Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/8nnUCaJQXN-nQj9bznCUT32U5ec.roa
File: 8nnUCaJQXN-nQj9bznCUT32U5ec.roa (raw, json)
Hash identifier: cl9xzaH5wGrkXnoo9hpW9MPiIkknfBd+bptpAUznzJw=
Subject key identifier: F2:79:D4:09:A2:50:5C:DF:A7:42:3F:5B:CE:70:94:4F:7D:94:E5:E7
Certificate issuer: /CN=7efab9476b3ecb1e6810167380fc8b1876a0d213
Certificate serial: 01A0CE4E426C4D6958945081217B15BA45A4
Authority key identifier: 7E:FA:B9:47:6B:3E:CB:1E:68:10:16:73:80:FC:8B:18:76:A0:D2:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/8nnUCaJQXN-nQj9bznCUT32U5ec.roa
Signing time: Wed 23 Sep 2026 12:47:10 +0000
ROA not before: Wed 23 Sep 2026 12:47:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5576
IP address blocks: 134.0.32.0/19 maxlen: 24
134.0.32.0/24 maxlen: 24
134.0.33.0/24 maxlen: 24
134.0.34.0/24 maxlen: 24
134.0.35.0/24 maxlen: 24
134.0.36.0/24 maxlen: 24
134.0.37.0/24 maxlen: 24
134.0.38.0/24 maxlen: 24
134.0.39.0/24 maxlen: 24
134.0.41.0/24 maxlen: 24
134.0.42.0/24 maxlen: 24
134.0.43.0/24 maxlen: 24
134.0.44.0/24 maxlen: 24
134.0.48.0/24 maxlen: 24
134.0.49.0/24 maxlen: 24
134.0.50.0/24 maxlen: 24
134.0.51.0/24 maxlen: 24
134.0.56.0/24 maxlen: 24
134.0.57.0/24 maxlen: 24
134.0.58.0/24 maxlen: 24
134.0.59.0/24 maxlen: 24
134.0.61.0/24 maxlen: 24
134.0.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:4e:42:6c:4d:69:58:94:50:81:21:7b:15:ba:45:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7efab9476b3ecb1e6810167380fc8b1876a0d213
Validity
Not Before: Sep 23 12:47:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f279d409a2505cdfa7423f5bce70944f7d94e5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:a3:97:f2:4f:30:cf:33:d3:cc:e7:87:47:
eb:fc:65:67:2e:71:26:74:99:78:16:10:3e:c2:0f:
1a:f7:85:8b:10:27:2d:0d:15:12:ca:55:49:df:6b:
09:b4:03:c1:6f:f1:e3:b9:47:0f:9f:0a:a7:6c:6f:
0b:eb:d2:c3:41:bc:01:33:0d:86:ca:6f:66:13:3d:
02:a9:6f:2f:6a:3f:9e:e6:c6:ad:7a:c7:dd:37:82:
bd:91:fe:7d:0c:e1:76:23:da:13:38:45:41:55:df:
f5:9b:49:34:9f:bc:da:a8:7a:d4:02:3a:c9:6b:83:
c3:af:b2:5b:34:5f:33:52:e2:f2:7c:57:c8:f1:88:
a8:6f:eb:a2:b7:b7:b1:62:01:89:3f:38:81:0c:28:
07:28:07:73:04:3c:fd:2d:28:25:68:06:56:56:94:
73:30:fc:1c:2f:22:db:9f:ad:d7:6e:86:67:32:c8:
f3:eb:74:2e:4d:3b:e4:45:b0:18:be:3f:6a:42:1f:
59:f5:4e:b1:46:b8:e8:f4:1b:91:0a:bd:02:6d:ff:
98:18:23:93:c0:6a:09:aa:5b:5a:3f:4e:d3:f2:10:
19:5d:ff:20:56:8f:46:cc:4a:f3:9a:04:13:f7:1a:
df:9a:38:f2:3a:a5:da:e4:ab:c8:5a:95:58:16:14:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:D4:09:A2:50:5C:DF:A7:42:3F:5B:CE:70:94:4F:7D:94:E5:E7
X509v3 Authority Key Identifier:
keyid:7E:FA:B9:47:6B:3E:CB:1E:68:10:16:73:80:FC:8B:18:76:A0:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/8nnUCaJQXN-nQj9bznCUT32U5ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
50:5e:f9:30:b5:0b:a7:21:71:de:23:26:62:7d:5c:ea:57:28:
92:9e:da:d2:55:46:2a:a3:f1:8f:13:28:ae:9d:ae:79:5b:4a:
9a:bb:bc:05:e9:ba:36:bb:74:8c:50:4c:63:f2:1c:5b:3f:4f:
01:12:13:29:b5:27:3c:73:6a:b6:84:d4:15:30:86:1e:4c:8f:
27:13:d0:b8:46:bf:8f:6f:13:c7:d3:7d:c6:03:c2:43:e2:9e:
23:f3:07:db:38:d5:2e:43:40:14:85:5c:b5:5f:f5:d7:46:df:
e2:f5:d2:d3:bc:9f:1a:98:ad:4f:25:36:ee:fd:9a:f2:e0:79:
f7:4e:2e:52:66:d9:85:38:0e:34:dd:a9:dd:b4:5f:2c:93:c6:
d3:a7:41:a6:56:5c:56:9c:4e:6c:d6:de:8a:2e:fd:31:10:98:
c1:f2:3d:20:33:70:64:ac:05:01:7e:52:94:fd:8e:75:d7:63:
fe:34:64:31:84:4f:45:81:b1:fa:d2:0b:80:e6:6c:da:75:87:
74:49:87:59:c4:b1:b9:b4:9a:1e:64:d0:1d:07:79:4e:97:6f:
0b:a5:12:41:46:22:44:97:1d:c4:b7:85:5b:c1:9d:bb:c4:d1:
6f:51:4f:4a:8d:5a:5d:2a:7a:25:a9:13:dd:0f:e4:12:a1:db:
b1:6d:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:38:51 2026 by rpki-client