Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/I-FyoLS7JEizSunGxvv7y5lmkqE.roa
File: I-FyoLS7JEizSunGxvv7y5lmkqE.roa (raw, json)
Hash identifier: SP92M6fDutNa0lFzBsQry4ZeIGLK/sJR3I8oQq6cCNk=
Subject key identifier: 23:E1:72:A0:B4:BB:24:48:B3:4A:E9:C6:C6:FB:FB:CB:99:66:92:A1
Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial: 01A02392553672B4836C51F0FBFC4BD7D831
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/I-FyoLS7JEizSunGxvv7y5lmkqE.roa
Signing time: Fri 21 Aug 2026 09:06:27 +0000
ROA not before: Fri 21 Aug 2026 09:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218921
IP address blocks: 2a07:2447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:92:55:36:72:b4:83:6c:51:f0:fb:fc:4b:d7:d8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Validity
Not Before: Aug 21 09:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23e172a0b4bb2448b34ae9c6c6fbfbcb996692a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:f9:24:27:11:72:40:1c:37:ef:03:11:4b:
70:ff:f1:b6:00:ab:b3:cc:e7:79:99:33:76:86:a9:
2a:76:3f:b7:57:df:93:a6:31:e6:69:4c:1d:35:24:
35:c6:0a:c0:6c:b5:cd:35:ad:29:66:9d:57:7d:7c:
ea:4a:db:ac:12:56:20:14:2b:a0:4b:ff:da:31:3f:
44:30:b9:4d:bb:04:f9:da:07:c4:27:e7:46:d9:fd:
9d:b3:9c:57:49:45:ee:5b:e9:b6:2c:ad:f8:72:cb:
12:bb:92:a3:af:5a:cd:9c:7a:64:ee:59:c7:76:f0:
da:32:1f:c5:f5:69:8c:dd:22:ce:f7:e8:d4:b1:4e:
d3:44:b8:75:e9:2d:52:70:d8:60:96:26:85:c5:c5:
ea:bb:be:69:21:e1:52:f0:03:ea:29:32:20:3a:67:
34:f0:3b:b3:3c:96:a4:af:45:bb:58:b8:2c:b0:bf:
d8:c1:f0:de:a0:b4:70:d2:bf:6d:ac:03:21:f5:78:
a6:fb:2a:01:64:c1:9e:61:a8:b6:fe:fe:c6:08:9f:
d3:b8:8a:24:70:e7:57:7e:65:1a:bd:a5:2e:e9:13:
17:57:73:3a:86:30:e9:bd:a0:5f:9c:0d:89:64:93:
50:82:1b:d2:22:7a:ee:25:56:9a:e3:7d:91:18:ce:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E1:72:A0:B4:BB:24:48:B3:4A:E9:C6:C6:FB:FB:CB:99:66:92:A1
X509v3 Authority Key Identifier:
keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/I-FyoLS7JEizSunGxvv7y5lmkqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2447::/32
Signature Algorithm: sha256WithRSAEncryption
07:b4:a2:29:5c:c9:e6:81:8b:ad:9d:f3:7a:a2:df:7e:f5:45:
1c:4d:97:c6:8b:f4:18:72:79:6b:9c:2e:3e:42:d0:21:f8:1d:
70:39:a6:30:0b:7a:bb:62:80:78:f2:de:ad:98:9a:aa:d0:d5:
f2:cf:c3:97:72:44:73:f9:5b:cc:a4:6e:f6:50:63:9f:26:ad:
aa:40:93:93:7f:8e:d4:e3:37:b4:bb:64:be:ad:fb:5d:7a:97:
4d:d3:30:b1:d3:c2:c1:2b:3f:cb:42:ac:45:8c:0c:16:3e:80:
68:ee:16:47:14:99:4c:06:74:36:cb:bb:c4:d2:29:a6:31:61:
60:aa:78:ed:30:84:40:92:fe:da:5a:09:b7:0d:50:c8:3b:56:
34:05:91:06:5e:06:80:4d:4b:13:6e:c6:a5:22:31:9f:fc:3d:
ac:d5:d7:8b:f9:b9:58:77:e8:cc:fd:0e:8c:e9:46:d0:c2:2a:
15:6c:bd:e7:10:09:95:ca:4f:94:fa:1b:ce:67:ac:15:a4:cd:
bb:32:ec:89:bd:be:52:6b:e5:10:7e:b6:02:a3:fa:af:96:98:
b9:eb:fb:b1:26:6d:07:d3:13:a9:40:f3:8d:69:91:04:5b:ea:
51:57:8e:99:49:5b:2f:d3:aa:0e:24:09:92:c4:6f:58:99:02:
0d:f3:c9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:18:26 2026 by rpki-client