Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8CTR18rXCeeikog8wckzjY5yu2s.roa
File: 8CTR18rXCeeikog8wckzjY5yu2s.roa (raw, json)
Hash identifier: aIThv4r5WypUL/bprKahswgWpc4lJLVX5WOVb4f0jZQ=
Subject key identifier: F0:24:D1:D7:CA:D7:09:E7:A2:92:88:3C:C1:C9:33:8D:8E:72:BB:6B
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D39392066C2B48D56D68CF1C7618D4530
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8CTR18rXCeeikog8wckzjY5yu2s.roa
Signing time: Sun 29 Mar 2026 10:52:18 +0000
ROA not before: Sun 29 Mar 2026 10:52:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2a05:9a40::/29 maxlen: 32
2a10:b40::/29 maxlen: 32
2a10:3f80::/29 maxlen: 32
2a14:62c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:39:20:66:c2:b4:8d:56:d6:8c:f1:c7:61:8d:45:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 29 10:52:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f024d1d7cad709e7a292883cc1c9338d8e72bb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:2e:f5:1c:88:45:cd:d3:6d:33:bb:36:60:
58:72:89:6e:b8:5e:e1:2b:cc:e7:b8:ad:e9:8d:46:
70:b4:5e:a8:ac:1d:6f:98:bf:8f:2f:18:1a:51:71:
e5:f7:eb:7f:a8:e6:7b:17:4a:75:1c:d6:09:ed:73:
d6:c1:53:50:65:02:54:a4:48:2b:49:6f:fb:d9:f5:
77:41:d7:fc:82:40:5b:09:96:76:0a:75:1e:1a:0c:
fe:92:68:0f:3c:e4:00:da:07:46:25:57:eb:b5:7e:
d4:0c:4a:b6:4f:a4:f9:c5:97:b7:94:1b:ef:c4:e2:
af:96:67:0a:46:09:04:8d:87:74:a8:0a:ec:1e:76:
ec:b2:d6:78:84:67:ff:17:6b:96:36:f1:39:cb:c9:
74:e6:e2:30:2e:bd:78:28:0a:d7:b7:d5:d0:47:fa:
e8:65:8f:e8:8a:63:5b:9e:b5:46:79:d3:04:71:6a:
d0:56:ec:0c:d5:8c:c4:e2:67:f7:e4:48:0e:07:cf:
7b:07:9d:e9:15:17:ed:52:fd:2e:cb:a1:91:9c:0b:
aa:22:7d:7d:24:e2:37:53:64:e3:c8:49:61:9a:44:
fc:fc:9b:68:6e:ec:03:5b:c0:69:ee:be:64:ec:58:
45:68:6b:3c:91:79:88:34:18:04:b1:1a:43:72:2b:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:24:D1:D7:CA:D7:09:E7:A2:92:88:3C:C1:C9:33:8D:8E:72:BB:6B
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8CTR18rXCeeikog8wckzjY5yu2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a10:b40::/29
2a10:3f80::/29
2a14:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:c7:4a:59:8e:c1:c8:d7:cc:6f:fe:c8:b0:be:05:12:40:a8:
f8:a6:30:58:30:a3:cb:1a:63:5b:16:68:e8:1c:5b:79:93:94:
68:d6:a5:a1:a9:0a:95:d6:58:c7:3d:6c:10:17:e6:4c:7d:78:
87:c9:12:96:6f:2d:02:60:8b:27:14:cc:3f:ba:16:20:37:2e:
47:ac:e6:90:6d:93:88:9b:ae:cc:95:c3:3e:5a:b1:8e:19:c9:
52:f3:27:4d:38:e0:92:eb:54:da:6f:5e:29:ed:bf:76:74:f7:
80:99:9c:01:2d:ca:ef:6e:45:07:cd:d2:42:17:73:8b:17:4c:
11:db:f3:41:eb:8b:47:10:11:97:be:a3:fc:55:22:f5:32:34:
db:6f:10:ab:f7:de:ba:9d:1f:05:4d:7c:41:db:ba:0a:90:de:
9e:42:20:e2:b3:f9:fa:c7:d1:99:02:c6:df:5d:f9:cd:57:04:
7a:26:d0:c1:47:cf:ce:f6:08:fb:ba:fd:f1:53:fa:e7:1b:bf:
ac:6b:6e:fd:06:b7:b6:66:d4:81:e9:83:29:db:68:70:0c:ed:
49:77:55:21:26:af:1e:eb:e3:d8:7a:fd:16:46:b2:b5:17:ec:
fa:56:87:56:e4:83:62:ed:43:cf:a6:c1:dc:06:6d:3e:01:df:
21:cf:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:08 2026 by rpki-client