Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T8iWU11_DY7tkepzra9ATcizQ1E.roa
File: T8iWU11_DY7tkepzra9ATcizQ1E.roa (raw, json)
Hash identifier: hwWIhlQPYT8QqPrEl5K05PuAkyCBMPHb/tRZXf6gU8Q=
Subject key identifier: 4F:C8:96:53:5D:7F:0D:8E:ED:91:EA:73:AD:AF:40:4D:C8:B3:43:51
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019ED33836061E8CFB777D95B66D757FB48B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T8iWU11_DY7tkepzra9ATcizQ1E.roa
Signing time: Wed 17 Jun 2026 01:35:36 +0000
ROA not before: Wed 17 Jun 2026 01:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393502
IP address blocks: 217.79.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:38:36:06:1e:8c:fb:77:7d:95:b6:6d:75:7f:b4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 17 01:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fc896535d7f0d8eed91ea73adaf404dc8b34351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:77:3c:9c:1e:65:d3:de:80:33:2c:f1:14:c8:
bf:fd:a4:fe:d4:8f:a1:3b:c5:5e:56:54:70:29:78:
fc:6f:27:d1:13:f9:00:0f:6b:fb:aa:33:49:5a:8b:
b4:70:0b:79:56:39:b6:6b:15:83:1f:fa:ff:66:9a:
22:b5:ad:aa:de:04:4a:b5:35:3c:19:b9:43:ad:61:
e6:33:15:16:c6:d4:e4:a8:8f:12:7b:6c:2e:d6:b4:
af:a4:8c:ef:c2:1a:3b:6e:a9:df:e7:19:3c:0e:ac:
96:38:c9:b6:84:39:56:01:c3:72:23:47:40:01:0c:
38:44:aa:68:c1:b4:94:1d:b4:17:b0:be:11:61:ca:
37:04:e3:dc:38:f3:b7:06:07:eb:d3:50:33:fb:63:
d5:d9:ab:fc:7e:62:bd:ff:67:26:b0:be:51:af:e5:
66:51:7b:d9:94:a6:90:e8:7b:20:d5:f9:54:a4:13:
ab:5b:dd:18:f5:05:c9:02:e8:70:6e:be:bf:f3:24:
b6:9c:38:3b:2a:fe:2a:47:a6:22:dd:2f:58:91:bb:
d9:d0:7b:80:50:aa:b9:70:ea:4c:79:dd:bb:70:21:
9f:e1:4d:6e:e7:92:94:a4:05:fc:79:85:4e:e1:93:
19:fb:54:3f:09:ad:13:76:98:5d:eb:3e:73:4d:d2:
e2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C8:96:53:5D:7F:0D:8E:ED:91:EA:73:AD:AF:40:4D:C8:B3:43:51
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T8iWU11_DY7tkepzra9ATcizQ1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fe:63:2a:12:2e:81:08:aa:06:6b:43:c4:50:4c:21:62:c3:
4a:47:1e:a8:dd:88:71:7a:b9:59:73:b1:7d:72:45:9f:1a:cb:
e5:da:ae:82:26:88:6c:69:4d:b5:1a:cc:69:f1:13:a4:c4:54:
dd:75:51:62:38:f1:d3:7f:c3:72:9f:79:af:12:f0:ee:fd:58:
66:a5:2f:e3:13:11:dd:27:ad:e3:65:71:63:64:cf:d1:25:b0:
74:07:fe:26:ed:ee:47:cd:f9:eb:93:f0:94:1f:1e:68:06:9c:
56:f4:6b:e1:b9:32:ac:51:35:26:b3:09:26:4a:15:69:1e:d9:
33:7e:8e:75:c4:79:00:a2:6c:6a:ac:41:df:9e:8a:ab:b7:dc:
3e:9c:96:5e:05:7c:55:9a:78:f5:17:cd:86:b3:17:25:e3:fb:
af:c9:75:22:97:1b:94:67:bf:f0:3e:cd:e7:5b:8d:48:f1:c2:
06:06:7b:65:8c:4c:ca:c8:93:b1:e1:2b:8a:dd:05:60:58:3d:
84:fc:fa:b6:78:c1:b0:28:6e:e7:9a:fb:13:11:ca:cb:e0:b8:
a6:04:d6:f4:c8:fb:3a:da:22:7a:17:84:dc:66:31:cb:43:1a:
35:5b:b1:72:e1:39:b2:63:d9:bc:4a:01:91:c2:87:c8:71:3a:
0e:5f:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:39 2026 by rpki-client