Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/f4t99DHwC1imSdH0qBOau6ppWXc.roa
File: f4t99DHwC1imSdH0qBOau6ppWXc.roa (raw, json)
Hash identifier: R9huUo4NQkxmrWCn+znDnfiLaLSzUXjUqRrEAKTH5p0=
Subject key identifier: 7F:8B:7D:F4:31:F0:0B:58:A6:49:D1:F4:A8:13:9A:BB:AA:69:59:77
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019FE718357C8AE56970C06519A19813EAD7
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/f4t99DHwC1imSdH0qBOau6ppWXc.roa
Signing time: Sun 09 Aug 2026 15:15:51 +0000
ROA not before: Sun 09 Aug 2026 15:15:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 212.66.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e7:18:35:7c:8a:e5:69:70:c0:65:19:a1:98:13:ea:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Aug 9 15:15:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f8b7df431f00b58a649d1f4a8139abbaa695977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:37:a9:ca:58:e6:7d:65:9c:f0:ad:d1:6f:
d0:e3:1f:52:da:d2:3e:10:06:ee:89:28:6d:cb:d3:
a0:a8:38:83:93:7a:b5:3e:3d:56:fa:f8:c3:0d:6f:
c3:a7:49:85:51:40:34:16:33:8f:7b:18:e6:97:5a:
c5:38:5e:74:69:f4:86:f4:25:69:34:86:e3:1c:ec:
a2:9f:c6:0f:42:a6:8e:f6:8d:60:11:61:1f:44:85:
7d:c1:20:74:65:5b:25:47:30:86:4b:97:be:59:99:
56:af:36:81:e7:9a:03:80:7a:28:e3:4d:c8:08:3f:
0c:2b:69:e2:2a:72:6c:66:30:b5:5d:ca:bb:83:e8:
a3:93:d5:ed:c1:79:11:e8:08:08:ed:be:69:e5:37:
5a:a3:1d:17:35:30:d8:e8:d7:9f:71:37:cd:2a:bf:
47:69:aa:a5:6d:5c:b0:86:77:8d:df:39:d9:e3:c1:
c7:52:2f:30:50:e4:75:04:03:84:3c:fc:2c:a5:33:
46:1e:13:6f:02:c8:d6:db:8d:3a:80:a5:e0:30:45:
f2:8a:cc:6a:66:fe:74:f9:62:c4:85:e0:80:3a:ec:
b6:83:2c:c8:87:b0:d3:ea:00:a3:a6:90:7b:9a:e0:
ca:23:95:b0:d5:3e:cb:33:ed:4d:df:13:88:09:14:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8B:7D:F4:31:F0:0B:58:A6:49:D1:F4:A8:13:9A:BB:AA:69:59:77
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/f4t99DHwC1imSdH0qBOau6ppWXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.48.0/24
Signature Algorithm: sha256WithRSAEncryption
58:08:e6:b2:d4:bc:c7:c6:1d:94:ac:32:de:94:e6:2b:fa:1c:
7e:18:82:89:2a:31:0e:3d:9f:46:92:32:ea:df:b2:38:0b:62:
d0:90:c3:c5:ad:c5:0c:41:e7:e4:ad:89:8f:ab:ed:e7:08:db:
63:4f:5f:24:72:0a:ab:a9:08:51:d9:11:72:02:52:ed:7d:5a:
c7:dd:8b:fd:bf:f7:22:a3:bf:3c:84:29:3e:15:b1:8a:f3:80:
3c:2e:b1:7b:a9:3c:87:92:64:fe:2b:46:19:19:11:31:3d:97:
c3:36:ac:5d:c9:d3:b8:35:36:b7:94:48:f9:96:90:bb:6d:20:
52:34:6c:47:4c:68:24:59:1d:0d:51:43:eb:37:ec:19:d8:58:
4c:2b:cc:b5:e1:20:69:3c:fb:6f:6e:3d:2f:ba:21:ee:f0:77:
b4:ce:79:c7:ac:d4:d7:81:5f:14:f9:9a:3c:8f:82:62:14:9f:
1d:9e:00:f9:05:ae:42:00:ce:16:1e:39:52:c4:4e:bc:3c:92:
73:d9:84:f1:dd:47:7f:d0:20:7d:6b:99:fe:d6:eb:07:73:0b:
a7:df:a5:82:8e:9d:1e:f2:5d:69:b6:cc:83:10:15:83:7f:ff:
dd:2f:2d:5b:70:f0:f3:43:90:65:14:10:39:7e:b4:18:06:35:
ea:e6:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 22:52:14 2026 by rpki-client