Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/8tLBF654pSFrtTZo6a2qR1LWWMM.roa
File: 8tLBF654pSFrtTZo6a2qR1LWWMM.roa (raw, json)
Hash identifier: Enj8RsjeWdg6DNXeEBjEHOQvivlKq9SbhBZo4JjBnWI=
Subject key identifier: F2:D2:C1:17:AE:78:A5:21:6B:B5:36:68:E9:AD:AA:47:52:D6:58:C3
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 019F236864C9B661D38A8AD2539FF49DFC38
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/8tLBF654pSFrtTZo6a2qR1LWWMM.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42651
IP address blocks: 45.88.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:64:c9:b6:61:d3:8a:8a:d2:53:9f:f4:9d:fc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2d2c117ae78a5216bb53668e9adaa4752d658c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:4e:40:84:18:ed:f6:16:1d:9e:05:ab:cc:
7b:1f:6c:9c:b2:60:33:37:d8:3c:b1:73:0c:11:1f:
c3:0f:51:5b:45:25:65:13:82:0d:52:a4:6e:8d:e7:
43:30:72:3d:04:c7:29:be:b1:f5:f8:a1:08:2a:93:
4b:15:95:82:a4:23:9f:92:dc:f1:14:35:11:62:2e:
d4:35:9f:7d:39:fb:4a:4d:d0:4c:d3:99:72:da:8f:
1a:dd:2d:84:4f:37:d3:7f:45:dc:0e:8f:b7:43:e1:
da:ac:af:31:e6:b1:9b:ab:35:d7:f4:23:d6:ce:45:
1b:1f:53:63:15:30:27:fa:03:c6:c6:0c:da:e2:1b:
fc:1a:b6:0c:2b:72:07:e1:da:0a:9d:a3:92:7f:02:
46:57:7d:d3:5d:b3:0d:6d:3a:4a:de:be:a9:22:85:
9c:dc:ce:8c:88:54:2d:3a:ea:46:7a:af:f5:5b:76:
1a:1a:93:f9:19:7e:5a:26:64:4d:6b:e4:29:8c:75:
8c:0e:c6:3a:e7:45:1e:10:fc:e8:e6:fa:62:22:e8:
6c:55:c8:06:59:1c:36:4e:b3:52:c9:e2:55:dd:82:
f1:e2:19:cc:12:7e:30:95:e4:e0:b3:f0:bd:df:32:
d0:80:64:9c:b9:8c:47:64:11:ef:59:27:5e:b1:b3:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D2:C1:17:AE:78:A5:21:6B:B5:36:68:E9:AD:AA:47:52:D6:58:C3
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/8tLBF654pSFrtTZo6a2qR1LWWMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8f:8a:59:57:66:f0:47:2b:a4:44:6f:0f:6c:3f:3f:c1:22:
fb:5b:a1:2a:a8:91:6f:08:49:37:16:ef:6b:ee:b3:b5:8e:78:
62:d1:f4:1d:bd:4e:1c:9f:15:92:fb:34:02:f4:ee:e8:05:68:
5c:26:a0:0b:9a:0b:2f:03:ca:c7:16:f9:cf:e7:c0:f1:cd:52:
5f:59:1d:68:3a:38:8c:cd:3f:65:37:8c:cb:ca:13:8d:6e:17:
3f:04:d5:8d:e3:39:d2:6a:a7:ea:00:b0:d9:d5:d9:34:25:d1:
93:95:6d:c7:37:2f:5c:1c:07:31:c6:ad:c0:49:1d:a0:58:f5:
67:23:4c:bb:69:a9:b5:1b:8e:c9:68:bb:d9:9b:4c:a5:c3:2c:
1c:48:a3:1c:35:8b:9a:13:ae:18:02:a9:e1:8c:89:b0:8f:1a:
2c:ab:8c:4d:c0:2c:6b:7a:d9:69:4d:27:9d:68:ec:5b:d3:2a:
4a:bc:b2:ba:c8:ad:ca:ef:e0:44:23:79:40:21:34:67:16:85:
4a:af:69:f7:10:29:80:7f:77:b0:ae:e0:2e:d1:95:87:f5:52:
e8:1d:53:01:c4:be:42:ed:bb:ea:ee:8a:27:8a:fb:87:aa:5a:
d1:4e:10:0d:9e:15:ba:03:d6:aa:12:5a:ba:ca:19:86:78:e2:
71:a2:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:47:59 2026 by rpki-client