Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/8RbBXH1S5SZoO2H1I8TWfyY1bXg.roa
File: 8RbBXH1S5SZoO2H1I8TWfyY1bXg.roa (raw, json)
Hash identifier: Gx8Z5U7ixHRQDdUgSPK0SaFxRVsJdl03TUBBrdDMeeo=
Subject key identifier: F1:16:C1:5C:7D:52:E5:26:68:3B:61:F5:23:C4:D6:7F:26:35:6D:78
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A1B12AB69C06F6A5D24841F7728369A810
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/8RbBXH1S5SZoO2H1I8TWfyY1bXg.roa
Signing time: Fri 06 Nov 2026 14:02:08 +0000
ROA not before: Fri 06 Nov 2026 14:02:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15510
IP address blocks: 87.236.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:2a:b6:9c:06:f6:a5:d2:48:41:f7:72:83:69:a8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Nov 6 14:02:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f116c15c7d52e526683b61f523c4d67f26356d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:8d:b5:20:64:f6:66:1d:56:97:f8:cd:61:
70:e7:c2:f3:fc:dc:5a:23:2c:5e:9a:43:99:c2:99:
59:2c:1e:ac:9a:eb:13:06:a2:e7:60:b3:6e:36:30:
cc:28:b9:47:e9:bb:f8:7e:99:74:af:79:51:0a:91:
b6:84:ae:df:0c:86:e2:28:fe:ab:e5:93:40:eb:6f:
c4:4a:85:9c:d8:b8:54:42:96:8f:7a:ff:ad:f6:76:
62:fb:72:70:42:71:d6:81:c0:60:cc:7e:a0:85:7b:
93:28:91:20:99:05:cb:1e:67:f3:b0:de:eb:2d:dd:
9c:00:e2:e6:8a:eb:4d:5e:7a:08:d1:80:ee:96:38:
7c:4b:9a:27:5e:5d:45:77:76:47:d4:97:c5:63:25:
03:91:8d:ef:c7:c3:1e:3a:0e:16:77:d2:7c:b5:02:
3c:6a:c8:5e:94:fc:c0:78:4b:ff:ff:a4:58:c5:80:
f4:3f:d3:5d:e0:50:cf:d2:0a:d8:c2:87:ca:57:93:
96:b8:f3:63:4a:fc:d1:39:7d:e0:70:a2:01:4c:9e:
06:81:03:bf:80:aa:08:13:9b:ae:31:16:75:ac:5f:
52:ce:a8:44:1c:98:4b:d6:3a:e2:ec:c7:0f:7a:7d:
ec:33:05:83:31:33:1e:c1:e3:96:1a:6b:b7:a9:de:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:16:C1:5C:7D:52:E5:26:68:3B:61:F5:23:C4:D6:7F:26:35:6D:78
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/8RbBXH1S5SZoO2H1I8TWfyY1bXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f3:9b:64:a8:6c:dd:b3:b4:ed:dc:82:c0:4d:c3:63:cc:2d:
66:68:05:d0:38:4a:a9:92:fa:94:29:c9:a5:51:e4:54:bc:ce:
40:87:00:de:cf:19:0f:ad:0e:51:24:4a:19:14:5d:3e:ee:d5:
3e:33:a1:b7:c2:07:72:a7:08:65:c2:b1:99:2a:e7:63:a8:bd:
e4:ca:5f:e3:36:9e:50:b9:b7:c5:74:0c:ff:e1:f7:9a:80:a8:
e8:fd:c6:a0:7e:b8:00:36:53:47:a8:2b:6c:e8:85:c9:0f:6b:
54:eb:4f:6c:c3:0e:48:e2:b6:2a:6b:ca:40:fb:33:37:e9:e5:
e7:69:34:30:70:a8:3b:8c:e9:9c:0b:04:79:98:7c:57:22:80:
20:51:31:88:10:17:6c:21:59:37:aa:9f:e2:58:e8:70:72:29:
69:c3:d7:90:f3:6e:ea:d6:c0:98:57:58:1e:7c:e3:dc:b8:6d:
ef:bf:00:a3:b9:7e:f0:f2:6f:d3:87:07:35:8e:38:79:6c:b6:
7a:1e:2d:44:cf:25:1a:1b:dc:75:59:37:0c:11:24:f6:1d:c3:
c8:a0:54:b7:2f:f9:5a:11:f7:ce:62:3f:5e:f3:9a:bd:8f:12:
96:da:69:72:00:88:59:86:9f:e3:87:0c:13:f2:a7:af:d8:17:
ad:4a:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:35:02 2026 by rpki-client