Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/o8bBYWpde5zB25G3op0chPWF1KA.roa
File: o8bBYWpde5zB25G3op0chPWF1KA.roa (raw, json)
Hash identifier: 0RPyFNyYu7Qe34unEDC/iTRz2G6+VT+jFUVRlVn3fYw=
Subject key identifier: A3:C6:C1:61:6A:5D:7B:9C:C1:DB:91:B7:A2:9D:1C:84:F5:85:D4:A0
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 019EF2C5E2A0C82E6883A105EA7EFF5B6804
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/o8bBYWpde5zB25G3op0chPWF1KA.roa
Signing time: Tue 23 Jun 2026 04:38:35 +0000
ROA not before: Tue 23 Jun 2026 04:38:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219425
IP address blocks: 2a13:edc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f2:c5:e2:a0:c8:2e:68:83:a1:05:ea:7e:ff:5b:68:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Jun 23 04:38:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3c6c1616a5d7b9cc1db91b7a29d1c84f585d4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:78:eb:8f:9b:d0:c4:df:ef:2b:8b:17:ed:
4f:62:fc:87:17:34:4b:6f:6f:f1:24:cf:85:e3:c2:
2f:77:a0:b2:50:c2:72:98:14:9a:d7:9f:8e:4a:1f:
ac:5a:1d:8d:dc:e8:18:31:e7:22:ea:3f:57:fc:1c:
bc:56:5f:ee:53:42:6e:9b:4e:99:4e:63:6a:82:28:
4c:68:d3:f8:cb:36:54:29:33:b3:c7:e7:c9:28:50:
e0:a3:f3:a9:67:1a:59:d4:ff:ce:0e:e2:a4:50:19:
6c:db:cc:92:ec:ce:30:fd:ce:5d:44:01:86:f8:c3:
19:0b:fc:1d:ac:1c:e2:51:a1:35:32:2a:e3:92:2a:
0d:05:09:5b:5e:f1:ac:54:11:bc:5f:6d:b4:0a:7c:
d3:5e:a3:10:a6:b3:0b:23:8d:d6:ee:ce:f3:95:63:
ec:55:d5:b8:b1:75:0e:92:f7:be:c4:e5:90:5c:08:
c3:ab:d3:63:85:bf:7c:d3:e0:a9:21:e4:df:70:04:
0b:b9:d4:f0:42:b0:f3:13:ab:de:a3:75:79:ae:16:
9a:bf:23:73:ac:9f:82:32:b0:79:06:56:f6:d9:0e:
7a:f9:b4:11:1f:54:79:28:6c:c6:77:ac:dc:2e:04:
87:48:04:63:b4:19:9a:9d:07:34:98:e9:6d:d1:b8:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C6:C1:61:6A:5D:7B:9C:C1:DB:91:B7:A2:9D:1C:84:F5:85:D4:A0
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/o8bBYWpde5zB25G3op0chPWF1KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:edc0::/29
Signature Algorithm: sha256WithRSAEncryption
c2:51:81:45:62:ae:54:13:bc:e0:16:69:df:e5:6c:3d:c8:4e:
a4:62:c7:68:f3:03:5a:b4:65:5e:e0:ae:02:7e:11:88:ee:63:
0c:6e:53:72:36:4b:08:f9:11:43:66:1e:9e:3e:0a:0a:54:f8:
5b:21:d3:39:49:27:91:3d:3a:9f:b3:36:8d:96:3e:3e:0f:1a:
3a:c7:6d:58:c1:ac:71:bc:26:aa:2f:bb:ed:db:91:5c:6b:a9:
80:30:5f:00:0e:05:75:e3:d6:5b:06:e2:bc:62:20:d0:04:87:
3d:95:74:c0:70:fd:f0:09:fc:45:7e:9f:20:70:33:7f:e0:ff:
be:6a:13:30:6a:79:0d:f6:55:fa:0a:d5:a3:09:0c:ce:9c:71:
3e:25:1d:92:2b:98:19:fd:97:ea:20:d5:2b:31:ec:c4:9e:7f:
64:fa:a1:aa:17:e3:36:d2:38:3c:98:4f:c2:1d:12:2e:da:a5:
52:ec:91:34:7d:99:f3:f0:95:56:49:a1:a5:8a:e7:f6:13:11:
f2:03:83:c4:e9:fb:88:03:b2:64:75:0b:d6:bc:07:32:0a:b4:
39:36:cd:39:39:f2:10:aa:f8:c4:9e:66:60:6b:9b:14:2f:7a:
f9:45:57:f9:53:b0:21:cf:22:93:79:bd:ca:91:fe:20:ad:2d:
8a:55:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:26:18 2026 by rpki-client