Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/8bqJFsyWqg_UEOnSZFHSVf5aoH0.roa
File: 8bqJFsyWqg_UEOnSZFHSVf5aoH0.roa (raw, json)
Hash identifier: NA/6dOezEe/jaF2jZ73VKdIAylZPkRnMSXRyDgyV7xc=
Subject key identifier: F1:BA:89:16:CC:96:AA:0F:D4:10:E9:D2:64:51:D2:55:FE:5A:A0:7D
Certificate issuer: /CN=79cb91394b790781d3a8773a855e5a9a3af20810
Certificate serial: 019FF25C1E08E7CA2B37B43AC2FDA7F06719
Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/8bqJFsyWqg_UEOnSZFHSVf5aoH0.roa
Signing time: Tue 11 Aug 2026 19:45:51 +0000
ROA not before: Tue 11 Aug 2026 19:45:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219329
IP address blocks: 2a14:d282::/32 maxlen: 48
2a14:d283::/32 maxlen: 48
2a14:d284::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:5c:1e:08:e7:ca:2b:37:b4:3a:c2:fd:a7:f0:67:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810
Validity
Not Before: Aug 11 19:45:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1ba8916cc96aa0fd410e9d26451d255fe5aa07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f6:73:5f:a2:87:54:33:3f:fc:99:6f:17:97:
51:8e:27:de:f4:82:78:57:80:a9:f9:db:fa:85:ab:
a7:0c:5b:b5:80:ff:5f:d3:15:9e:b5:4b:e4:79:a6:
a5:62:1c:3d:1e:ea:cb:d2:93:39:f4:52:d4:75:2a:
9b:79:5e:de:60:22:a7:66:6b:96:f6:59:e8:8d:87:
13:bc:c3:97:53:5a:2c:c3:82:a3:23:40:53:67:b9:
19:4e:16:bf:43:99:df:31:7c:f8:61:8d:36:4c:52:
9e:0b:4a:c1:d9:36:e8:20:5d:3c:da:37:1c:23:17:
aa:33:cd:97:7a:69:80:f0:c4:4f:0d:de:de:e2:c3:
29:6a:4d:ff:c6:b8:cc:a5:7b:ee:3f:07:4b:56:9a:
81:72:58:2e:2e:29:c3:5f:e1:3d:47:a9:db:52:42:
9b:45:08:c3:46:cc:f8:45:0c:3d:8c:33:96:aa:86:
fb:c8:f1:11:84:fe:b8:8a:f9:46:62:95:c4:e1:48:
c9:86:d6:13:1d:7a:c8:37:57:8b:b1:ee:f6:9a:5a:
e5:e0:34:f7:ff:64:86:36:4e:3c:78:a1:36:66:f0:
f4:83:87:16:76:5a:5f:b7:17:15:cd:7b:75:ea:9a:
ea:52:13:ce:ea:e1:db:21:41:ae:28:d2:9a:48:39:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BA:89:16:CC:96:AA:0F:D4:10:E9:D2:64:51:D2:55:FE:5A:A0:7D
X509v3 Authority Key Identifier:
keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/8bqJFsyWqg_UEOnSZFHSVf5aoH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:d282::-2a14:d284:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:aa:3a:58:08:50:27:b5:e5:e9:e3:ca:c3:4e:b4:23:f2:93:
fd:e1:02:d3:9d:da:08:8f:3d:cd:21:2e:e6:89:57:bf:21:15:
9a:69:3b:ac:83:16:3e:5f:1b:f8:a2:f4:43:eb:36:b6:37:98:
30:c9:f3:fd:c0:87:15:ff:5d:f8:04:14:c7:b4:ff:36:44:80:
b3:ed:a8:a0:e0:10:8b:83:e9:97:84:ed:91:5e:9e:b7:fe:d1:
de:b9:8e:d2:0d:33:32:32:86:86:79:57:e5:89:71:4c:2e:f7:
ad:5e:84:cf:d0:b9:d0:7e:17:54:4f:ce:98:08:47:ed:ea:08:
5e:60:f6:66:2b:0b:b7:79:aa:6f:26:cb:dc:8c:37:50:08:58:
ce:4b:d2:00:7b:29:5f:2e:33:07:61:9a:8f:8f:b4:e2:fd:41:
b0:c9:10:53:92:cd:24:93:97:8b:f3:94:41:cf:ed:d2:85:ab:
78:dc:bd:a0:ff:58:14:3a:af:a9:06:36:76:00:e9:57:21:41:
3c:d0:2d:85:64:fd:7b:6a:00:ec:f9:f5:46:5e:02:c5:a7:ec:
54:13:2e:50:11:7b:66:9f:72:87:81:5b:f1:00:fb:87:ba:21:
01:bd:c0:af:eb:cc:6d:c6:46:13:17:00:49:89:81:6b:2b:8a:
3c:ad:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:12:38 2026 by rpki-client