Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/S8r1Dt0xPg3mGM2iJ4kWiAZnz_Y.roa
File: S8r1Dt0xPg3mGM2iJ4kWiAZnz_Y.roa (raw, json)
Hash identifier: /Hj4fKzWUqqHsjrcoSE0X1Hcar7SKcBG1KVhc/cg9f4=
Subject key identifier: 4B:CA:F5:0E:DD:31:3E:0D:E6:18:CD:A2:27:89:16:88:06:67:CF:F6
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019EFE1B2E0F8DAFEC24D56B1649B79E9A47
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/S8r1Dt0xPg3mGM2iJ4kWiAZnz_Y.roa
Signing time: Thu 25 Jun 2026 09:27:34 +0000
ROA not before: Thu 25 Jun 2026 09:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201861
IP address blocks: 87.232.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:1b:2e:0f:8d:af:ec:24:d5:6b:16:49:b7:9e:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jun 25 09:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bcaf50edd313e0de618cda2278916880667cff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:b7:0a:48:64:fe:5d:02:2e:f9:97:12:9d:
d0:ad:16:fc:ee:e1:c3:3f:20:b5:08:53:ca:07:75:
1c:a1:33:02:86:d0:22:08:c4:b6:b3:a0:fd:4c:bc:
77:be:bc:e6:07:a3:5e:80:7c:15:6f:99:bd:e1:d3:
c8:4f:11:41:68:53:36:ef:1a:04:08:a0:76:3c:20:
0a:d6:de:68:0d:8f:40:bb:7a:4a:3b:1f:45:eb:81:
2e:2b:f5:f8:84:3a:59:b6:07:0f:23:35:40:6d:d8:
22:f2:d6:c8:a1:2a:9b:c9:2d:b1:1b:94:f4:10:fd:
5a:d2:af:47:18:f1:1e:13:3d:9e:74:15:0b:d3:a3:
8d:cb:8e:a6:ab:c8:48:b8:65:2d:5f:5e:30:e9:14:
33:37:40:ed:64:37:a3:54:68:da:e7:72:70:e7:f7:
79:c8:44:f1:b4:fd:d6:d1:62:a3:c6:5e:36:b1:5b:
cb:1e:26:17:d0:18:e0:72:2f:3a:1d:75:7d:98:6f:
fa:08:7f:a1:3d:73:ae:bf:e2:1b:4d:8b:ce:96:37:
2e:dd:22:d7:09:8b:70:cc:f9:82:0d:ca:56:09:89:
b3:07:c6:22:fc:a5:b8:26:1d:07:e2:5e:ae:f7:59:
2e:a2:d3:9f:ad:e2:d3:2e:45:2d:d1:40:3a:49:53:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CA:F5:0E:DD:31:3E:0D:E6:18:CD:A2:27:89:16:88:06:67:CF:F6
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/S8r1Dt0xPg3mGM2iJ4kWiAZnz_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.108.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:33:52:65:5c:98:b2:1b:50:a9:12:37:d4:92:b0:6e:4d:66:
24:49:95:c1:6f:76:f8:5e:eb:41:12:f1:eb:3a:cf:42:49:d0:
60:e4:27:15:45:4f:59:70:86:75:ac:db:9c:fe:98:05:53:a5:
ec:5b:d7:70:17:af:26:0f:04:e8:38:84:ef:d8:24:2e:38:6f:
bd:9c:26:f8:fe:a3:2e:ed:3e:5d:ea:06:25:7a:46:3e:f9:30:
90:c8:96:2e:55:96:08:e7:41:15:a3:ea:24:20:cd:76:5b:ad:
5b:5a:b2:e1:33:aa:3f:14:c9:90:93:d9:4d:e2:a7:9b:61:ba:
42:f8:1d:a8:f6:47:73:ec:e1:3a:f2:4d:56:64:eb:c4:8d:9e:
71:f7:cf:a1:a3:fa:45:64:33:d5:3f:bf:17:6f:36:12:8a:2d:
f0:47:c6:6f:7e:08:b7:1a:bd:3b:d0:4f:a6:70:36:f7:08:ca:
3f:c6:13:45:04:b8:6d:a8:98:ef:0c:da:2b:12:85:23:05:37:
63:68:23:b9:65:3f:47:d7:66:f4:68:6d:b3:fa:98:d3:4a:0e:
70:90:35:4a:6f:ab:72:89:49:aa:82:73:ab:d6:c5:a8:83:b8:
e5:33:53:37:eb:b6:05:b3:9c:a1:95:0a:90:00:f2:4c:62:82:
04:ed:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 13:22:43 2026 by rpki-client