Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/8fT9pmNi0IQqPN8nu263PPhOOjg.roa
File: 8fT9pmNi0IQqPN8nu263PPhOOjg.roa (raw, json)
Hash identifier: Ujw8ZbOAWSYdEG4uqqRQEENNRaNYjONTO1BAYHKWs+c=
Subject key identifier: F1:F4:FD:A6:63:62:D0:84:2A:3C:DF:27:BB:6E:B7:3C:F8:4E:3A:38
Certificate issuer: /CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Certificate serial: 019FC81FCF25E83312C4E7500C2EFAF9331C
Authority key identifier: 3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/8fT9pmNi0IQqPN8nu263PPhOOjg.roa
Signing time: Mon 03 Aug 2026 14:55:55 +0000
ROA not before: Mon 03 Aug 2026 14:55:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:7a80:10::/48 maxlen: 48
2a0a:7a80:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:1f:cf:25:e8:33:12:c4:e7:50:0c:2e:fa:f9:33:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Validity
Not Before: Aug 3 14:55:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1f4fda66362d0842a3cdf27bb6eb73cf84e3a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:00:30:70:4a:2f:08:22:8f:73:3b:d9:3e:
88:d2:a4:37:00:2a:9c:df:b0:f1:c5:3b:12:65:1c:
16:ea:38:f0:bf:44:7c:0e:ff:f8:7d:c6:68:4b:7d:
08:c7:2d:60:b2:a5:cf:c0:db:06:f8:6d:68:76:d9:
40:e2:63:6b:97:2a:e6:f3:38:3b:f4:12:a3:49:9b:
39:89:8f:4a:a8:92:d5:30:86:45:e1:3d:97:75:af:
af:eb:1d:11:6e:84:a9:23:72:c1:58:38:a1:5a:e0:
3f:71:dd:61:05:b5:d0:41:0c:1a:8a:26:07:7e:f1:
42:19:36:b9:c1:1f:38:7e:2d:b9:d3:9d:b5:17:db:
bf:f1:3a:f5:1e:3f:8f:42:7a:83:b4:e2:94:d4:fd:
dd:e5:72:f6:a7:6c:eb:5c:43:f0:6b:c7:58:f8:76:
0d:e0:bb:ba:94:a7:f6:f3:9f:7d:f3:db:26:f5:c7:
a3:17:15:77:42:63:18:a4:7f:0c:8c:36:42:85:ab:
bf:74:24:72:95:fd:46:9c:5d:1e:ed:64:66:d3:f9:
66:70:eb:16:7f:e1:9f:0b:34:08:ff:e1:20:22:c3:
d7:ac:11:b1:ff:b6:cd:92:2b:56:5c:44:58:74:8a:
9e:b7:76:9a:3b:c1:41:16:6d:dc:48:9a:1c:5c:cf:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:FD:A6:63:62:D0:84:2A:3C:DF:27:BB:6E:B7:3C:F8:4E:3A:38
X509v3 Authority Key Identifier:
keyid:3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/8fT9pmNi0IQqPN8nu263PPhOOjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7a80:10::/47
Signature Algorithm: sha256WithRSAEncryption
cc:8d:58:8a:00:c0:c9:ef:8b:ca:bc:76:45:6c:31:6c:60:45:
1b:5b:ca:e7:1c:64:4f:cf:e6:63:3f:7c:c0:39:a5:28:c0:d8:
ee:01:84:0c:2f:c7:b1:4d:0a:a4:56:7f:76:af:d1:5c:f5:64:
bb:d3:4e:24:ad:02:f1:45:28:91:b9:57:bb:c4:76:c8:87:4c:
09:f8:7f:84:15:af:b2:de:fd:12:d6:b6:08:46:7f:01:1a:60:
4f:1d:ac:57:b6:0a:40:b8:4e:54:d1:ef:9b:39:46:14:24:f3:
e7:20:d8:70:f5:75:32:f9:2c:cb:24:8e:80:58:77:ff:63:1e:
ac:a7:04:6a:fa:9c:82:d4:f9:45:5a:d2:6f:f2:cf:9e:15:bf:
76:eb:1b:1c:8b:d3:cc:80:0b:50:87:5a:a4:1f:e6:e1:d6:b8:
2c:79:32:fe:3d:f0:de:af:cd:c4:f8:95:af:01:3b:25:71:f0:
6a:85:3a:e8:94:fe:7d:d3:a7:52:5d:28:71:f8:5a:29:67:16:
ae:87:f0:bf:1c:a9:2b:f7:38:73:c0:a4:5f:20:a9:88:5f:c1:
c4:83:c9:70:50:4f:72:71:0f:84:88:7c:6b:66:fa:cc:3a:d6:
fb:70:78:b5:06:cb:84:ed:e4:d7:d4:d6:3a:1e:70:40:ad:e1:
6d:ef:ab:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:13:56 2026 by rpki-client