Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/L8c0UwhnCK23bNK0a8cfhU3hjY0.roa
File: L8c0UwhnCK23bNK0a8cfhU3hjY0.roa (raw, json)
Hash identifier: qVBWnnDtxju/zVfDeVmLOnp5RK6iMuivdhdiL42hZVs=
Subject key identifier: 2F:C7:34:53:08:67:08:AD:B7:6C:D2:B4:6B:C7:1F:85:4D:E1:8D:8D
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368EE915D4098AD54094A31223EE281
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/L8c0UwhnCK23bNK0a8cfhU3hjY0.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47206
IP address blocks: 93.182.192.0/18 maxlen: 18
188.224.0.0/17 maxlen: 17
2a00:e880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ee:91:5d:40:98:ad:54:09:4a:31:22:3e:e2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fc73453086708adb76cd2b46bc71f854de18d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1d:29:e9:df:99:2b:25:e7:d4:a6:fc:83:00:
cd:f3:8b:bc:42:16:c7:fa:48:ce:ed:81:17:36:8a:
9d:c0:9d:35:1e:89:1f:f3:ef:17:02:16:88:d6:06:
a2:f6:bf:f0:da:91:8b:b7:46:3d:76:45:b9:6c:af:
98:d0:2f:da:8b:b0:52:4e:b4:41:86:8c:49:fb:1b:
ba:cd:b6:73:2c:c9:6b:c9:23:76:c6:f8:16:fc:7c:
df:d3:f6:1b:67:b2:c0:1a:ef:af:5e:fb:35:97:29:
f9:4e:ce:62:53:7b:8e:e0:8c:ca:b6:52:fb:e5:e2:
0a:8a:97:24:a9:68:e4:bb:54:e3:0e:47:b2:5a:8e:
e3:6a:d1:21:b5:f9:30:8a:a6:9c:8b:c9:e6:f2:97:
99:98:68:77:71:23:84:f8:fd:0b:11:f3:a8:43:2c:
1b:b1:75:b6:5a:4f:63:08:31:55:e1:3c:13:7b:0f:
d5:4b:2a:2d:64:d8:59:d6:6a:da:4d:2e:cd:a5:40:
72:b0:68:1a:c6:2e:2e:b4:22:68:e8:5e:c6:82:d6:
14:d7:c6:a1:e2:77:26:3d:42:1a:93:38:af:b3:7d:
60:c4:0e:92:60:2a:eb:5a:04:fa:06:c0:ab:dc:69:
95:69:c2:5d:42:ad:27:d8:99:d7:ca:b8:80:47:4e:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C7:34:53:08:67:08:AD:B7:6C:D2:B4:6B:C7:1F:85:4D:E1:8D:8D
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/L8c0UwhnCK23bNK0a8cfhU3hjY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.182.192.0/18
188.224.0.0/17
IPv6:
2a00:e880::/32
Signature Algorithm: sha256WithRSAEncryption
07:26:85:a3:b3:8f:ff:28:0c:e6:e7:51:41:38:9d:15:9d:63:
0a:25:b9:24:e8:2a:6a:90:f3:1a:59:d5:b1:13:b4:70:55:0d:
40:31:f6:55:27:22:bd:47:e4:31:36:86:07:7c:12:d8:d0:73:
d6:f6:0d:f6:c5:83:76:c6:a6:ad:63:7b:8b:5a:bf:59:1a:96:
92:38:1c:64:1e:a4:34:c2:a1:f9:91:97:13:69:f9:e8:d7:7a:
ca:e8:b6:e8:11:87:83:f6:05:47:94:4e:75:68:dc:b1:85:66:
11:c0:92:06:42:33:f7:42:04:7e:84:be:ab:20:ba:9f:ce:32:
6a:85:e7:d7:22:51:3f:ee:41:7e:0e:d1:28:2b:cd:d0:3c:08:
fd:d9:82:0c:2a:6e:03:dd:af:58:3b:d2:91:6d:bb:6c:53:43:
16:cd:4c:41:92:57:f8:c3:71:31:8a:48:0b:64:b7:ee:1b:5f:
88:9e:d6:4c:d1:cc:d6:32:06:48:4d:58:b7:c3:b4:c6:70:8d:
e3:26:9b:67:36:eb:4c:4a:09:0f:ee:cb:cc:21:62:9c:28:95:
1c:af:f8:90:94:00:70:53:e1:e3:31:00:e3:36:58:8c:8e:fb:
33:a8:40:65:6c:63:a4:cb:0c:61:37:d6:9f:19:7e:2c:ae:73:
47:a3:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:03 2026 by rpki-client