Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8IquqoNEYh1nWvWmZqFwGsMHHpg.roa
File: 8IquqoNEYh1nWvWmZqFwGsMHHpg.roa (raw, json)
Hash identifier: gCrjpZTYfuNCOtcBoP0Bff0vnJujDtN0NTymJY5Nf08=
Subject key identifier: F0:8A:AE:AA:83:44:62:1D:67:5A:F5:A6:66:A1:70:1A:C3:07:1E:98
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F47F5E392A2466FE9B61FA11C1EB6AE23
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8IquqoNEYh1nWvWmZqFwGsMHHpg.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a0e:8780::/29 maxlen: 29
2a0e:a580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e3:92:a2:46:6f:e9:b6:1f:a1:1c:1e:b6:ae:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f08aaeaa8344621d675af5a666a1701ac3071e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:51:3e:d0:ec:91:40:0b:59:46:0a:8d:3e:4b:
fe:34:1c:e9:2a:8b:d9:5c:7b:69:34:05:6c:0f:b2:
c3:35:ae:10:b7:d8:e9:1d:e5:8b:2e:e6:ec:cb:c7:
dd:b3:b9:49:ac:eb:bd:0a:7c:aa:cb:d9:62:e4:25:
a2:7b:0a:1b:55:48:64:5d:94:07:c9:b3:ef:1b:5b:
71:e6:eb:ad:9f:09:d2:34:c7:96:96:a7:06:bd:bc:
ba:93:9b:7b:ee:8a:d6:26:cf:8b:19:5e:a2:02:64:
9c:3a:6e:4d:73:0f:b2:93:4d:46:1d:23:de:6c:48:
60:d2:28:5c:ae:ea:7e:14:f5:8e:f4:32:aa:4a:ab:
5e:7d:f9:80:f7:96:da:d3:a9:b4:3e:65:0d:86:dc:
47:f6:b4:8d:48:f9:ac:ff:b5:96:d3:a0:73:d2:a5:
d4:e2:13:1c:2e:0b:67:80:be:5d:fb:db:0a:23:08:
74:81:16:ee:46:fc:15:5d:4b:58:b6:be:a8:70:ed:
15:90:c1:32:5f:c3:2d:f0:57:8f:96:96:f9:17:b6:
52:55:de:aa:e5:e9:3b:97:ab:f6:2c:98:fe:f6:48:
69:3e:88:f6:fd:0f:61:0f:59:6f:f5:5e:cf:b5:36:
8c:56:52:e6:52:e4:25:85:61:80:60:39:25:13:33:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8A:AE:AA:83:44:62:1D:67:5A:F5:A6:66:A1:70:1A:C3:07:1E:98
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8IquqoNEYh1nWvWmZqFwGsMHHpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8780::/29
2a0e:a580::/29
Signature Algorithm: sha256WithRSAEncryption
99:6e:e7:7e:4a:77:d1:ef:a2:3e:3d:9f:92:4c:0c:74:f8:b7:
6e:19:37:ec:d9:9d:d6:5f:1c:b9:df:23:86:a6:29:18:8a:5e:
be:c6:d4:5f:b9:ca:0c:3a:f7:f0:72:5b:6d:a3:c2:c7:d2:ad:
a3:b9:e7:a2:24:77:51:f9:86:85:b1:d5:a1:c7:03:43:65:1d:
54:c7:99:03:d4:39:6e:9f:ea:bd:9b:d5:c9:c8:b1:ab:26:0f:
f1:da:23:36:24:4e:5c:d8:a2:28:2c:d2:79:fd:51:15:2a:76:
b7:2a:db:00:17:b2:35:75:23:ae:e9:d6:47:01:0f:e1:08:ff:
f6:2a:41:18:48:78:ae:ba:41:b3:28:98:27:1b:fa:b1:0b:31:
d0:f3:06:d7:a8:1e:00:5e:78:57:e4:13:48:82:73:2f:a9:ba:
fb:b4:8b:e1:6f:b3:21:28:05:9a:23:db:d7:91:1e:02:d5:a8:
5d:7b:d4:a5:50:95:b9:b9:34:df:11:6b:f2:5e:44:e1:2b:8d:
90:bc:aa:6d:6b:13:26:bb:c0:d0:7e:7d:0c:50:3e:39:84:13:
44:72:18:b9:f2:78:cf:b3:ad:03:fd:b4:03:e8:e7:f5:16:ae:
87:ab:4a:47:fe:c5:ae:b0:c1:8d:c0:ce:d7:4f:ae:e2:8d:3f:
7d:1f:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:50 2026 by rpki-client