Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/8d26YkNo_GNQKQvI6IWrfH19cqw.roa
File: 8d26YkNo_GNQKQvI6IWrfH19cqw.roa (raw, json)
Hash identifier: nmv1mKFQQnLR7oS0WVgd3pRt6RQXsYlQmQ4+MQfteCs=
Subject key identifier: F1:DD:BA:62:43:68:FC:63:50:29:0B:C8:E8:85:AB:7C:7D:7D:72:AC
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019ED5E44805F7401C301EF10FE41E4567C2
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/8d26YkNo_GNQKQvI6IWrfH19cqw.roa
Signing time: Wed 17 Jun 2026 14:02:48 +0000
ROA not before: Wed 17 Jun 2026 14:02:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.63.0.0/16 maxlen: 16
2a02:11f8:60::/48 maxlen: 48
2a02:11f8:61::/48 maxlen: 48
2a02:11f8:62::/48 maxlen: 48
2a02:11f8:63::/48 maxlen: 48
2a02:11f8:64::/48 maxlen: 48
2a02:11f8:65::/48 maxlen: 48
2a02:11f8:81::/48 maxlen: 48
2a02:11f8:100::/48 maxlen: 48
2a02:11f8:101::/48 maxlen: 48
2a02:11f8:102::/48 maxlen: 48
2a02:11f8:190::/48 maxlen: 48
2a02:11f8:191::/48 maxlen: 48
2a02:11f8:260::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:e4:48:05:f7:40:1c:30:1e:f1:0f:e4:1e:45:67:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jun 17 14:02:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1ddba624368fc6350290bc8e885ab7c7d7d72ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:e8:37:c6:d0:a1:17:d0:3f:c9:d4:44:7f:
dd:98:91:25:0a:70:b4:49:b3:73:d0:92:f6:bc:f6:
c7:e8:85:69:ad:b9:ca:37:bd:6e:70:f3:bf:9d:7e:
77:20:0b:a8:70:a2:1b:37:db:ae:30:b2:41:26:b0:
ce:8a:6f:cb:dd:06:c9:ba:7b:41:22:bc:a6:81:b7:
a3:15:14:73:9e:a6:98:95:8c:2f:56:8a:9c:e2:a1:
d6:f6:d2:61:10:0a:46:cd:7b:5e:cf:f5:ea:a3:ff:
8c:53:40:5d:ab:61:b6:e9:eb:d7:95:ad:77:ae:74:
3d:ac:ab:b7:80:3d:63:c3:44:54:e9:ec:e1:f7:cd:
fc:74:19:bb:be:b9:8a:c6:c6:6c:af:14:95:aa:13:
77:f7:c2:01:96:b6:1c:2c:48:7f:7b:fa:0d:7d:1a:
88:f8:17:04:8d:2f:b9:85:7d:29:e7:0b:de:7b:70:
c8:4c:aa:ea:24:75:ad:0e:37:1e:09:5b:47:e0:0b:
c5:d3:92:a2:9c:99:96:aa:ec:16:d7:96:5b:f9:8c:
22:2e:b8:cb:0d:f1:c4:42:76:ec:3e:10:15:88:a0:
79:dc:0f:e5:72:59:74:20:ad:32:b5:92:53:ba:65:
78:12:ce:5d:8a:94:59:36:29:4c:a0:df:b9:7d:f0:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:BA:62:43:68:FC:63:50:29:0B:C8:E8:85:AB:7C:7D:7D:72:AC
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/8d26YkNo_GNQKQvI6IWrfH19cqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.63.0.0/16
IPv6:
2a02:11f8:60::-2a02:11f8:65:ffff:ffff:ffff:ffff:ffff
2a02:11f8:81::/48
2a02:11f8:100::-2a02:11f8:102:ffff:ffff:ffff:ffff:ffff
2a02:11f8:190::/47
2a02:11f8:260::/47
Signature Algorithm: sha256WithRSAEncryption
0b:a5:06:79:9f:26:8f:48:a7:27:be:f6:d9:f1:52:46:8a:df:
a0:73:6e:eb:49:ba:a7:20:d1:3b:21:13:ac:28:11:31:eb:68:
74:9a:18:9d:27:5d:74:d8:21:f5:f8:58:0d:ad:f5:5d:b0:e7:
bd:1f:e0:a0:90:9d:05:06:59:9d:8d:93:00:c5:a8:54:f6:6e:
9b:43:5f:9e:9a:c5:8f:d7:c1:8e:d6:96:29:f0:5b:46:8c:86:
f8:b3:60:39:81:cf:4f:9d:ad:6d:3a:2f:07:90:3d:48:34:df:
5f:31:26:b3:2c:43:fe:d5:1d:8f:55:ff:d3:79:8d:40:a0:18:
3d:4b:46:ce:71:00:c3:43:8f:8c:80:84:7f:bf:d4:8b:1e:f2:
67:c5:c8:4d:b7:31:0d:9b:28:50:db:55:f9:af:1c:5e:bf:4c:
1f:19:47:ab:af:bc:a0:91:7e:a3:51:86:7a:5f:01:a8:06:29:
4d:05:02:54:76:86:ff:d4:2c:cb:a4:c8:2b:0b:5a:6f:c5:6f:
f1:e0:68:6e:c7:56:07:05:49:24:d3:ed:dc:66:e0:f6:8d:f3:
71:ca:ac:36:26:a4:35:a3:e8:32:9c:dc:cb:d7:38:52:ee:53:
a3:2d:59:f9:a4:44:a8:76:d4:15:22:73:a8:a1:78:d6:9a:98:
ba:b5:c4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:50 2026 by rpki-client