Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/8-xxpDwUI-SMOUJkeoKUw4jnrSU.roa
File: 8-xxpDwUI-SMOUJkeoKUw4jnrSU.roa (raw, json)
Hash identifier: ltI8pUplbk09D+p72n3xemvqUOhES2+4gjg9EzenNiU=
Subject key identifier: F3:EC:71:A4:3C:14:23:E4:8C:39:42:64:7A:82:94:C3:88:E7:AD:25
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 01A0232ED9006473F0EE7B3D35C9F726CAEC
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/8-xxpDwUI-SMOUJkeoKUw4jnrSU.roa
Signing time: Fri 21 Aug 2026 07:17:47 +0000
ROA not before: Fri 21 Aug 2026 07:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47983
IP address blocks: 185.173.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:2e:d9:00:64:73:f0:ee:7b:3d:35:c9:f7:26:ca:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Aug 21 07:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3ec71a43c1423e48c3942647a8294c388e7ad25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:c1:3d:5c:4d:9d:2d:37:12:67:24:99:a8:
ae:bb:9f:fe:05:41:01:61:46:66:fc:f3:9e:1a:b2:
90:a4:0c:26:cb:51:b0:0c:c3:1c:44:bf:15:6b:e4:
fb:03:17:01:ca:fb:48:24:e2:61:67:2c:93:94:46:
fd:15:33:e1:1c:49:47:2f:80:e9:37:54:85:e2:c1:
fb:0f:c6:85:08:9b:b1:a1:1b:03:3e:7d:87:d4:5b:
33:12:0d:b8:32:bb:f5:64:f5:34:50:f5:a7:7f:59:
02:5d:d7:b8:22:5d:a5:75:39:90:ca:f8:e1:47:e0:
4a:fc:92:87:ee:54:c9:c0:e1:16:18:fc:f0:24:15:
7d:b2:6c:a4:a4:52:6e:46:8c:8e:4d:e8:8b:f7:10:
22:db:6a:f1:91:cc:6b:8e:93:c0:08:5b:15:49:fa:
e0:36:81:39:d5:ac:2c:c6:68:b1:23:c4:7a:78:de:
bb:6f:8c:f6:98:60:9c:3e:cd:23:3c:e5:1c:9c:9d:
b0:5d:06:ed:8a:9e:ee:85:40:22:8f:b5:9c:e3:10:
bd:09:96:85:c5:fd:dd:d6:35:d8:db:04:b0:6b:29:
5a:cf:7e:4b:23:23:0f:ea:91:8e:17:16:d2:77:3c:
eb:b2:d6:2c:03:28:6a:69:0c:0e:a9:62:b7:56:74:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EC:71:A4:3C:14:23:E4:8C:39:42:64:7A:82:94:C3:88:E7:AD:25
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/8-xxpDwUI-SMOUJkeoKUw4jnrSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:6b:c3:23:d3:a1:dd:9f:3b:cc:96:2c:4d:a5:de:66:38:6b:
55:32:ef:22:af:62:8d:5d:b0:c6:3b:63:bb:cc:2b:0c:45:c8:
e7:cc:4d:fa:a7:42:40:39:30:af:b0:af:c3:17:f3:a2:58:2e:
16:2e:23:30:6d:f3:a0:f8:6b:29:ae:66:e7:51:2e:39:be:e9:
78:63:81:5c:0f:24:5e:8f:3a:69:79:a9:ee:12:46:f2:41:d5:
d2:7d:54:c4:34:e5:c5:74:01:09:39:08:91:6c:d5:a8:46:30:
d4:de:6c:a6:a3:9c:e6:cd:82:aa:fb:72:ee:4b:7b:57:cc:92:
1f:7d:25:e3:73:d2:a2:0a:39:ac:db:82:ab:c1:1f:be:c6:69:
55:4d:5e:76:1d:70:5b:b3:6e:e0:fa:78:11:1a:53:4a:41:44:
dc:7e:16:56:37:75:39:2f:d9:c9:5a:3a:fc:83:cd:ee:50:a7:
5d:db:ef:c3:85:ec:31:40:d9:4a:42:69:b6:e0:69:f8:d0:b3:
c2:04:b9:95:0e:8b:49:6e:ae:f0:60:71:af:5c:a5:79:85:b4:
4a:3a:ff:21:c6:0d:13:87:c4:a5:ea:76:4a:f7:18:7a:6a:bd:
96:c3:7d:70:f3:8a:7c:a1:c5:fe:91:bf:d1:e4:d2:45:de:29:
3a:fe:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:26:44 2026 by rpki-client