Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/8WJqM5d335qWAImp4eB_a09o5IQ.roa
File: 8WJqM5d335qWAImp4eB_a09o5IQ.roa (raw, json)
Hash identifier: ASNbWbGzVJMuQe7iNhTRq/CI2CbCO1i/AwhHNGP79xI=
Subject key identifier: F1:62:6A:33:97:77:DF:9A:96:00:89:A9:E1:E0:7F:6B:4F:68:E4:84
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019FB39D4676E983BE9BD97D9570F25D7EEA
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/8WJqM5d335qWAImp4eB_a09o5IQ.roa
Signing time: Thu 30 Jul 2026 15:20:56 +0000
ROA not before: Thu 30 Jul 2026 15:20:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213120
IP address blocks: 2a02:2370:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:9d:46:76:e9:83:be:9b:d9:7d:95:70:f2:5d:7e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jul 30 15:20:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1626a339777df9a960089a9e1e07f6b4f68e484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:bf:1e:2b:05:f5:43:52:60:33:16:61:3e:
2d:85:6e:f9:c0:62:16:f1:32:99:63:b2:00:80:ee:
54:b1:8a:15:ac:da:db:8b:8f:9d:04:ac:d6:26:bd:
1f:c5:34:df:d6:07:62:48:08:22:ed:b3:3c:e8:78:
4d:66:1b:f7:c7:86:03:2d:1b:5b:16:3f:b5:79:74:
91:0e:15:d5:5c:84:46:d7:a1:b4:b1:f7:5b:0c:d0:
8e:3e:8e:5a:e1:45:01:0c:8b:db:37:cb:26:fe:51:
63:41:75:7e:80:04:cb:cf:bb:27:6d:d9:48:8c:62:
3c:8e:ad:85:9e:33:88:aa:e8:88:ef:d3:1d:b3:b1:
27:4b:15:49:a7:32:79:62:dc:81:0a:6e:f3:05:f2:
14:20:64:46:3d:7d:f2:9b:80:a2:0e:8c:4f:e3:47:
c0:fa:0b:b3:22:3c:a9:c0:82:0f:25:06:d5:06:63:
1a:f0:0b:8b:8a:7f:a3:1c:e6:8a:be:c2:05:5c:37:
86:ab:04:74:bc:49:d3:ab:6d:0b:82:f1:9c:f0:c9:
f6:28:1f:b6:31:57:81:97:ba:b3:15:91:a6:dc:23:
d8:c9:fb:8f:a8:17:22:99:9b:08:1a:81:87:cd:48:
c7:7b:68:5c:c2:24:43:ec:c9:76:d3:2f:ea:94:8b:
39:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:62:6A:33:97:77:DF:9A:96:00:89:A9:E1:E0:7F:6B:4F:68:E4:84
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/8WJqM5d335qWAImp4eB_a09o5IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2370:1000::/48
Signature Algorithm: sha256WithRSAEncryption
9c:3b:0b:36:e9:28:57:44:3f:60:ce:3f:6e:1a:59:c4:8e:b0:
6e:4f:75:f3:d3:c8:d6:92:be:87:7a:35:98:ec:e0:ee:8d:72:
d5:bb:ce:36:e6:86:42:c5:b6:d8:23:74:14:4e:c2:38:01:40:
dc:17:4c:43:a7:1b:57:94:4e:1a:78:27:7b:bb:7b:36:4a:b5:
fc:51:82:c5:dc:ec:ce:7e:ff:ed:96:72:c9:02:69:d4:92:16:
8a:b8:5c:01:25:9c:ce:34:a1:a6:9e:05:77:4d:a7:7f:bd:ef:
ee:df:0c:cd:82:bd:42:3a:a2:e9:ab:35:ea:2b:a4:e0:7d:07:
68:72:dc:88:b4:d6:25:95:f9:02:c1:99:cf:b4:d6:fe:52:bb:
11:4d:24:15:b1:1a:10:02:3b:84:f9:da:09:fc:6c:e7:e2:34:
fe:66:66:3e:60:10:7d:f1:37:6f:8d:c5:9c:bf:51:c1:01:69:
f7:45:aa:be:a1:bb:37:3c:34:7e:99:02:86:f7:05:86:8d:ec:
29:89:19:83:08:53:1f:e3:cd:2a:c5:38:b7:2d:90:ce:b1:56:
a7:8c:25:d4:c0:69:ac:f2:0d:95:90:06:29:5d:92:1e:61:e2:
41:8e:2d:0b:62:d6:ff:71:df:38:80:da:2e:e1:d2:3d:9b:b0:
9a:a2:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:39:51 2026 by rpki-client