Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8fHb4LgISCu1-lbWQ9C2Nn08_98.roa
File: 8fHb4LgISCu1-lbWQ9C2Nn08_98.roa (raw, json)
Hash identifier: lIdV5j7+cPSjFZp2RMQZF73b9ATpAQJ1hh6H4PyLGbQ=
Subject key identifier: F1:F1:DB:E0:B8:08:48:2B:B5:FA:56:D6:43:D0:B6:36:7D:3C:FF:DF
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019CF2F6DA09F6618193BA4240CA45764165
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8fHb4LgISCu1-lbWQ9C2Nn08_98.roa
Signing time: Sun 15 Mar 2026 19:26:29 +0000
ROA not before: Sun 15 Mar 2026 19:26:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210815
IP address blocks: 2a13:c440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:f6:da:09:f6:61:81:93:ba:42:40:ca:45:76:41:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 15 19:26:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1f1dbe0b808482bb5fa56d643d0b6367d3cffdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:7a:84:c2:6d:af:47:7a:de:18:af:a6:98:
4b:e0:70:d1:66:0d:f6:df:48:d5:e0:6b:be:8a:b1:
53:fa:d9:2d:5c:67:0d:f1:4b:d6:f1:b5:ac:43:f2:
fd:07:bd:b9:e7:67:d7:77:ff:3f:18:2b:4a:9c:f6:
69:ac:66:80:ce:9a:d4:cc:f4:fb:03:c1:d3:01:4f:
3b:70:01:98:f4:f5:d9:84:f4:48:94:d3:f5:da:f8:
f7:24:55:c4:1d:4b:60:77:4b:e5:d0:b6:ee:c5:39:
48:d7:1d:29:d9:16:63:5e:64:75:b3:52:3c:75:de:
58:6f:2b:c0:0b:2f:32:4b:26:65:55:80:0b:83:f0:
f4:b7:b7:d0:cc:45:19:35:23:05:a5:77:b7:17:2f:
5f:55:2b:08:2f:bd:4f:6b:09:4a:88:6d:b1:b8:7c:
74:2a:53:9c:f9:ac:9e:42:99:72:1c:0e:0d:ef:93:
66:0c:d6:ac:96:5d:f0:5f:63:6b:47:fe:06:0a:f8:
8c:cb:6a:71:e5:30:94:f7:d4:0d:e7:57:68:15:13:
7b:36:33:32:77:ac:e6:73:df:af:cd:b2:74:57:8f:
c0:13:c0:6d:83:16:01:9d:63:45:a9:e5:3e:c4:57:
46:df:88:59:be:fc:00:29:17:e9:79:9a:20:45:b3:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F1:DB:E0:B8:08:48:2B:B5:FA:56:D6:43:D0:B6:36:7D:3C:FF:DF
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8fHb4LgISCu1-lbWQ9C2Nn08_98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c440::/29
Signature Algorithm: sha256WithRSAEncryption
3a:e7:f8:10:dd:51:e4:6a:47:ed:6c:08:fd:e3:44:6c:b9:8a:
2a:a9:5a:73:7a:61:6c:c2:6d:a1:ae:fd:54:14:84:63:47:d3:
18:12:c1:b1:73:d2:20:93:30:05:2e:0a:8f:1f:0b:19:49:6b:
95:37:75:8f:21:c3:a2:8b:c5:75:fe:34:10:3d:58:ae:22:e6:
1d:95:33:13:83:ff:57:ae:3a:2f:c0:b3:2f:9f:4c:65:0b:15:
51:64:b8:24:3f:8d:d7:e3:1a:41:08:49:82:1e:93:8c:07:58:
d6:d2:86:3e:e2:9e:24:6e:a1:36:1e:50:57:5d:04:44:df:12:
66:b9:3d:67:33:d2:04:42:90:75:13:c7:2b:c8:04:73:31:e1:
7a:12:54:6b:12:a7:09:e0:72:c3:25:98:2a:28:f9:05:ae:c4:
72:23:18:36:e0:1b:c7:b7:1d:81:16:7d:d3:0b:ed:f4:0b:9e:
44:d2:0a:6b:3e:d6:7e:3e:c1:20:a5:b6:66:b4:07:2a:25:45:
14:fb:82:5f:14:d9:68:85:5e:0a:d0:60:db:51:85:08:06:00:
0d:4a:c4:db:e3:0f:4b:96:d8:98:a2:66:cc:be:41:8a:01:5b:
cc:69:af:d9:29:9f:78:a7:6f:c4:f5:af:5f:3c:9d:f9:a1:cf:
0c:64:21:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 23:02:23 2026 by rpki-client