Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/8iT0QUClb39NRI-uuC1mFbAU_9k.roa
File: 8iT0QUClb39NRI-uuC1mFbAU_9k.roa (raw, json)
Hash identifier: G+bnJqke6Xap68M3TZ03NpQT4lnZyhbMzCujnfJosjs=
Subject key identifier: F2:24:F4:41:40:A5:6F:7F:4D:44:8F:AE:B8:2D:66:15:B0:14:FF:D9
Certificate issuer: /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial: 019F366DF55AA84E36B9E752DFE89784EDBF
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/8iT0QUClb39NRI-uuC1mFbAU_9k.roa
Signing time: Mon 06 Jul 2026 07:56:43 +0000
ROA not before: Mon 06 Jul 2026 07:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13213
IP address blocks: 185.225.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:6d:f5:5a:a8:4e:36:b9:e7:52:df:e8:97:84:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
Validity
Not Before: Jul 6 07:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f224f44140a56f7f4d448faeb82d6615b014ffd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:74:95:05:12:1c:b3:9a:20:9a:f6:e3:98:
ed:14:d4:db:f6:0b:3c:3c:fe:74:ed:54:0d:ad:b8:
85:d8:8f:60:3b:c0:f8:8b:11:c0:a1:e7:14:0e:d3:
93:56:b5:6f:19:2b:4e:95:60:0b:88:4d:04:2f:d5:
aa:16:64:d1:b5:74:fe:58:f2:c3:f4:1f:cc:fc:9c:
59:1e:15:2e:ba:e6:e2:b9:2c:16:02:5b:6d:00:38:
e1:01:31:db:81:02:9a:05:f2:66:23:97:95:86:5f:
35:44:59:6b:7c:c4:18:7d:be:61:95:41:e7:b4:ed:
48:31:1e:ef:59:fe:ea:e7:32:3e:42:93:46:a8:e7:
e6:2a:dd:06:0d:38:53:02:64:9e:d4:5f:c2:f5:94:
5b:b2:3b:e2:9e:6b:40:45:d2:66:5f:7f:6e:3d:20:
b7:7f:3f:15:54:49:d4:0b:31:1a:7b:b5:e6:7c:cb:
ac:a0:30:74:9b:3b:f7:a4:b6:1a:bd:34:5b:55:f4:
a9:8a:4c:06:c5:59:9f:20:0f:5a:13:51:ed:a0:24:
ad:91:65:ff:9c:ff:f3:0c:4e:03:98:a1:2e:b2:8a:
24:9b:3a:37:36:c8:47:24:45:d9:b4:57:8c:5c:bc:
59:49:51:d7:16:44:a2:56:b2:01:d4:13:f9:a9:4f:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:F4:41:40:A5:6F:7F:4D:44:8F:AE:B8:2D:66:15:B0:14:FF:D9
X509v3 Authority Key Identifier:
keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/8iT0QUClb39NRI-uuC1mFbAU_9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:48:31:93:d1:b3:23:6f:cd:0a:73:6f:00:79:fc:f8:03:9c:
ed:38:73:01:84:2d:2f:d6:28:df:56:83:83:a8:55:61:a6:8c:
ae:a0:7a:ca:df:cd:5d:55:d2:fd:f8:4e:73:a1:44:b6:ea:d3:
d5:ed:c4:2a:96:56:63:9c:77:93:4a:bc:1b:33:2c:96:9b:9e:
aa:c3:f9:ea:17:5f:39:10:b8:0d:5b:59:ce:d8:43:ff:6b:18:
8d:da:6f:05:d5:1f:a2:73:26:1c:0c:57:c4:f4:dc:50:01:9a:
5b:17:3e:23:f7:53:b2:ca:e0:98:13:c7:b5:5c:b0:28:2c:de:
c6:5e:08:21:79:d0:13:25:88:96:23:b9:f5:12:4f:d9:d1:ee:
02:63:b7:b5:da:1b:7f:f5:79:76:9e:14:2b:f4:49:ae:b4:71:
b6:6b:a3:5f:48:05:88:4e:a1:25:a3:00:e6:85:cc:65:24:42:
87:16:b3:43:8a:6a:a9:e6:85:e8:32:84:76:83:8d:13:1f:e6:
58:90:2d:e5:60:a5:53:63:6f:65:69:37:f6:b9:1f:bb:73:da:
d5:68:13:79:19:28:c0:87:2d:93:c6:9c:28:65:76:2a:9a:6d:
dc:50:88:3e:16:64:02:29:dc:f1:7f:5e:7a:ee:1e:b7:d0:c6:
9f:59:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:31 2026 by rpki-client