Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa
File: 8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa (raw, json)
Hash identifier: AzOTxMcQLVwli/cilDsxwDkXYXmhghgIjsMcqtIyLUc=
Subject key identifier: F1:D3:7F:CB:A1:42:1E:64:B0:87:DC:F2:39:D1:8A:73:E5:DA:DD:77
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019F1883484E1552C26B4DBAC07567BEC367
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa
Signing time: Tue 30 Jun 2026 12:31:24 +0000
ROA not before: Tue 30 Jun 2026 12:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203029
IP address blocks: 31.22.76.0/24 maxlen: 24
195.234.126.0/24 maxlen: 24
2a14:6781:2000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:83:48:4e:15:52:c2:6b:4d:ba:c0:75:67:be:c3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jun 30 12:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1d37fcba1421e64b087dcf239d18a73e5dadd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:89:d5:14:a4:31:7a:9b:31:20:af:e6:d3:
12:bd:4b:8d:f9:34:03:e6:90:cc:63:11:a9:3c:2a:
b2:e0:6d:63:ae:e4:d0:5c:79:33:13:65:8b:98:19:
3a:1a:e7:73:cb:a1:97:3a:34:39:94:c2:9d:c8:a8:
bc:10:3a:26:15:22:6e:21:16:3e:d8:b7:5c:bc:f8:
bd:6f:05:eb:2e:55:66:06:32:8d:3f:a6:58:ff:5d:
55:a3:e2:92:ff:28:b5:bf:7a:c3:8e:ab:b3:02:9b:
f1:58:4e:70:e7:67:33:09:6c:c4:45:b4:5d:24:08:
d1:57:61:d2:83:dc:b8:78:c1:19:d4:aa:42:ff:85:
40:ce:cf:79:15:64:18:2b:63:3f:db:f4:f0:8e:77:
9b:4e:0b:9d:6a:98:c5:3d:db:00:65:13:c9:51:88:
9f:9b:a3:11:da:27:c8:73:55:66:ed:59:42:4a:07:
38:65:90:a7:6c:87:a0:ab:a8:79:c6:07:3d:ef:a1:
95:46:70:0d:9c:a7:d9:34:61:bc:20:26:20:eb:9b:
dd:ca:ca:0b:07:7f:f1:b9:36:cc:58:4c:37:7a:9d:
e9:e4:e1:76:46:31:68:e8:88:ec:38:07:df:b4:58:
53:44:ec:99:58:34:bc:62:6c:84:e2:17:3a:af:cf:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D3:7F:CB:A1:42:1E:64:B0:87:DC:F2:39:D1:8A:73:E5:DA:DD:77
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.76.0/24
195.234.126.0/24
IPv6:
2a14:6781:2000::/38
Signature Algorithm: sha256WithRSAEncryption
50:52:87:5e:82:6f:04:d0:92:78:b7:cf:0d:0e:73:d8:b4:00:
7a:d1:7d:f6:0e:69:f4:c2:57:d2:24:5d:55:e6:24:a7:7b:69:
f4:54:7e:ff:da:a9:23:ac:7c:2c:bf:7e:4f:d5:70:7f:51:78:
d0:b0:49:62:67:4c:ea:4d:29:65:05:19:a3:de:34:a0:15:0b:
c5:61:cb:61:ef:08:13:72:1a:01:0a:07:d8:0c:db:ee:be:95:
bd:e1:a5:66:b2:cf:e2:71:5c:39:e8:90:40:fd:86:c8:cc:3a:
ee:64:b9:da:7d:28:0f:27:f3:fe:1e:6f:5e:c2:ab:04:bf:ab:
9f:01:15:93:a7:57:7b:e6:67:d6:34:cb:5a:cf:fe:1d:dc:72:
50:e6:41:8f:25:67:07:54:a1:da:31:6f:1b:b4:db:a9:b5:f4:
53:d3:58:be:08:e5:e5:95:fa:7f:73:89:10:e9:28:ec:75:b9:
c5:c3:fc:da:a9:9f:ae:3b:ca:10:12:ff:3a:2e:b1:11:0b:7d:
9f:78:d7:d1:c6:e3:4d:d9:35:23:36:ba:0f:bb:4e:9f:08:81:
2b:b2:18:06:ca:2d:8b:f9:3d:7d:85:9c:61:64:54:bb:d7:21:
74:ed:77:47:cf:5d:59:b8:b7:91:43:af:42:6b:4b:bb:17:db:
87:3e:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:14:53 2026 by rpki-client