Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/b8FUJ6vTuYb37tPPpkHWlKnxQaM.roa
File: b8FUJ6vTuYb37tPPpkHWlKnxQaM.roa (raw, json)
Hash identifier: JxSaavJzGorBiYOMbo+wwCZSr84d63NSpqcOvfQfhnc=
Subject key identifier: 6F:C1:54:27:AB:D3:B9:86:F7:EE:D3:CF:A6:41:D6:94:A9:F1:41:A3
Certificate issuer: /CN=af02de20d45b778fbe94751a3301c9dfec2c09f1
Certificate serial: 019F422E60BAAC55AEDE2025C27BBF431BFF
Authority key identifier: AF:02:DE:20:D4:5B:77:8F:BE:94:75:1A:33:01:C9:DF:EC:2C:09:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/b8FUJ6vTuYb37tPPpkHWlKnxQaM.roa
Signing time: Wed 08 Jul 2026 14:42:43 +0000
ROA not before: Wed 08 Jul 2026 14:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.45.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:2e:60:ba:ac:55:ae:de:20:25:c2:7b:bf:43:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02de20d45b778fbe94751a3301c9dfec2c09f1
Validity
Not Before: Jul 8 14:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fc15427abd3b986f7eed3cfa641d694a9f141a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:e5:5e:b5:8f:fd:24:c0:4d:18:b0:05:06:
96:d6:d2:93:83:50:50:96:e0:87:9c:96:5d:98:17:
13:f3:e1:e2:91:4b:9f:7f:ae:d1:dc:6d:27:e2:91:
ec:bf:e2:9f:22:27:e5:34:8c:4f:d3:48:e0:b3:09:
4d:57:2b:5d:15:f3:ef:31:b5:41:86:64:6e:f3:4d:
c2:2c:5d:3a:2c:f3:c9:85:6d:f5:16:77:b6:ef:17:
44:02:fb:d2:dd:23:dc:f6:43:bc:40:8a:f0:64:a9:
94:04:44:4a:10:02:0e:f7:83:f2:7c:80:ef:78:54:
47:45:bd:b0:13:c6:9d:ee:67:bb:b8:31:18:49:e9:
d3:f6:79:f5:76:2b:06:9a:13:24:4e:25:2e:23:2c:
61:3d:83:73:90:52:d5:f5:02:4f:44:9b:a0:ec:fa:
45:e5:22:5d:1b:58:c7:a1:48:59:2f:6a:44:17:b1:
b1:4b:b0:26:bb:99:18:b2:79:53:05:99:0a:ab:b5:
bc:9e:ca:6d:fe:00:5c:ea:55:96:a7:79:db:84:43:
a6:07:ac:2e:d0:42:b3:a7:a0:86:d9:ed:68:46:59:
8e:d5:09:66:c3:0d:ff:7b:57:5e:44:3d:14:da:77:
f8:aa:ad:32:df:2a:dd:e9:85:1b:ec:3b:88:29:36:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:54:27:AB:D3:B9:86:F7:EE:D3:CF:A6:41:D6:94:A9:F1:41:A3
X509v3 Authority Key Identifier:
keyid:AF:02:DE:20:D4:5B:77:8F:BE:94:75:1A:33:01:C9:DF:EC:2C:09:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/b8FUJ6vTuYb37tPPpkHWlKnxQaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:2d:b7:ef:82:e0:b9:ba:5d:d9:60:81:95:ab:8b:2a:25:3f:
31:6a:55:6e:e0:70:8b:11:02:30:8d:cd:0d:d3:fb:0f:9d:cf:
a8:f2:97:a6:ff:99:8f:91:8a:b8:79:87:ba:b7:ad:11:92:23:
6c:b3:76:5f:85:91:b0:f2:45:6d:c4:62:74:54:9a:99:ca:22:
c8:cf:32:31:f2:52:13:ec:d8:9a:c9:23:fa:37:fa:c1:5f:62:
38:02:24:65:0b:33:c4:e8:d9:46:ea:24:c1:11:a7:e6:07:c6:
09:d2:23:f4:af:e6:3b:2a:6f:9a:2e:1a:bf:5c:04:70:9e:c7:
2d:45:fe:59:91:a9:90:f5:eb:0c:b6:86:c5:7e:f7:d9:be:08:
d5:4f:f6:9a:30:58:37:e1:50:02:ef:35:df:54:ca:53:12:96:
55:f7:34:25:17:c6:94:e5:4b:9f:8b:03:05:88:c4:f1:44:76:
70:2d:37:7e:7d:c5:ff:04:7c:8b:7a:60:39:59:78:f5:11:14:
b2:4f:8d:36:ac:7b:56:0d:70:f8:3f:49:a0:00:ad:17:40:9a:
cd:f8:6f:e2:3a:33:c6:f7:aa:ff:da:66:7c:fe:43:3f:35:8b:
19:69:80:29:0e:21:22:43:fe:3f:06:37:2b:c4:0a:96:60:15:
de:6b:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:51 2026 by rpki-client