Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8rQoZzwLK5uhQjEZJpL5vPjurWY.roa
File: 8rQoZzwLK5uhQjEZJpL5vPjurWY.roa (raw, json)
Hash identifier: mx7/eb8mrYiFu4thVnBtFqJi6xzFf3otwbYXjrhH8gs=
Subject key identifier: F2:B4:28:67:3C:0B:2B:9B:A1:42:31:19:26:92:F9:BC:F8:EE:AD:66
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A048E0E45FC3BA6B156EFF2E4233FEC8DD
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8rQoZzwLK5uhQjEZJpL5vPjurWY.roa
Signing time: Fri 28 Aug 2026 14:58:13 +0000
ROA not before: Fri 28 Aug 2026 14:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218835
IP address blocks: 2a0c:9a40:e100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:e0:e4:5f:c3:ba:6b:15:6e:ff:2e:42:33:fe:c8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 28 14:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2b428673c0b2b9ba14231192692f9bcf8eead66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:49:89:8d:39:a5:6e:67:b4:44:8d:e0:9f:
b7:c2:e4:14:11:43:b8:70:54:08:00:4c:db:b3:67:
11:43:34:7a:f7:50:59:c9:50:18:f6:c6:da:83:c8:
7a:dd:72:c2:d9:ec:b7:10:0e:63:72:b4:83:23:2f:
16:bd:fa:5a:5b:d4:be:ef:c9:fd:05:94:99:13:c8:
1c:c3:2e:e2:a6:a3:2e:59:da:a7:10:1a:b9:de:ad:
bd:fb:cd:86:1c:f2:ab:ae:3d:4c:a1:e0:e7:f3:52:
ff:ac:f1:c9:61:8b:9b:1e:be:84:d2:34:41:72:d7:
43:f5:b5:42:e5:91:b6:17:eb:72:4c:05:b2:82:b6:
6d:53:41:08:09:4d:f4:f7:dc:66:dc:81:90:34:4c:
d4:47:81:cc:1e:93:4e:cc:cd:11:5c:1a:be:22:c6:
0d:36:ce:9a:0a:12:7e:57:ba:42:6c:ac:a8:3a:a7:
95:77:53:79:77:81:d8:c0:8c:c5:ff:14:e3:0c:2e:
f1:72:52:7a:03:58:23:de:62:cb:58:2c:bc:07:e9:
7d:44:fb:8e:11:7f:a3:c9:68:91:b5:1b:0c:45:4a:
3a:65:bd:a9:7f:55:b2:65:f4:8d:ec:39:5e:4d:ab:
75:87:1c:52:3a:bb:61:66:d8:47:17:ce:07:8d:b5:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:28:67:3C:0B:2B:9B:A1:42:31:19:26:92:F9:BC:F8:EE:AD:66
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8rQoZzwLK5uhQjEZJpL5vPjurWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e100::/44
Signature Algorithm: sha256WithRSAEncryption
4d:9a:d6:3d:5d:a1:a8:7f:92:9c:2f:04:82:63:4f:72:02:80:
b6:47:67:d9:d8:b8:2c:9c:fa:fd:54:6e:46:f2:aa:16:e5:62:
e9:48:f8:df:54:eb:54:c8:08:3a:96:4d:2d:5e:57:01:fa:68:
90:7c:e2:65:0d:63:dc:15:17:8d:00:b5:ca:80:46:48:6c:41:
b9:2e:f4:ab:26:b8:97:db:00:10:c5:c6:fe:78:36:99:0f:6e:
f3:b5:76:1e:0b:10:e8:1f:db:34:02:89:96:2f:d2:f9:0c:a8:
1b:69:4f:f7:19:62:9c:ec:07:a2:61:9c:11:8a:8c:e2:cd:7f:
a3:ca:48:05:a7:98:51:6d:3c:4c:94:00:7c:21:38:e4:70:cc:
b1:6a:48:3c:65:4e:25:65:07:4a:fe:d7:69:24:c0:b0:1c:ed:
8f:18:e4:38:39:ec:bf:42:78:ba:aa:01:31:d4:87:6d:ea:55:
c5:8b:b9:cb:19:18:f4:29:fd:cf:36:57:0c:6f:58:9c:82:e2:
5c:50:a0:79:a0:f7:9a:a4:4f:57:76:8a:a8:f2:75:96:0e:b7:
a8:07:81:df:fe:86:5c:96:cd:e9:78:40:d5:f2:5d:23:d8:7e:
5a:5a:61:0e:21:07:68:4a:ae:73:ad:5b:7e:54:3d:05:c6:9b:
21:19:83:3e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBI4ORfw7prFW7/LkIz/sjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYwODI4MTQ1ODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmI0Mjg2NzNjMGIyYjliYTE0MjMxMTkyNjkyZjliY2Y4ZWVhZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbFJiY05pW5ntESN4J+3wuQUEUO4
cFQIAEzbs2cRQzR691BZyVAY9sbag8h63XLC2ey3EA5jcrSDIy8WvfpaW9S+78n9
BZSZE8gcwy7ipqMuWdqnEBq53q29+82GHPKrrj1MoeDn81L/rPHJYYubHr6E0jRB
ctdD9bVC5ZG2F+tyTAWygrZtU0EICU3099xm3IGQNEzUR4HMHpNOzM0RXBq+IsYN
Ns6aChJ+V7pCbKyoOqeVd1N5d4HYwIzF/xTjDC7xclJ6A1gj3mLLWCy8B+l9RPuO
EX+jyWiRtRsMRUo6Zb2pf1WyZfSN7DleTat1hxxSOrthZthHF84HjbVdqQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPK0KGc8CyuboUIxGSaS+bz47q1mMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvOHJRb1p6d0xLNXVoUWpFWkpwTDV2UGp1cldZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQOEA
MA0GCSqGSIb3DQEBCwUAA4IBAQBNmtY9XaGof5KcLwSCY09yAoC2R2fZ2LgsnPr9
VG5G8qoW5WLpSPjfVOtUyAg6lk0tXlcB+miQfOJlDWPcFReNALXKgEZIbEG5LvSr
JriX2wAQxcb+eDaZD27ztXYeCxDoH9s0AomWL9L5DKgbaU/3GWKc7AeiYZwRiozi
zX+jykgFp5hRbTxMlAB8ITjkcMyxakg8ZU4lZQdK/tdpJMCwHO2PGOQ4Oey/Qni6
qgEx1Idt6lXFi7nLGRj0Kf3PNlcMb1icguJcUKB5oPeapE9Xdoqo8nWWDreoB4Hf
/oZcls3peEDV8l0j2H5aWmEOIQdoSq5zrVt+VD0FxpshGYM+
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:57 2026 by rpki-client