Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/8KpPDxsbWUdm2uUdpYhleeRGrAY.roa
File: 8KpPDxsbWUdm2uUdpYhleeRGrAY.roa (raw, json)
Hash identifier: onwtO6lm790hsvkHwCBWU4djLXwDxoFOKGLkdsUwJNE=
Subject key identifier: F0:AA:4F:0F:1B:1B:59:47:66:DA:E5:1D:A5:88:65:79:E4:46:AC:06
Certificate issuer: /CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Certificate serial: 019F2368DF07ECB3631A9B01483A0D183000
Authority key identifier: AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/8KpPDxsbWUdm2uUdpYhleeRGrAY.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 170.237.6.0/23 maxlen: 24
170.237.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:df:07:ec:b3:63:1a:9b:01:48:3a:0d:18:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0aa4f0f1b1b594766dae51da5886579e446ac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:79:e8:36:8e:15:c6:d4:63:ed:03:9d:77:
3c:6f:14:25:f7:be:e4:0d:ed:01:d1:a8:56:f1:70:
1a:8b:3b:76:74:75:8a:4d:42:57:c4:e4:df:3d:eb:
ea:60:e7:76:8e:df:d5:35:97:d5:2e:8d:7d:04:24:
52:37:ba:21:6e:ec:03:d4:3b:3f:14:83:4e:b1:f0:
01:5d:0a:f9:93:39:7b:93:27:1d:86:6b:21:59:0c:
ed:17:d4:a6:97:e7:66:72:73:bf:d2:c1:d2:5f:fc:
ae:50:72:f3:4c:41:8f:aa:2c:9e:f6:35:eb:6a:88:
b3:29:98:8d:f5:c5:b4:c7:14:e2:87:cc:27:ce:5d:
06:7f:23:e6:49:76:85:02:be:61:b4:f4:2f:09:c6:
55:e1:99:d4:46:f2:da:67:37:6c:eb:fd:b4:65:95:
70:00:53:2c:43:54:8b:be:11:c4:e4:8d:d4:e2:56:
78:f5:41:a0:09:e0:94:30:5b:7e:2f:51:cc:1d:f6:
05:5d:8f:72:39:2b:ab:ce:8c:79:c5:d5:b9:d8:a3:
64:fe:d1:cf:d1:8d:b1:79:76:a0:df:5d:d4:cd:3b:
12:06:37:58:ba:12:b4:94:80:39:e0:f1:4b:98:79:
48:eb:91:c0:84:dd:59:a0:c9:78:f6:59:b3:b7:92:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AA:4F:0F:1B:1B:59:47:66:DA:E5:1D:A5:88:65:79:E4:46:AC:06
X509v3 Authority Key Identifier:
keyid:AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/8KpPDxsbWUdm2uUdpYhleeRGrAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.237.6.0-170.237.9.255
Signature Algorithm: sha256WithRSAEncryption
a3:9d:70:f4:c2:d8:6f:cd:51:c3:31:73:a8:dc:e1:ff:b2:f0:
da:92:9b:d7:ab:3d:a0:d4:dc:63:49:3e:8d:db:66:06:c0:43:
73:92:a2:97:f9:59:34:cf:10:fa:00:05:a8:bb:d2:58:44:18:
af:b8:9f:62:e0:be:d0:7c:56:de:39:a3:28:74:15:42:34:03:
2f:d7:e0:9b:76:00:6b:f0:de:29:5c:f0:8e:5d:48:28:e7:14:
fb:92:5b:4d:87:ec:e5:fe:da:d7:2b:b8:b7:26:19:be:d5:06:
6f:c8:ae:e7:04:38:33:1b:93:44:d4:dd:27:2b:52:5a:5e:ff:
df:fe:a8:f9:04:f8:35:7b:ee:79:2b:8c:dc:93:7a:7e:de:e4:
93:ed:25:2f:15:f7:11:88:06:f6:99:49:4a:6b:5a:6c:6f:5c:
ba:1c:a1:9d:7f:b2:91:b2:f1:6c:a6:c0:35:69:88:37:8c:39:
8d:3a:be:90:c6:4e:fd:4e:60:10:1c:08:4b:10:5d:ff:fd:ab:
2e:6c:b8:19:6e:d8:2f:a0:ac:8d:10:0e:b5:9d:12:16:9b:13:
05:c4:2b:2d:fa:a3:14:23:9a:c4:b3:11:ee:88:e1:64:20:00:
f0:68:8c:f9:5d:a7:e0:a0:ba:4c:03:3b:44:6e:27:80:a9:66:
ca:40:ca:c8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8jaN8H7LNjGpsBSDoNGDAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDVmNDY4OWE0NGM2YzliYjEwMmFjMzEzMWI2ZTcwNTM0
ZWFmNDUwHhcNMjYwNzAyMTUxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGFhNGYwZjFiMWI1OTQ3NjZkYWU1MWRhNTg4NjU3OWU0NDZhYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGB56DaOFcbUY+0DnXc8bxQl977k
De0B0ahW8XAaizt2dHWKTUJXxOTfPevqYOd2jt/VNZfVLo19BCRSN7ohbuwD1Ds/
FINOsfABXQr5kzl7kycdhmshWQztF9Sml+dmcnO/0sHSX/yuUHLzTEGPqiye9jXr
aoizKZiN9cW0xxTih8wnzl0GfyPmSXaFAr5htPQvCcZV4ZnURvLaZzds6/20ZZVw
AFMsQ1SLvhHE5I3U4lZ49UGgCeCUMFt+L1HMHfYFXY9yOSurzox5xdW52KNk/tHP
0Y2xeXag313UzTsSBjdYuhK0lIA54PFLmHlI65HAhN1ZoMl49lmzt5LJAwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPCqTw8bG1lHZtrlHaWIZXnkRqwGMB8GA1UdIwQY
MBaAFKwF9GiaRMbJuxAqwxMbbnBTTq9FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFYMGFKcEV4c203RUNyREV4dHVjRk5PcjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2Ut
MzJlYjNhNGVhZDQzLzEvOEtwUER4c2JXVWRtMnVVZHBZaGxlZVJHckFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2UtMzJlYjNhNGVhZDQz
LzEvckFYMGFKcEV4c203RUNyREV4dHVjRk5PcjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGq7QYD
BAGq7QgwDQYJKoZIhvcNAQELBQADggEBAKOdcPTC2G/NUcMxc6jc4f+y8NqSm9er
PaDU3GNJPo3bZgbAQ3OSopf5WTTPEPoABai70lhEGK+4n2LgvtB8Vt45oyh0FUI0
Ay/X4Jt2AGvw3ilc8I5dSCjnFPuSW02H7OX+2tcruLcmGb7VBm/IrucEODMbk0TU
3ScrUlpe/9/+qPkE+DV77nkrjNyTen7e5JPtJS8V9xGIBvaZSUprWmxvXLocoZ1/
spGy8WymwDVpiDeMOY06vpDGTv1OYBAcCEsQXf/9qy5suBlu2C+grI0QDrWdEhab
EwXEKy36oxQjmsSzEe6I4WQgAPBojPldp+CgukwDO0RuJ4CpZspAysg=
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:43 2026 by rpki-client