Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/8-hboCP-U8Wk9qtGn0IWpFqelRc.roa
File: 8-hboCP-U8Wk9qtGn0IWpFqelRc.roa (raw, json)
Hash identifier: j5xldAU1MujpYVAZwSnjN9dxcpWX63Cij0SbzlZlEHU=
Subject key identifier: F3:E8:5B:A0:23:FE:53:C5:A4:F6:AB:46:9F:42:16:A4:5A:9E:95:17
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 01A0C338FE433587B9913B5E8B69AD191ACC
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/8-hboCP-U8Wk9qtGn0IWpFqelRc.roa
Signing time: Mon 21 Sep 2026 09:08:07 +0000
ROA not before: Mon 21 Sep 2026 09:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.189.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:38:fe:43:35:87:b9:91:3b:5e:8b:69:ad:19:1a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Sep 21 09:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3e85ba023fe53c5a4f6ab469f4216a45a9e9517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:35:71:f8:47:e1:ee:29:03:97:66:f1:84:
23:9c:61:78:65:9a:d9:27:37:ab:26:98:1c:00:f6:
ff:55:cd:ff:13:3b:bb:83:13:c0:3b:81:27:23:00:
37:fc:a2:08:e0:2a:f6:9a:4a:0a:a4:c4:2c:e1:1f:
da:f5:05:31:7e:89:07:b0:54:65:74:40:ed:0d:96:
05:fa:e2:da:27:30:39:70:c0:95:68:7a:28:d2:8d:
33:cd:03:21:ce:36:dd:9d:b2:7d:19:a8:e6:c9:bf:
90:25:60:85:05:52:7e:1a:11:71:a1:1a:03:0c:05:
e7:1c:0a:76:ab:ef:40:1d:1d:ad:ed:74:42:2e:86:
c6:62:aa:25:7f:fb:b4:b9:a0:8b:6d:c0:af:05:09:
fb:1e:cd:bb:37:35:9c:e1:b4:e2:9e:bb:bb:5e:0d:
5f:38:6a:b6:77:01:62:aa:a5:d5:11:42:3b:7d:67:
5c:5a:b2:fe:fe:a0:17:48:51:dd:74:4a:64:0b:65:
13:69:73:eb:7d:35:78:32:7d:8f:d8:82:4f:50:85:
ff:8b:3e:79:28:25:5f:57:87:98:8a:e6:a6:fd:c0:
b5:68:93:76:74:5f:dd:81:1d:34:fb:9c:f3:17:7e:
75:ea:d1:e2:5f:30:6e:5e:6c:19:3b:a6:cc:3b:b9:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:5B:A0:23:FE:53:C5:A4:F6:AB:46:9F:42:16:A4:5A:9E:95:17
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/8-hboCP-U8Wk9qtGn0IWpFqelRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f9:98:6f:1f:8d:03:29:d4:7e:63:eb:55:28:08:3e:6d:03:
1e:5f:38:83:04:21:32:bf:c8:94:d9:72:e9:18:ad:6d:57:63:
24:74:00:b8:05:b4:b3:0d:77:f3:0f:20:e4:89:7e:e9:d8:de:
e4:96:e5:95:54:cd:ed:44:35:86:49:4b:85:6a:f7:80:29:51:
26:07:41:73:af:fe:0a:bc:46:98:9e:c9:c4:76:f9:54:ac:84:
03:8f:d4:e9:a1:e7:b7:70:07:67:90:c4:52:33:01:c1:8d:f1:
8f:ac:5f:92:41:ec:11:36:24:a7:d5:27:a4:45:00:c4:02:83:
a7:ae:78:55:31:ed:bf:52:49:9b:ec:5e:d6:33:22:c6:60:b6:
c8:c1:7f:39:b9:85:71:74:78:db:ca:e9:fd:a3:0a:d3:17:9b:
9b:e6:e2:8e:27:0d:f8:4a:50:34:fd:4e:79:a7:a6:9b:06:e3:
49:7e:ea:31:75:2e:55:ca:a5:dd:83:7a:39:37:8f:46:5f:51:
e0:fb:7b:72:9e:66:4e:eb:46:1d:d4:4f:ff:a7:c5:3f:7d:74:
b4:a9:cb:5f:41:a8:35:e7:6f:da:55:4d:28:a1:78:e4:1d:d4:
88:33:30:ad:cc:e9:1c:1d:2a:99:0b:ff:5f:79:00:bc:41:2a:
5a:9b:f4:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDDOP5DNYe5kTtei2mtGRrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5
ZTUwNTUwHhcNMjYwOTIxMDkwODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2U4NWJhMDIzZmU1M2M1YTRmNmFiNDY5ZjQyMTZhNDVhOWU5NTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dg1cfhH4e4pA5dm8YQjnGF4ZZrZ
JzerJpgcAPb/Vc3/Ezu7gxPAO4EnIwA3/KII4Cr2mkoKpMQs4R/a9QUxfokHsFRl
dEDtDZYF+uLaJzA5cMCVaHoo0o0zzQMhzjbdnbJ9Gajmyb+QJWCFBVJ+GhFxoRoD
DAXnHAp2q+9AHR2t7XRCLobGYqolf/u0uaCLbcCvBQn7Hs27NzWc4bTinru7Xg1f
OGq2dwFiqqXVEUI7fWdcWrL+/qAXSFHddEpkC2UTaXPrfTV4Mn2P2IJPUIX/iz55
KCVfV4eYiuam/cC1aJN2dF/dgR00+5zzF3516tHiXzBuXmwZO6bMO7lc6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPPoW6Aj/lPFpParRp9CFqRanpUXMB8GA1UdIwQY
MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt
OTA5NmUxNjc0ZTIyLzEvOC1oYm9DUC1VOFdrOXF0R24wSVdwRnFlbFJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy
LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub0gMA0G
CSqGSIb3DQEBCwUAA4IBAQBN+ZhvH40DKdR+Y+tVKAg+bQMeXziDBCEyv8iU2XLp
GK1tV2MkdAC4BbSzDXfzDyDkiX7p2N7kluWVVM3tRDWGSUuFaveAKVEmB0Fzr/4K
vEaYnsnEdvlUrIQDj9Tpoee3cAdnkMRSMwHBjfGPrF+SQewRNiSn1SekRQDEAoOn
rnhVMe2/Ukmb7F7WMyLGYLbIwX85uYVxdHjbyun9owrTF5ub5uKOJw34SlA0/U55
p6abBuNJfuoxdS5VyqXdg3o5N49GX1Hg+3tynmZO60Yd1E//p8U/fXS0qctfQag1
52/aVU0ooXjkHdSIMzCtzOkcHSqZC/9feQC8QSpam/TT
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:25:40 2026 by rpki-client