Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8XyUBQk416lcSzA3I_22IXGuzAc.roa
File: 8XyUBQk416lcSzA3I_22IXGuzAc.roa (raw, json)
Hash identifier: M7tHHA+mfQhpqzb6cs4L58T1ik4HF7JjEo6nvlN2rRA=
Subject key identifier: F1:7C:94:05:09:38:D7:A9:5C:4B:30:37:23:FD:B6:21:71:AE:CC:07
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F21A895302D3CF1FACFA98167D32A823D
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8XyUBQk416lcSzA3I_22IXGuzAc.roa
Signing time: Thu 02 Jul 2026 07:08:44 +0000
ROA not before: Thu 02 Jul 2026 07:08:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209866
IP address blocks: 201.3.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:a8:95:30:2d:3c:f1:fa:cf:a9:81:67:d3:2a:82:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 2 07:08:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f17c94050938d7a95c4b303723fdb62171aecc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:8f:8a:a9:f8:b2:e8:88:ae:29:67:6b:a9:
cb:5d:d0:1a:66:7f:d0:94:a3:09:6f:7e:c0:88:dd:
9b:26:dd:0e:05:35:b3:1e:39:6f:a0:8c:d5:82:e8:
63:e8:16:b5:02:b1:9d:08:ea:99:d5:ce:bc:64:c8:
d8:0d:d8:3b:dd:05:90:cf:14:e4:5b:56:1e:1d:4e:
0f:51:18:10:23:9b:4f:ff:c4:71:8c:27:39:c8:6d:
4c:92:81:80:ff:ff:e1:bc:07:e7:59:cb:a8:b5:ac:
a3:9c:3d:7c:c7:8f:54:07:50:52:f5:0b:e4:f1:bd:
78:ae:78:f9:91:48:e0:49:0c:67:c2:8d:7f:55:06:
8a:30:7b:29:1b:27:96:8d:3b:53:2f:d9:e6:e5:a5:
08:21:b2:41:01:e6:a5:0d:f9:52:74:e8:52:a7:53:
0a:4a:5b:24:b9:5a:ac:b0:71:94:9e:41:ac:a4:0e:
32:67:bb:97:a9:46:cf:cf:96:ff:dd:29:33:a1:7e:
0e:1a:e5:f7:60:e8:d8:e1:e6:78:22:5d:35:f9:b7:
52:de:99:dd:44:f2:dc:74:05:4e:65:91:c1:9b:87:
d3:da:70:13:1b:74:e0:7c:4e:9f:ac:20:b9:14:3d:
33:36:ad:d3:d8:48:fd:07:fc:28:c5:c3:fc:f5:73:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:94:05:09:38:D7:A9:5C:4B:30:37:23:FD:B6:21:71:AE:CC:07
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8XyUBQk416lcSzA3I_22IXGuzAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.120.0/23
Signature Algorithm: sha256WithRSAEncryption
20:e5:22:1c:b4:40:2e:71:99:ed:2f:15:0e:0e:02:9e:90:52:
c3:4e:d5:42:7c:0f:ea:53:c4:b0:de:9e:ab:df:39:cf:35:40:
6e:e8:d9:07:20:1f:f6:7b:ff:4f:20:37:f2:c7:ed:85:68:ec:
b1:7b:69:7f:94:3e:c9:19:7b:e0:29:6a:05:fa:1c:4e:b1:40:
38:4b:ff:4c:6f:ba:cc:e9:e3:17:e2:f2:3e:7a:e2:91:40:f8:
95:7e:c1:6e:5d:02:06:e1:4f:8f:13:08:5f:94:cb:4b:5f:26:
38:39:21:99:24:77:62:98:82:a8:59:e2:2a:6a:3c:11:19:0f:
15:13:60:be:56:a0:29:62:9b:bd:0d:e3:2c:f8:5d:3f:d9:0a:
26:d6:30:b8:cf:b3:f4:79:b5:8c:10:e1:7a:73:5d:82:d1:c7:
c1:56:b1:e5:ba:a5:e3:d3:a6:b0:c2:eb:d1:4e:92:ce:f1:45:
3b:4d:bf:8a:f7:96:fb:ec:06:33:02:3b:39:b2:0b:23:58:86:
75:ca:68:54:9d:ba:11:77:15:9b:4f:28:8a:c7:21:43:1f:22:
ba:c6:ff:9d:81:b0:fa:a1:af:e1:ee:de:f2:4f:5a:9c:80:86:
07:55:04:1d:bd:1f:69:16:a9:53:87:15:70:8e:33:84:ed:02:
4b:27:0c:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8hqJUwLTzx+s+pgWfTKoI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNzAyMDcwODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTdjOTQwNTA5MzhkN2E5NWM0YjMwMzcyM2ZkYjYyMTcxYWVjYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrCPiqn4suiIrilna6nLXdAaZn/Q
lKMJb37AiN2bJt0OBTWzHjlvoIzVguhj6Ba1ArGdCOqZ1c68ZMjYDdg73QWQzxTk
W1YeHU4PURgQI5tP/8RxjCc5yG1MkoGA///hvAfnWcuotayjnD18x49UB1BS9Qvk
8b14rnj5kUjgSQxnwo1/VQaKMHspGyeWjTtTL9nm5aUIIbJBAealDflSdOhSp1MK
SlskuVqssHGUnkGspA4yZ7uXqUbPz5b/3SkzoX4OGuX3YOjY4eZ4Il01+bdS3pnd
RPLcdAVOZZHBm4fT2nATG3TgfE6frCC5FD0zNq3T2Ej9B/woxcP89XM7twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPF8lAUJONepXEswNyP9tiFxrswHMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvOFh5VUJRazQxNmxjU3pBM0lfMjJJWEd1ekFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByQN4MA0G
CSqGSIb3DQEBCwUAA4IBAQAg5SIctEAucZntLxUODgKekFLDTtVCfA/qU8Sw3p6r
3znPNUBu6NkHIB/2e/9PIDfyx+2FaOyxe2l/lD7JGXvgKWoF+hxOsUA4S/9Mb7rM
6eMX4vI+euKRQPiVfsFuXQIG4U+PEwhflMtLXyY4OSGZJHdimIKoWeIqajwRGQ8V
E2C+VqApYpu9DeMs+F0/2Qom1jC4z7P0ebWMEOF6c12C0cfBVrHluqXj06awwuvR
TpLO8UU7Tb+K95b77AYzAjs5sgsjWIZ1ymhUnboRdxWbTyiKxyFDHyK6xv+dgbD6
oa/h7t7yT1qcgIYHVQQdvR9pFqlThxVwjjOE7QJLJwxr
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:28 2026 by rpki-client