Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/1ip8fjzOcrfIt7VhM4hKeIFL-gg.roa
File: 1ip8fjzOcrfIt7VhM4hKeIFL-gg.roa (raw, json)
Hash identifier: x6BAzNpNpkWkay1RbF1WheGdHSR/NN8khVO2J2kHcRM=
Subject key identifier: D6:2A:7C:7E:3C:CE:72:B7:C8:B7:B5:61:33:88:4A:78:81:4B:FA:08
Certificate issuer: /CN=563fb0a10fc5909f1090b6feecdaf784b32562eb
Certificate serial: 01A01E4A573F6C768D7370C907B00CAAC387
Authority key identifier: 56:3F:B0:A1:0F:C5:90:9F:10:90:B6:FE:EC:DA:F7:84:B3:25:62:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/1ip8fjzOcrfIt7VhM4hKeIFL-gg.roa
Signing time: Thu 20 Aug 2026 08:29:43 +0000
ROA not before: Thu 20 Aug 2026 08:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 192.76.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:4a:57:3f:6c:76:8d:73:70:c9:07:b0:0c:aa:c3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=563fb0a10fc5909f1090b6feecdaf784b32562eb
Validity
Not Before: Aug 20 08:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d62a7c7e3cce72b7c8b7b56133884a78814bfa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:6e:fb:04:0d:07:e3:15:1a:04:b2:35:b0:
f8:36:4e:8c:f6:07:46:af:b9:09:be:0d:a1:87:fb:
2c:ed:ee:aa:6e:aa:06:c1:c5:ee:dd:b9:9a:28:a4:
75:10:89:53:8b:f9:e0:05:a3:60:d3:ab:df:3b:50:
ad:41:8a:79:de:90:47:d3:f3:bc:f3:f4:57:f7:42:
06:15:69:4e:30:fc:78:4a:be:d8:7d:e0:d2:00:ad:
08:31:bb:79:24:53:81:37:a1:49:7f:c4:da:66:e4:
e7:ac:b9:6c:9f:c7:a1:25:62:20:c0:fe:45:bf:7e:
fc:74:f7:64:66:d4:eb:18:0e:26:84:39:9d:f8:01:
35:2b:3c:f3:c8:8c:8a:9d:a7:8d:19:7c:8f:43:d3:
60:ca:16:aa:a3:5f:3f:95:aa:6e:94:68:df:04:2d:
0a:f8:fd:3b:a1:55:71:c1:ca:1f:32:74:7a:fd:10:
31:e7:39:a7:d7:aa:90:58:77:1e:b6:91:54:4a:6e:
c7:78:87:ba:bf:fa:38:c7:b8:22:c8:f3:06:ef:24:
d4:ed:65:94:c8:6f:f6:a2:8e:43:c2:08:04:a3:0f:
2c:2b:ae:2f:d4:6f:e7:a7:82:41:41:e7:72:80:f6:
2d:9d:68:39:19:50:30:26:0f:f5:01:e9:a8:30:d7:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2A:7C:7E:3C:CE:72:B7:C8:B7:B5:61:33:88:4A:78:81:4B:FA:08
X509v3 Authority Key Identifier:
keyid:56:3F:B0:A1:0F:C5:90:9F:10:90:B6:FE:EC:DA:F7:84:B3:25:62:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/1ip8fjzOcrfIt7VhM4hKeIFL-gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:fd:f0:6a:4d:4b:24:0c:21:eb:ad:80:c6:c8:00:fd:d6:34:
27:bf:64:79:55:eb:b8:41:12:d7:9a:91:96:87:97:05:03:b7:
9c:90:6c:a7:7d:5e:5a:d7:14:d3:1d:f3:10:16:94:1a:99:05:
d2:75:b8:d2:34:11:52:39:4e:c6:0b:3e:0b:da:fb:60:97:82:
8e:bd:19:11:8e:cc:63:9a:cf:ec:be:ab:14:f9:fc:29:6f:35:
35:a9:90:f7:54:ee:0c:70:d4:c2:3f:81:a7:79:ce:6e:d6:3f:
9d:26:a2:19:1a:c3:a1:e5:4a:9e:dd:91:fa:66:54:11:76:ea:
25:dd:3d:dc:f6:f8:6b:fe:d5:b6:f7:21:f6:6c:5e:49:ec:e4:
56:51:85:c4:a9:d6:11:ce:66:76:34:64:3c:78:f4:b6:5d:ac:
43:65:cb:d8:bd:30:41:53:34:18:4b:34:69:20:ec:ec:fa:75:
1f:0a:8e:d9:25:a4:32:09:79:73:2f:0d:12:06:c4:8c:39:43:
9b:ec:e1:78:0c:a4:ff:ac:98:6d:4b:30:50:c0:af:58:dc:9a:
74:bd:2d:7f:db:96:e5:a5:ff:89:96:eb:41:66:83:e2:2f:08:
90:53:f5:b8:54:fc:78:91:81:c1:ac:31:c5:12:95:7e:82:7a:
74:60:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:52 2026 by rpki-client