Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8yFq5eCzFqbUHkppnTImyWd7TQ8.roa
File: 8yFq5eCzFqbUHkppnTImyWd7TQ8.roa (raw, json)
Hash identifier: cyxrgjDYi2zADRMcxKZcX9vgUVvbqnmcfKimHV7W0bY=
Subject key identifier: F3:21:6A:E5:E0:B3:16:A6:D4:1E:4A:69:9D:32:26:C9:67:7B:4D:0F
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019CC503321D959DE7C3BEAC06E42E6DA8C3
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8yFq5eCzFqbUHkppnTImyWd7TQ8.roa
Signing time: Fri 06 Mar 2026 21:17:26 +0000
ROA not before: Fri 06 Mar 2026 21:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36231
IP address blocks: 45.88.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c5:03:32:1d:95:9d:e7:c3:be:ac:06:e4:2e:6d:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Mar 6 21:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3216ae5e0b316a6d41e4a699d3226c9677b4d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:69:73:54:ce:bf:28:d8:b8:41:ff:48:cb:
ad:a4:a7:a8:75:d3:98:56:c9:aa:e7:1d:b8:57:66:
5a:51:26:02:b9:9f:a5:58:5d:65:e0:9a:f6:72:34:
52:f0:c7:40:1b:fe:3a:e0:f0:70:92:47:65:38:12:
1e:7c:f9:5a:00:25:22:ed:91:58:f4:40:54:fe:4e:
a5:25:35:90:02:45:d9:db:b6:fc:3c:b5:ee:cf:7a:
15:00:5b:79:bc:53:7c:21:af:42:77:09:ef:01:98:
42:6d:29:36:ef:34:8a:00:3c:1f:02:ba:23:c7:9c:
d2:7f:99:1d:ae:21:3f:39:7e:8a:1f:60:43:e9:81:
34:06:4a:ca:02:10:32:e1:12:50:89:ec:8c:b0:89:
2e:80:2c:0a:62:e5:b1:9c:a7:0f:56:ee:da:b9:55:
52:a7:87:aa:61:8e:7f:ae:66:20:db:03:87:1a:f9:
10:a9:1b:be:4c:03:39:61:9f:45:40:df:b9:93:35:
22:59:fa:44:b6:09:d8:83:d2:f8:81:31:c8:09:f2:
29:99:19:b2:16:93:78:1b:5e:87:ec:29:55:00:aa:
98:ae:e9:72:20:e7:2c:98:54:10:c5:3e:3b:1c:6a:
7e:41:c0:ce:ac:33:93:7f:fc:3f:24:95:a4:0e:cf:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:6A:E5:E0:B3:16:A6:D4:1E:4A:69:9D:32:26:C9:67:7B:4D:0F
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8yFq5eCzFqbUHkppnTImyWd7TQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.228.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:b1:0b:9f:4c:18:60:e3:e0:e9:ac:ad:97:70:5b:12:79:8d:
f1:92:9c:08:ab:26:5c:f0:d7:49:19:a0:e2:9c:84:11:6d:c3:
80:f7:30:68:e0:06:5a:7c:c1:14:e7:79:04:39:b7:fe:4e:44:
10:40:02:a3:fc:30:86:7d:7c:dc:62:23:a1:42:3d:bb:bc:06:
74:e3:b1:ed:26:54:5a:82:3a:7e:69:67:6b:31:eb:cf:06:45:
7b:06:13:8e:2f:cd:61:b8:15:4f:60:7a:1a:93:4c:4a:1a:cf:
cc:07:b3:51:c4:ce:aa:69:4d:b5:8a:2a:13:0d:1b:ea:95:e4:
ee:1e:8d:13:16:08:76:cb:b1:e3:ca:87:36:f3:ac:f1:dd:ba:
47:d1:4b:5e:92:2a:08:7a:1c:93:30:b1:2b:12:32:e6:c4:f1:
df:ca:cd:7d:77:a8:26:ec:78:c2:92:64:df:78:cc:6f:73:79:
15:e6:ec:5d:b3:f1:8c:45:34:92:4e:b1:61:30:e5:67:ef:46:
07:b6:13:36:0f:55:c7:0d:60:37:2d:5e:12:9e:f1:80:37:63:
04:53:f0:d5:15:7c:60:28:81:52:0d:6a:87:24:f6:a8:d4:e9:
0f:fb:a8:d7:ea:c3:0a:a0:46:32:e6:81:30:7b:68:6e:ff:ce:
84:20:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:05:13 2026 by rpki-client