Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/8tSujAa56rX0ugvrz4XTX8FJP9M.roa
File: 8tSujAa56rX0ugvrz4XTX8FJP9M.roa (raw, json)
Hash identifier: mRNFqFDwy/tr5pozqhdrrs0lQydjpqz4Vb6ZeLIETyg=
Subject key identifier: F2:D4:AE:8C:06:B9:EA:B5:F4:BA:0B:EB:CF:85:D3:5F:C1:49:3F:D3
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019DB533FB096B7A3F00EB811D0C9F53A706
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/8tSujAa56rX0ugvrz4XTX8FJP9M.roa
Signing time: Wed 22 Apr 2026 12:39:35 +0000
ROA not before: Wed 22 Apr 2026 12:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205570
IP address blocks: 131.222.198.0/23 maxlen: 23
185.213.170.0/24 maxlen: 24
2a0b:8b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:33:fb:09:6b:7a:3f:00:eb:81:1d:0c:9f:53:a7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Apr 22 12:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2d4ae8c06b9eab5f4ba0bebcf85d35fc1493fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:b2:a8:91:2d:5d:16:05:aa:c2:f3:ea:c3:
93:eb:6b:73:d8:ea:21:3e:87:59:a4:d6:bf:1f:69:
a8:fa:57:78:a7:0c:28:d6:09:ea:ce:47:a1:86:3f:
3c:79:aa:76:d2:e4:ff:99:32:45:d9:fa:06:39:a6:
a4:b8:f2:08:be:c5:f4:5f:65:a7:ba:60:98:6a:5a:
81:84:4f:cb:14:1e:81:a6:e1:15:7f:b3:c2:74:47:
e9:0d:29:8f:0c:96:42:b7:67:55:f1:81:10:62:11:
b4:c1:01:4a:ea:9a:bb:10:f3:f4:b2:1b:08:30:dc:
f3:d0:2b:98:e2:0f:e4:89:91:52:83:e0:a1:76:55:
b8:87:a8:5b:92:05:23:c7:04:98:6b:5b:8e:bb:e7:
f8:f3:08:05:68:88:f2:d2:e5:f3:fa:d0:f8:95:76:
7d:c9:2b:b5:be:f6:99:06:ad:6d:28:a5:10:2b:f1:
b2:4d:94:3f:7a:31:b1:8e:65:b3:6f:c8:08:d5:70:
45:83:6a:f7:96:09:ed:cc:69:51:8d:ac:8b:a8:d5:
43:30:74:af:35:33:11:06:db:36:cc:f5:a7:98:c7:
8e:4c:b5:cd:69:67:6a:63:28:79:01:d4:4d:e3:9c:
e9:45:69:d1:6f:0b:61:19:bb:60:83:50:62:80:8b:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D4:AE:8C:06:B9:EA:B5:F4:BA:0B:EB:CF:85:D3:5F:C1:49:3F:D3
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/8tSujAa56rX0ugvrz4XTX8FJP9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.198.0/23
185.213.170.0/24
IPv6:
2a0b:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
a3:3f:ca:72:3c:22:96:71:f0:ef:1f:ac:59:c1:51:11:73:c1:
ae:82:f2:f9:b3:e8:1d:b1:c8:a1:c6:80:17:7a:8a:5e:c1:08:
0a:fa:55:72:73:5a:79:9f:d6:61:f4:0c:76:37:db:2d:06:ed:
65:25:e0:c3:4e:b4:58:37:e2:b7:a1:ff:5f:92:71:88:4f:50:
3f:e1:57:c6:44:19:3f:1e:20:b0:b4:a8:ce:eb:61:a9:5e:8a:
91:32:92:c5:ad:b5:7f:6c:2c:31:80:92:f8:9c:75:d2:5b:48:
a7:b3:d0:7e:6b:a9:23:53:66:f0:14:a2:57:fd:a1:9c:c1:16:
c8:86:87:29:3b:0e:39:1b:b6:be:e1:0f:37:d5:02:e0:d8:d8:
76:e5:ac:f4:0a:19:72:0b:86:1a:79:73:85:7c:9d:ac:13:e9:
5c:7a:0b:68:fc:f2:00:92:ae:5b:38:60:97:28:5e:44:1b:68:
ee:a6:53:b5:10:ec:f4:79:3d:f3:87:d7:77:27:25:85:af:03:
5d:b6:a0:22:38:2a:72:fe:e1:2a:41:30:8c:2c:80:05:5c:29:
db:37:dd:54:73:ed:cf:48:1f:6f:86:5d:ab:be:46:24:7d:2a:
ff:b4:6b:39:92:a6:01:ee:b0:07:ce:cf:de:ab:18:76:0f:74:
a6:51:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:17 2026 by rpki-client