57:8e:99:71:2f:c7:20:f9:63:
d9:5b:79:82:4c:aa:aa:11:fb:59:92:87:53:db:28:d0:81:a7:
d7:c4:98:9e:0b:5c:77:5b:cb:d2:7e:4c:09:e4:82:a3:37:1e:
c1:1c:81:3b:73:78:2d:68:2b:68:55:f8:ac:f1:ed:3b:37:ee:
eb:7c:0a:c0:2d:b6:fc:33:58:46:52:a5:31:29:0d:dc:2c:3b:
95:55:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:00 2026 by rpki-client