Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/il8VHKBVPrWFaLKCdDMzYl8jhLI.roa
File: il8VHKBVPrWFaLKCdDMzYl8jhLI.roa (raw, json)
Hash identifier: Bxg6tP2DaV5TYbIfTi5+f7nm3QyNyl1e7uGGFh/YeEk=
Subject key identifier: 8A:5F:15:1C:A0:55:3E:B5:85:68:B2:82:74:33:33:62:5F:23:84:B2
Certificate issuer: /CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Certificate serial: 019E167EEA3C9135803C7C1D8D2A3C21A1AA
Authority key identifier: FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/il8VHKBVPrWFaLKCdDMzYl8jhLI.roa
Signing time: Mon 11 May 2026 10:04:36 +0000
ROA not before: Mon 11 May 2026 10:04:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15623
IP address blocks: 185.242.200.0/22 maxlen: 22
2a0c:e480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:7e:ea:3c:91:35:80:3c:7c:1d:8d:2a:3c:21:a1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Validity
Not Before: May 11 10:04:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a5f151ca0553eb58568b282743333625f2384b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:f0:4c:fd:a8:ba:db:ca:e5:91:df:89:94:
7b:0c:59:a0:f7:2c:ca:ef:c8:7f:97:cf:36:52:fb:
58:be:d7:c3:42:e4:9b:57:21:12:e1:86:c2:17:40:
ed:29:fb:92:11:c6:6b:b3:2e:ef:fa:a0:9c:28:3b:
12:56:9d:3d:c4:12:6a:9e:b7:7d:0d:30:91:12:ea:
2b:f6:80:e1:9c:2f:99:8b:d3:80:19:18:c4:e3:b7:
c3:d5:d4:d5:4a:45:da:cc:74:34:64:8d:17:89:74:
85:4e:0d:1c:99:f8:38:1e:bc:99:68:b8:ea:8c:7f:
d5:8a:60:70:44:3f:9b:69:d7:91:84:85:8b:4b:95:
7f:9d:27:f4:f9:cd:5f:74:59:91:d2:b3:a6:d8:b4:
be:54:f3:54:fb:1f:0b:51:b9:62:3e:56:bb:e9:3e:
2c:8b:a4:ff:92:93:4b:34:91:5d:58:09:5c:cf:73:
f0:1a:e7:18:1b:2e:a8:1c:4d:ea:a1:a4:a8:3c:20:
48:86:15:50:55:a9:4e:57:b3:dd:19:5a:58:c3:ad:
10:3b:e0:81:27:6b:ad:62:33:e3:d4:04:59:f0:2f:
81:f5:89:c8:f7:b5:5c:c5:3a:bc:32:73:4c:95:b2:
36:be:d9:43:74:11:38:e1:5f:16:69:77:53:2e:4a:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:15:1C:A0:55:3E:B5:85:68:B2:82:74:33:33:62:5F:23:84:B2
X509v3 Authority Key Identifier:
keyid:FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/il8VHKBVPrWFaLKCdDMzYl8jhLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.200.0/22
IPv6:
2a0c:e480::/29
Signature Algorithm: sha256WithRSAEncryption
5e:50:df:56:a3:a9:f5:ed:69:3b:74:92:d2:eb:1e:ec:92:ec:
f3:62:ee:88:8b:5e:f2:c8:90:8a:f5:70:94:89:17:59:07:43:
fe:1a:bc:2a:17:8b:b1:18:b3:2d:ba:6e:b0:bc:5c:db:eb:f5:
95:a1:63:eb:a9:bd:f3:28:fa:0e:33:e8:fb:32:22:a2:ba:e5:
1f:95:32:49:6d:49:78:11:0c:76:40:8b:6c:a7:27:9e:60:cd:
4f:d3:9f:46:45:9b:a6:36:b0:e3:a2:a9:d9:60:da:8d:e4:5a:
a0:5a:57:38:02:70:a5:2f:78:a5:78:cb:4a:5b:45:85:c8:d6:
d6:0f:0c:05:81:97:66:06:f2:d5:8d:fa:b7:08:51:95:a4:45:
8b:50:83:27:d2:60:d3:28:c4:5d:4e:e9:a3:0d:6c:24:d2:95:
2f:08:d9:c3:31:ce:17:8b:63:86:a9:20:fc:81:bb:e4:eb:41:
34:d4:b0:8e:01:cb:8f:9e:5d:b8:61:2d:a4:f0:e5:6e:d4:90:
ed:40:ee:b0:ca:c1:90:f7:b1:13:35:4a:ab:4e:70:55:c8:3d:
80:06:c8:6f:de:19:20:d1:85:09:59:bb:a0:7c:bf:a6:2b:9e:
70:3a:69:85:66:b7:2a:21:fa:5a:15:13:61:68:7d:1f:63:cf:
fc:6e:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:01 2026 by rpki-client