Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/8aHRTpyqrZwmlKL5qTAdEJsldDs.roa
File: 8aHRTpyqrZwmlKL5qTAdEJsldDs.roa (raw, json)
Hash identifier: AW2nD+ri9684i4RILLJIuGJYxrfZ5GhpSinii7eCfWo=
Subject key identifier: F1:A1:D1:4E:9C:AA:AD:9C:26:94:A2:F9:A9:30:1D:10:9B:25:74:3B
Certificate issuer: /CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Certificate serial: 01A0CFE938ABB191FEED114A9CFEB1D27E42
Authority key identifier: B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/8aHRTpyqrZwmlKL5qTAdEJsldDs.roa
Signing time: Wed 23 Sep 2026 20:16:03 +0000
ROA not before: Wed 23 Sep 2026 20:16:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 185.222.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:e9:38:ab:b1:91:fe:ed:11:4a:9c:fe:b1:d2:7e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Validity
Not Before: Sep 23 20:16:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1a1d14e9caaad9c2694a2f9a9301d109b25743b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:ca:3e:3a:07:4b:3c:89:0e:19:95:ef:a0:
23:5b:67:14:f5:55:6e:80:56:19:0f:60:61:81:ed:
a3:cf:2c:72:25:43:9e:79:1e:da:9b:a7:47:55:a8:
d0:fd:6a:45:12:f4:2e:c9:63:6c:18:4c:7e:f2:79:
de:ed:f9:43:da:21:5d:20:ef:f1:50:80:54:f7:44:
71:49:b3:d1:75:a9:f9:1c:ac:b5:05:f4:a8:76:57:
a3:30:0e:21:b7:f2:8e:8c:8a:1e:e7:18:ce:a4:c0:
41:19:17:03:71:d5:33:56:d8:e4:d2:e4:20:3b:bb:
12:57:a8:96:80:db:f9:6b:a8:6a:1c:dc:73:27:f3:
d4:c0:07:37:85:4a:d9:7a:6a:11:42:8c:2e:38:aa:
51:e0:e8:1f:e1:ca:cd:70:71:73:1c:35:3e:1f:45:
2d:23:7f:05:f6:80:1e:1b:07:35:31:67:fd:c0:ba:
00:c2:3b:e0:4d:bf:af:1f:e8:12:78:b0:5f:20:8b:
ea:6a:47:ed:31:a0:18:68:10:97:ef:3a:05:40:5f:
04:15:7a:19:89:bf:07:30:33:a5:e5:c0:36:64:b1:
d0:0a:d2:ab:7a:6f:53:da:35:08:10:32:ab:c0:3d:
3f:04:5c:13:d8:fb:9b:15:34:3e:37:41:a6:da:5a:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:D1:4E:9C:AA:AD:9C:26:94:A2:F9:A9:30:1D:10:9B:25:74:3B
X509v3 Authority Key Identifier:
keyid:B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/8aHRTpyqrZwmlKL5qTAdEJsldDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.202.0/24
Signature Algorithm: sha256WithRSAEncryption
86:67:d6:40:a6:c8:45:3d:9c:bb:71:71:5e:69:8a:3d:e4:06:
ea:b4:0e:2a:65:62:80:06:05:01:db:bf:75:23:af:ee:d8:4d:
3a:88:5d:c2:03:ff:f9:7e:3f:06:a4:fa:a3:34:50:2d:5c:1d:
1c:bb:32:14:01:b2:ea:ac:23:3a:06:f7:39:45:ab:22:8e:8f:
a4:49:98:78:57:56:bd:b2:2e:26:ab:dd:e8:9b:fa:b9:8b:d8:
f3:98:73:d2:f7:0e:91:3a:8c:9a:74:f8:a1:64:61:7c:36:6a:
b3:b3:43:4a:e9:ca:c0:10:9b:25:7a:c9:0a:29:45:b1:c7:80:
6b:6f:61:c5:41:2c:cb:93:af:a4:ab:56:a8:03:b1:3d:f4:b2:
2a:b8:64:78:a9:a2:39:6e:63:73:5a:96:42:84:fb:c9:44:8d:
23:b7:57:9f:a0:25:28:d1:92:99:ee:6a:8c:e1:93:31:86:44:
d5:94:eb:4b:fa:e0:b0:2b:ba:63:c0:f2:e6:d1:ac:5c:56:45:
74:5e:75:54:30:f6:6f:91:2b:54:c1:a7:f2:d6:45:d0:48:0f:
78:b2:35:0d:3b:76:2d:64:f8:d5:93:d9:16:68:48:0e:36:18:
2a:28:7f:42:43:34:ce:7e:f5:2c:35:4a:bf:2d:ad:a7:92:bd:
6a:24:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:39 2026 by rpki-client