Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8rDC9IgLGbOHG-ixnkG_FJFbrtE.roa
File: 8rDC9IgLGbOHG-ixnkG_FJFbrtE.roa (raw, json)
Hash identifier: jbR4b6G7mM9vrC8m296ytin0fFNIRNbHALs5IKfCokA=
Subject key identifier: F2:B0:C2:F4:88:0B:19:B3:87:1B:E8:B1:9E:41:BF:14:91:5B:AE:D1
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F69DA5F0EC6AB21FDE7F7868240FF9C52
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8rDC9IgLGbOHG-ixnkG_FJFbrtE.roa
Signing time: Thu 16 Jul 2026 07:35:46 +0000
ROA not before: Thu 16 Jul 2026 07:35:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214566
IP address blocks: 201.3.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:da:5f:0e:c6:ab:21:fd:e7:f7:86:82:40:ff:9c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 16 07:35:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2b0c2f4880b19b3871be8b19e41bf14915baed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:63:5a:82:10:a0:5c:6d:43:60:b2:d4:f6:
04:72:a1:43:76:17:4f:fd:d2:f5:0b:c8:13:a3:af:
69:f7:ec:e5:86:27:fe:2d:a5:51:1e:b6:40:53:ed:
2e:de:8f:74:62:59:2e:00:8e:09:78:27:8e:c7:c9:
fb:3d:05:8d:2f:72:61:e6:00:38:7b:e7:2f:94:2b:
48:f3:d1:41:39:94:aa:15:a1:d5:d3:bd:06:bd:c6:
84:4a:4a:2b:69:d7:5c:a6:ae:20:c2:4d:27:d9:8f:
f5:d4:1c:03:e6:a9:a6:ac:88:3a:e4:ab:65:0c:86:
bd:a2:c9:5b:a3:50:2f:07:d2:bc:e5:64:36:e0:98:
15:4e:bf:5d:d6:90:ec:02:81:95:fb:33:4a:14:30:
7a:4f:af:51:da:88:4a:4b:bf:9d:54:1d:e8:28:96:
a0:bc:93:dc:93:db:0f:39:61:b5:52:8e:9d:91:6b:
ee:4a:48:f4:b2:fd:94:2c:7c:c3:f4:f5:bc:89:48:
b5:32:1d:14:bc:5e:c6:1d:54:f1:83:e6:90:40:13:
2a:f3:bf:d6:52:8b:01:de:8b:af:2a:99:03:2d:a1:
e0:a5:54:98:ad:13:34:25:56:57:2d:1d:7e:74:52:
b8:a3:85:e3:60:44:f7:18:e8:f6:1a:d5:9c:be:79:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:C2:F4:88:0B:19:B3:87:1B:E8:B1:9E:41:BF:14:91:5B:AE:D1
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8rDC9IgLGbOHG-ixnkG_FJFbrtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:34:47:2c:32:53:4a:e9:5f:d8:80:9a:7a:6b:d5:88:7f:4f:
5f:69:37:f2:aa:53:f0:82:3a:69:7b:af:85:03:7d:da:3a:12:
bf:c9:d4:92:90:43:0e:c4:40:d8:a2:45:59:79:67:73:10:06:
2f:6f:0f:76:d8:4c:ae:d7:ef:a1:4d:c5:20:18:d1:ea:43:6b:
a7:36:db:4c:d9:3d:de:c9:85:3c:11:23:e9:64:0c:fa:97:af:
2d:05:59:d8:ba:9f:0b:e2:1b:b6:fc:43:32:41:42:8f:8e:e7:
1f:3f:25:02:46:0f:76:27:d3:46:1d:d2:af:52:3d:19:c2:66:
b4:ff:21:c8:ca:cd:07:4f:db:20:5f:79:f5:50:4e:e1:ca:5b:
09:2d:37:28:ba:27:ae:b6:82:a4:7d:a1:bf:f4:81:24:cc:47:
8b:e4:9c:ec:ee:8d:7d:04:e0:f4:4c:4f:74:47:64:a0:5c:e2:
ab:98:96:7f:ca:d5:64:ab:8b:79:b2:c2:e7:3d:9b:be:01:e4:
56:60:e8:46:06:30:96:8a:87:05:68:72:9a:df:08:1d:a3:b6:
01:87:1f:94:b7:c2:bb:fb:cd:12:b9:cc:9f:71:3f:4b:7c:96:
77:9e:f5:8a:21:81:bf:56:39:c5:1d:00:ca:35:05:55:01:2a:
6e:45:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:28 2026 by rpki-client