Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/0wUdxJ4suYobkrI0m3nFXE-K2KU.roa
File: 0wUdxJ4suYobkrI0m3nFXE-K2KU.roa (raw, json)
Hash identifier: FQiCUFsTMLuwkmXx5bpC/mi0OyHn67NhNJuEJfN64/4=
Subject key identifier: D3:05:1D:C4:9E:2C:B9:8A:1B:92:B2:34:9B:79:C5:5C:4F:8A:D8:A5
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01A0804FFC32576777F2C459DCCABF2FC6AB
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/0wUdxJ4suYobkrI0m3nFXE-K2KU.roa
Signing time: Tue 08 Sep 2026 09:18:40 +0000
ROA not before: Tue 08 Sep 2026 09:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 80.46.128.0/24 maxlen: 24
193.39.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:4f:fc:32:57:67:77:f2:c4:59:dc:ca:bf:2f:c6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Sep 8 09:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3051dc49e2cb98a1b92b2349b79c55c4f8ad8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7b:63:e0:0c:bd:92:0c:8a:7b:e9:5a:99:3f:
b5:ca:62:12:99:4e:e9:dc:c2:65:00:85:2b:fc:54:
f9:57:bf:e8:07:74:ce:78:a2:de:90:c6:71:86:3d:
c1:a8:8b:8d:fd:45:f6:ff:ff:11:85:ce:0a:08:ba:
c9:17:90:85:44:5a:5c:18:db:ae:51:c7:ef:a4:81:
88:05:f5:fd:cf:34:98:2c:c7:e1:c3:dd:ca:70:80:
bf:d7:ab:3e:3d:82:fc:9a:e7:f9:be:a9:84:ca:4f:
a2:4b:75:9e:66:17:09:04:f1:89:1c:ff:22:24:49:
e1:1f:f9:7e:49:03:9f:8e:07:32:bb:26:9d:af:2b:
2c:50:95:02:59:6a:65:9b:a9:7c:06:28:7c:a5:00:
cc:9b:be:d3:71:39:ca:f8:cc:65:47:7c:0c:53:51:
2b:c4:cf:0e:b8:bd:c5:dc:af:3c:01:ab:7b:5d:0e:
4e:c9:b4:26:bf:d9:cf:12:7e:d2:04:22:91:00:64:
a9:61:02:07:06:09:ec:76:af:a9:5e:62:3e:11:6d:
5c:7b:11:12:3d:ab:a3:1c:fb:5b:53:07:fe:d5:e6:
66:b6:05:68:d4:c0:b9:0e:61:78:33:78:95:95:c6:
d6:35:0c:ed:10:d5:f4:45:82:01:8d:93:12:db:e1:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:05:1D:C4:9E:2C:B9:8A:1B:92:B2:34:9B:79:C5:5C:4F:8A:D8:A5
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/0wUdxJ4suYobkrI0m3nFXE-K2KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.46.128.0/24
193.39.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a8:b8:e8:de:6d:ec:44:67:e1:fa:2e:81:5a:5d:87:76:de:
37:08:36:a2:ba:7e:d4:bc:7f:48:66:c2:01:5a:ec:4e:eb:7c:
b0:39:30:55:c6:61:5e:af:48:ae:21:46:96:b4:39:63:bd:9a:
4a:dc:14:9b:af:90:f5:3d:59:bc:37:28:14:0e:5e:04:96:b1:
cc:5c:9f:5e:94:85:f8:8a:a3:e9:f5:79:0e:71:60:9c:f9:81:
b6:be:8b:2f:a1:87:eb:e0:56:67:f8:dd:4c:11:e3:43:34:fe:
14:65:34:9f:c4:6e:f4:b0:93:77:2c:90:37:4c:a0:77:c1:a5:
70:c8:50:f4:2a:dd:bc:ef:64:72:61:b8:29:70:62:6e:c0:de:
6d:41:6a:f8:08:5e:4c:fc:47:c6:c2:27:a9:e9:a3:6c:ff:45:
e3:e8:10:01:9b:2d:46:cc:3e:fa:2e:96:ae:7e:ec:19:d8:fb:
ed:01:4c:46:03:77:9d:e7:cf:c6:83:fb:cb:4f:64:5c:5d:12:
e2:83:ad:01:ef:10:75:f1:19:cf:c1:fa:cc:3e:06:60:d8:cc:
7a:8c:31:a4:b7:41:99:37:00:02:92:e5:f3:d1:20:16:2b:bd:
7d:4a:e3:76:3a:63:c6:94:22:dd:2c:3f:31:85:f9:5c:c5:f7:
2f:9f:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:43:11 2026 by rpki-client