Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8fQZHmNJ3Q5smEade2plk_yMso8.roa
File: 8fQZHmNJ3Q5smEade2plk_yMso8.roa (raw, json)
Hash identifier: rkiclaUde4RGV7sC+VNv+hWNcfXIRgpMP0nJCSNlz3E=
Subject key identifier: F1:F4:19:1E:63:49:DD:0E:6C:98:46:9D:7B:6A:65:93:FC:8C:B2:8F
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A13E7509890B3A97FEFA20C8FB65BEA820
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8fQZHmNJ3Q5smEade2plk_yMso8.roa
Signing time: Thu 15 Oct 2026 07:26:59 +0000
ROA not before: Thu 15 Oct 2026 07:26:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214311
IP address blocks: 201.7.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:75:09:89:0b:3a:97:fe:fa:20:c8:fb:65:be:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 15 07:26:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1f4191e6349dd0e6c98469d7b6a6593fc8cb28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:88:0a:37:41:1c:de:6a:70:bb:f3:c3:e8:
72:49:a0:dc:71:d6:2c:84:b4:78:af:4b:20:4c:b4:
16:36:11:6b:8b:97:59:4d:f8:1e:e7:cb:bd:2b:a7:
bf:b2:74:cd:3f:a6:22:b9:40:aa:27:ef:79:ed:cb:
a8:c8:0f:0f:44:5a:93:62:a8:56:cd:b2:a8:c2:d7:
60:a2:aa:cc:c0:e0:b7:1c:6c:fd:b4:16:b0:a6:b4:
4b:99:dd:b4:c6:a2:70:26:8e:e9:f1:4d:58:1a:dc:
68:7b:c3:c4:2f:25:e0:a5:6c:d3:e5:c7:c7:f7:17:
2b:7a:30:47:e4:2e:8f:d2:2c:8f:a4:81:d7:bf:c3:
fb:b3:62:be:aa:5e:13:d9:a3:df:e7:10:d9:4a:f0:
d3:c7:e6:22:8b:7a:91:93:aa:04:5a:b2:90:fb:82:
3b:e6:a5:cb:43:a4:6f:8d:d3:54:e2:af:f7:e1:ec:
32:0e:d3:7f:4d:06:33:b0:d0:ae:d7:f4:3d:9d:59:
b7:46:b0:f5:98:24:18:29:db:cb:d6:d1:5e:0d:32:
1e:ce:1d:6d:ee:90:bc:0d:86:6d:d6:d1:47:86:f2:
1f:52:cb:6e:3b:e5:ad:aa:35:1d:01:91:42:77:11:
64:df:aa:85:7a:8c:72:23:00:54:84:bc:c9:f2:3e:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:19:1E:63:49:DD:0E:6C:98:46:9D:7B:6A:65:93:FC:8C:B2:8F
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8fQZHmNJ3Q5smEade2plk_yMso8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.30.0/24
Signature Algorithm: sha256WithRSAEncryption
95:cd:b0:cc:d8:21:b1:08:34:50:03:5b:f0:cf:bf:ec:a3:68:
bb:90:33:81:af:6f:55:bb:7b:fa:12:cc:16:99:6b:e5:c4:a6:
e5:e6:54:90:22:48:2c:55:60:34:a5:60:c8:bb:92:f2:a7:ee:
d1:7d:d4:90:e6:23:41:b5:3b:03:57:2a:d6:96:1c:26:cd:b5:
c6:47:bd:9a:82:b5:d2:87:7d:07:f5:4f:c1:1d:af:e9:1e:a2:
cd:25:b5:72:36:a4:b3:6e:d6:18:01:80:d8:b9:e7:24:9b:37:
0f:97:fc:d9:cb:64:06:ab:c9:23:5d:bb:3f:d0:f2:1e:45:41:
7a:f6:55:4a:c6:5d:9f:fa:e7:75:5e:df:d5:3e:53:6c:61:a6:
36:75:36:b9:89:37:fd:3d:20:f3:49:94:e9:ba:5e:e8:7f:01:
df:9a:79:04:8b:f4:1f:26:20:10:9a:1a:3a:12:b8:ae:fb:e8:
fb:1f:09:a4:59:08:6d:21:46:9a:4b:b6:c9:fb:dc:84:a6:5b:
48:5c:d2:a8:c7:6b:94:8f:22:f7:37:3f:69:2c:10:69:cb:16:
5a:9b:87:cb:dc:99:fd:df:74:94:3a:5e:1e:d0:46:33:d3:f0:
94:04:63:d7:d7:19:6c:6e:09:c2:88:ed:6e:0a:d2:b6:a0:0f:
5f:e0:e7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:19:58 2026 by rpki-client