Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/Soe3DKxDV0NQtGiV-an_GIHVw-Y.roa
File: Soe3DKxDV0NQtGiV-an_GIHVw-Y.roa (raw, json)
Hash identifier: Gv7ElP+BQYHC82SKplEJjWs+/+jO9wYbWeYmwSgXRpQ=
Subject key identifier: 4A:87:B7:0C:AC:43:57:43:50:B4:68:95:F9:A9:FF:18:81:D5:C3:E6
Certificate issuer: /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial: 01A05FD26A3198B1B6C646A4F7C0EFD1DBFC
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/Soe3DKxDV0NQtGiV-an_GIHVw-Y.roa
Signing time: Wed 02 Sep 2026 01:53:40 +0000
ROA not before: Wed 02 Sep 2026 01:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 2a13:a287:ff80::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5f:d2:6a:31:98:b1:b6:c6:46:a4:f7:c0:ef:d1:db:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Validity
Not Before: Sep 2 01:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a87b70cac43574350b46895f9a9ff1881d5c3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:7a:bc:8e:e3:c1:c5:17:ac:64:4d:03:a0:
fa:25:c7:6f:62:b4:7c:25:26:a7:e6:fe:cb:84:a5:
8c:23:54:9d:50:f4:68:75:33:c7:b1:17:f5:59:af:
5e:29:0c:1a:02:1f:c2:de:9a:39:9c:0e:ae:e3:42:
bc:6a:ff:fa:e2:87:60:de:73:32:72:40:f2:ae:cb:
7a:60:e5:32:aa:d4:c4:0e:5a:d0:14:89:65:60:f2:
75:dc:e7:c7:9c:22:67:cc:18:1d:eb:69:82:8c:ef:
a2:89:64:6f:83:e2:7f:b4:e2:90:ef:d8:5e:c7:72:
75:07:c8:a4:9c:f9:c1:ce:cc:b1:98:77:56:b9:a2:
cb:86:68:d8:94:2d:c4:a8:de:f3:9b:84:8b:f2:48:
65:db:15:61:b7:4f:c0:c9:f3:c1:4b:13:77:b8:22:
8c:42:54:98:2c:fa:31:99:17:47:20:82:29:3d:fb:
9f:d1:3a:68:96:9d:e7:65:36:19:21:4e:5a:94:68:
b2:46:d0:5f:e5:0c:61:78:e3:01:6d:d6:37:60:d2:
e6:ae:e1:a1:58:ef:cb:5a:7f:06:77:a2:6b:bb:e3:
a9:79:a3:2a:ca:79:53:0a:c1:91:c8:c4:dc:1c:6c:
63:3f:5f:95:9f:6b:63:73:24:0e:7d:65:9a:8c:db:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:87:B7:0C:AC:43:57:43:50:B4:68:95:F9:A9:FF:18:81:D5:C3:E6
X509v3 Authority Key Identifier:
keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/Soe3DKxDV0NQtGiV-an_GIHVw-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a287:ff80::/42
Signature Algorithm: sha256WithRSAEncryption
7b:63:f0:b6:14:29:97:cd:e1:7a:37:e1:75:9c:23:c3:77:9d:
40:aa:40:3d:74:b5:0c:fc:50:85:71:95:d1:8d:9d:9f:ce:5b:
5c:bf:65:75:66:11:d8:1f:28:32:58:d3:12:cd:df:7f:76:39:
74:ab:85:9d:dc:d2:d6:24:06:e9:e1:55:dd:1c:4a:d3:af:76:
be:19:38:84:81:e9:33:5f:00:76:b8:5f:d3:6b:71:a0:73:e0:
b1:ef:40:b0:b8:e9:64:dc:17:58:e5:e1:86:84:a5:fa:72:19:
d3:90:a8:a4:f8:48:99:e5:6e:6d:7e:56:6d:6e:1f:74:68:06:
a3:2d:85:45:37:0b:a4:b4:a5:fa:b1:80:65:ef:dd:16:e0:e1:
c5:db:b4:a5:40:d4:e5:ac:5e:8f:4c:76:e1:b0:9e:b0:c2:6d:
58:9d:b2:2e:84:ca:a6:9d:b0:51:c2:05:94:dd:71:e0:dc:07:
05:44:9b:4a:a1:08:fe:07:33:78:bd:f3:0c:07:23:96:49:8c:
63:74:6f:42:bb:17:f1:3d:00:24:89:e4:be:7c:b5:b2:89:96:
89:f4:a4:14:d5:8f:80:74:09:d4:a4:b7:96:28:71:99:e1:86:
4b:9a:37:61:72:41:6d:f5:ed:b0:c1:1b:f6:a1:7e:5a:7e:03:
02:dd:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:23 2026 by rpki-client