Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/i8AN6geVF7hp5kMKRq_5tnIP6L0.roa
File: i8AN6geVF7hp5kMKRq_5tnIP6L0.roa (raw, json)
Hash identifier: oBfxy68KZXNPogj6PQRYfnFb/uYEC+FuyX64lWOc4jQ=
Subject key identifier: 8B:C0:0D:EA:07:95:17:B8:69:E6:43:0A:46:AF:F9:B6:72:0F:E8:BD
Certificate issuer: /CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Certificate serial: 019F23692DC278B877CA798D1333AEC30F22
Authority key identifier: B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/i8AN6geVF7hp5kMKRq_5tnIP6L0.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201996
IP address blocks: 87.246.41.0/24 maxlen: 24
87.246.42.0/24 maxlen: 24
87.246.43.0/24 maxlen: 24
212.5.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2d:c2:78:b8:77:ca:79:8d:13:33:ae:c3:0f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bc00dea079517b869e6430a46aff9b6720fe8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:a0:5e:ce:77:13:d1:2e:81:77:02:a3:cd:
59:9d:c8:93:ae:84:e1:b0:68:10:ec:b2:c1:44:2a:
18:bb:9b:61:e9:42:34:e0:2d:2a:8c:40:b0:26:b0:
fc:0c:84:dc:a6:6e:bc:53:63:fd:5f:d1:cd:bd:5f:
5e:23:0c:bf:aa:18:32:d1:45:cc:7d:bd:c0:b9:64:
4a:57:dc:4a:ba:a4:cb:9b:12:71:98:ce:bd:01:57:
6c:b1:28:46:f3:16:12:c9:47:14:4f:bf:d0:d4:23:
44:51:c5:63:f6:de:46:ba:1d:ef:79:23:3c:59:6a:
b5:10:fd:44:af:91:1c:fb:65:07:4a:a6:72:a6:ac:
dd:bf:69:97:8b:b4:0d:15:ae:e6:5d:c7:0d:e2:40:
8c:09:79:69:d4:6a:3e:d1:d3:94:1a:87:3b:63:7b:
6e:0b:84:b9:3c:6c:0f:fb:53:0d:92:1d:72:2d:c5:
1a:25:34:63:ad:c7:78:2f:95:c7:bf:f6:8c:6a:14:
df:e6:60:e4:fc:67:fd:5f:af:40:f0:12:96:c9:85:
2f:59:34:7d:b3:8f:fc:66:78:2a:c0:3d:90:2d:44:
32:64:ab:86:05:e0:90:e8:51:5b:be:e9:75:3f:73:
8f:65:f8:7a:44:97:30:e0:4f:8d:f6:18:bf:56:10:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:0D:EA:07:95:17:B8:69:E6:43:0A:46:AF:F9:B6:72:0F:E8:BD
X509v3 Authority Key Identifier:
keyid:B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/i8AN6geVF7hp5kMKRq_5tnIP6L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.41.0-87.246.43.255
212.5.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:8a:09:b8:20:ca:cf:0b:9b:1e:52:93:cb:fb:56:9e:0d:50:
43:a3:26:2f:88:93:d8:c3:71:f7:f8:46:38:fd:ff:5b:16:2a:
53:f8:40:a3:fa:be:64:ab:54:3e:6c:22:2e:b4:9c:4a:c0:a9:
5f:76:a4:be:71:ac:08:b8:d5:ec:cf:2d:51:47:1a:29:69:89:
f8:11:a5:26:73:7a:10:33:08:2e:ea:a3:7d:22:a7:c0:47:93:
0b:80:05:96:16:4d:81:16:b1:95:fc:e8:ea:6b:41:09:91:ae:
98:e9:bf:76:71:f6:6b:71:2d:1b:1e:5d:6a:4b:cb:e6:27:98:
c2:28:18:5d:25:1f:07:cd:d4:6f:de:4a:b4:f9:35:ff:c6:52:
0a:07:e1:59:c6:ff:89:22:7c:a0:d6:53:74:22:16:0f:8f:66:
a0:b6:3c:61:29:32:d4:0d:e0:dd:0c:59:78:c6:15:31:83:d6:
73:eb:bd:60:61:8f:54:6d:cd:ef:3b:64:62:b7:5f:1f:52:90:
b4:41:6e:6f:50:6f:3c:06:1c:ab:d3:d7:17:2b:1a:90:23:a4:
f0:f7:ea:00:56:69:ae:54:15:aa:d6:89:a2:e6:be:c5:16:14:
aa:92:9d:36:c5:54:92:4b:ce:b8:cb:c2:a2:58:03:34:60:19:
d7:6c:bb:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:24:52 2026 by rpki-client