Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8DmykNvC_irHr9lzfJUF3TDEf8A.roa
File: 8DmykNvC_irHr9lzfJUF3TDEf8A.roa (raw, json)
Hash identifier: laRqTSnWyx4iJnNBXeAzrjbCyLnN4jtjHEq99UTExZA=
Subject key identifier: F0:39:B2:90:DB:C2:FE:2A:C7:AF:D9:73:7C:95:05:DD:30:C4:7F:C0
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1683A9CF66ACD5EFF3A252340827BC1B2
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8DmykNvC_irHr9lzfJUF3TDEf8A.roa
Signing time: Fri 23 Oct 2026 10:07:14 +0000
ROA not before: Fri 23 Oct 2026 10:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218320
IP address blocks: 130.49.16.0/24 maxlen: 24
170.168.86.0/24 maxlen: 24
170.168.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:3a:9c:f6:6a:cd:5e:ff:3a:25:23:40:82:7b:c1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 23 10:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f039b290dbc2fe2ac7afd9737c9505dd30c47fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:b7:81:46:a0:23:20:26:7f:ba:a3:ed:31:
e8:34:ab:2e:df:e2:b2:06:6f:c0:a5:c6:a1:94:16:
38:c5:7d:e9:44:d3:ac:5f:54:5e:30:36:a0:17:f4:
f5:be:b3:54:c9:82:ba:c8:a5:07:f3:ed:98:c3:b0:
71:50:d0:01:4f:47:c6:e6:77:f7:00:78:6d:9d:59:
60:e7:7f:23:3b:73:40:99:b6:01:e7:13:a1:6d:2d:
ff:7b:42:48:f9:e9:a6:81:2f:4f:0c:ce:d9:fb:37:
3f:71:ec:88:8c:e8:77:6b:f1:2e:a0:77:a4:68:c3:
2c:4b:e9:8d:00:34:dd:c4:73:16:4c:15:95:d4:8b:
a4:0c:6a:b3:95:f1:3c:1a:06:2e:3c:6d:a0:8f:3c:
04:02:00:f6:f1:8b:c0:24:39:4c:ec:b7:a9:4a:98:
12:c7:34:e5:3f:39:4f:c9:cd:b4:b8:6c:71:f5:e9:
49:0f:38:7d:ee:0a:36:8e:a0:5e:2d:58:b6:5c:73:
8e:86:7e:36:c0:07:f0:70:0f:05:b2:02:25:24:eb:
48:ad:5e:fb:2d:55:e7:76:7f:20:7c:f9:a6:d5:57:
4e:ca:d7:57:9b:ef:00:b7:09:4b:b1:f7:ba:b2:9c:
eb:b9:e2:1b:03:4f:ba:a1:6f:e7:f4:34:09:13:25:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:B2:90:DB:C2:FE:2A:C7:AF:D9:73:7C:95:05:DD:30:C4:7F:C0
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8DmykNvC_irHr9lzfJUF3TDEf8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.16.0/24
170.168.86.0/24
170.168.117.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d1:38:48:0a:49:db:30:05:a2:e9:38:84:72:24:80:43:fc:
3d:cb:9d:ac:ef:c2:7f:1e:e3:62:5c:fe:30:66:d8:56:2d:23:
b3:f1:eb:52:6c:73:88:d5:c3:d6:e1:81:6c:98:fe:b8:36:7a:
be:bb:a1:34:c4:d8:8a:3b:b0:e8:e0:db:a5:7f:5b:ad:bb:5c:
16:0d:8f:3d:13:fc:0e:8f:21:08:0f:09:4b:92:40:04:6a:e9:
88:ea:57:65:3a:d3:c4:0f:31:2a:b7:b4:fc:98:08:4e:61:83:
64:96:c0:d0:de:81:57:63:ed:9b:77:37:45:2a:70:ea:9b:b0:
e3:b2:2b:83:ee:fb:45:51:b7:09:ae:63:49:96:ad:ac:ef:85:
ed:2d:d5:ac:1b:c8:b4:da:35:73:ec:d0:54:ad:6d:8d:a9:1a:
0e:1d:74:4a:e0:7e:4e:cf:7e:30:ae:70:49:54:a8:f6:15:aa:
ce:6f:83:76:60:a7:24:ee:1a:bb:3e:e6:72:69:d0:4a:45:64:
cb:ed:9f:03:3b:40:7d:77:d6:8f:0b:07:bc:6f:17:63:a9:28:
42:60:54:49:6f:31:82:31:87:76:4b:15:45:53:42:29:b4:ee:
59:e6:fb:23:74:b1:ff:6e:f3:6f:7d:0a:c6:df:24:46:79:42:
fc:2e:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:30 2026 by rpki-client