Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/i8t87RlNI6MGUTcU6g-xRThzehU.roa
File: i8t87RlNI6MGUTcU6g-xRThzehU.roa (raw, json)
Hash identifier: u4oceMG8JRLaB+aN8Oa4Sqot84g/vb4Jm4YvpXVq1PY=
Subject key identifier: 8B:CB:7C:ED:19:4D:23:A3:06:51:37:14:EA:0F:B1:45:38:73:7A:15
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F76466B1882137663C3D1DC9427CDE872
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/i8t87RlNI6MGUTcU6g-xRThzehU.roa
Signing time: Sat 18 Jul 2026 17:29:14 +0000
ROA not before: Sat 18 Jul 2026 17:29:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a09:3f00:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:46:6b:18:82:13:76:63:c3:d1:dc:94:27:cd:e8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jul 18 17:29:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bcb7ced194d23a306513714ea0fb14538737a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:e9:fe:22:79:a0:2d:4c:6f:31:4a:96:24:
6a:57:0a:e5:f5:95:fb:84:84:b2:2f:20:87:b1:7a:
49:e5:0c:a6:c6:9b:01:6e:26:b7:7d:c6:98:79:cc:
4e:62:c3:a5:e0:81:1f:4c:f2:5a:3d:d5:15:11:6a:
de:34:38:c8:d8:7c:70:bd:70:65:2d:a0:23:01:54:
7e:2f:db:1c:3d:b0:b2:09:e0:77:b3:51:43:62:8c:
bf:87:2b:68:ea:8f:5f:68:e2:4c:cd:41:09:d3:0b:
8f:27:39:8f:25:76:d9:14:f7:2e:78:81:c8:8c:0b:
24:27:40:19:cd:0b:36:50:e4:49:16:96:9d:dd:e0:
80:49:dc:0c:0a:37:43:6a:ba:b8:78:94:1b:f9:0d:
4c:2a:e2:82:3a:b5:e9:87:12:93:0d:bb:7c:9f:56:
82:0d:79:5f:63:27:4d:4d:23:f5:48:68:2a:d0:93:
10:73:75:fe:cd:4d:c1:17:e5:3a:af:8a:fd:11:8a:
a4:d0:c5:29:60:24:eb:7e:5b:1d:a4:16:6c:03:73:
02:82:34:e1:e1:ab:1d:0c:8f:0f:30:6a:fa:60:32:
07:6d:a2:ea:6b:83:a4:54:07:be:0b:3b:a2:5d:9c:
1a:a1:74:94:ce:f5:70:51:8f:6e:89:b2:a3:8d:ed:
18:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CB:7C:ED:19:4D:23:A3:06:51:37:14:EA:0F:B1:45:38:73:7A:15
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/i8t87RlNI6MGUTcU6g-xRThzehU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:6000::/40
Signature Algorithm: sha256WithRSAEncryption
90:2e:51:b5:e9:4c:66:7f:e1:6b:39:a8:73:46:35:58:12:65:
ce:36:a1:c8:c2:a8:2b:5e:b0:0f:99:78:aa:64:22:cd:fa:91:
99:2c:18:4b:1e:99:4a:ff:1d:3f:68:65:94:d8:6c:50:ea:3f:
29:e3:aa:41:33:47:99:12:c5:62:6d:4b:71:9d:34:d0:ab:47:
8c:de:2e:53:d7:b2:b4:d8:bc:f5:17:56:7d:b9:16:04:93:fa:
53:df:69:6c:2a:ef:9c:aa:53:d4:41:3b:e5:52:93:9f:ed:15:
02:e0:f6:6b:38:8b:3a:1a:6e:ed:91:b5:a9:4e:93:43:51:b0:
18:6b:76:15:dc:0b:85:27:fa:c5:1d:ff:6d:14:d3:15:cc:05:
d5:5e:57:df:6a:55:ab:5d:a6:bb:9b:ef:05:eb:0a:9b:5e:0e:
38:4b:76:24:e3:20:85:00:82:af:c7:ba:4f:11:8d:ed:8e:7a:
31:57:2c:dc:c6:8e:3d:07:7b:a2:c0:7d:56:9d:ae:37:01:2c:
c9:f9:47:9b:37:b0:19:63:8a:18:72:a3:fc:33:55:8a:48:24:
da:e8:89:b3:dd:c1:5d:b5:22:aa:28:96:ba:39:5f:1d:bd:c9:
d4:34:69:e1:e4:08:37:14:24:75:c7:b5:28:63:3b:55:dd:88:
a9:43:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:43:46 2026 by rpki-client