Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/8F8L8owaFRCyZZEp_-hHKAx7UA4.roa
File: 8F8L8owaFRCyZZEp_-hHKAx7UA4.roa (raw, json)
Hash identifier: 4LuFlAc6nwjWSNlcmIBkZzcWiRqOGHRGDYH2lVGI9nI=
Subject key identifier: F0:5F:0B:F2:8C:1A:15:10:B2:65:91:29:FF:E8:47:28:0C:7B:50:0E
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 01A0F9A29F2CBF6587305DFA1ED47E5AEC87
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/8F8L8owaFRCyZZEp_-hHKAx7UA4.roa
Signing time: Thu 01 Oct 2026 22:42:59 +0000
ROA not before: Thu 01 Oct 2026 22:42:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214957
IP address blocks: 2a10:ed40:6::/48 maxlen: 48
2a10:ed40:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:a2:9f:2c:bf:65:87:30:5d:fa:1e:d4:7e:5a:ec:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Oct 1 22:42:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f05f0bf28c1a1510b2659129ffe847280c7b500e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:b0:dc:5b:87:dd:6b:92:27:6e:7e:70:0a:
1d:34:85:39:a8:e9:57:1e:3e:e6:d2:db:33:cd:24:
8a:70:73:02:52:0d:e5:0b:05:20:68:9f:6a:f9:a8:
be:a6:68:84:aa:a4:2f:20:99:29:29:5e:87:12:79:
2b:1d:4a:27:41:de:e6:d9:99:88:b5:08:82:e5:76:
1e:4b:9d:0c:96:66:3c:8d:7c:9f:f1:93:0d:96:49:
8f:2b:42:03:06:b4:fd:29:48:17:ee:81:c9:ed:ea:
30:be:5f:a9:39:db:58:b5:42:1b:9c:57:92:5c:ee:
eb:c6:b7:fe:12:8e:59:f1:db:bc:84:7b:1b:d8:5a:
ca:ae:18:61:3c:50:ac:6d:e2:54:fe:65:2d:85:87:
9e:8c:f6:37:db:f7:38:e3:83:8d:c6:1a:75:45:c4:
07:16:7d:c7:f8:0f:fd:30:65:f2:9f:29:ba:c0:b5:
4b:2b:4d:7e:9d:c4:e1:b5:70:92:6c:aa:a6:ab:ef:
c6:2e:56:69:7f:3a:73:9e:4b:ad:2c:2f:ed:8a:3e:
56:1f:b2:48:55:81:ae:6a:a7:61:71:ab:bb:63:51:
c7:ad:e5:71:79:b7:96:da:0f:05:99:cd:fb:41:a6:
fb:7a:40:1d:08:9f:78:7c:b9:c6:d7:16:8a:97:33:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:0B:F2:8C:1A:15:10:B2:65:91:29:FF:E8:47:28:0C:7B:50:0E
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/8F8L8owaFRCyZZEp_-hHKAx7UA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ed40:6::/47
Signature Algorithm: sha256WithRSAEncryption
10:c0:e7:a5:22:05:d1:40:10:8c:e2:24:43:13:27:2d:a7:15:
24:3d:2b:b2:2b:d8:ea:38:f3:05:68:1a:d2:5b:d2:e7:f9:cc:
63:04:3f:13:42:29:47:ae:d6:6e:22:29:7e:f6:0e:ae:57:c1:
82:42:15:89:4e:02:6f:d8:35:07:ed:53:9b:e7:18:a0:b6:45:
db:38:a6:a5:71:ba:fa:54:17:da:6c:ca:a3:10:45:08:af:18:
a4:fd:ca:0c:e1:39:91:65:8e:1f:4f:c5:0b:8d:e7:e1:c5:0d:
e5:21:fa:ac:5c:7a:9d:79:3b:20:71:9b:12:c5:9f:f8:84:f1:
f5:09:a5:47:47:5c:88:7a:b1:e3:3b:be:b2:60:78:8b:68:17:
36:b9:10:7b:88:3c:f0:3a:5c:90:45:a2:47:32:43:f0:85:ad:
d2:8d:9e:a8:e0:79:a8:c0:19:42:36:0b:80:6f:a7:bf:dc:c6:
05:0e:fe:46:52:58:de:aa:20:5e:14:82:f0:d8:23:d7:98:27:
04:59:d6:57:a2:1a:77:44:10:a4:a2:7c:fa:96:85:c4:cd:31:
e7:8d:37:06:db:67:ce:e9:c6:53:a3:5b:ea:f1:cf:b4:80:8e:
18:ce:2c:28:26:c8:6f:79:69:f2:55:57:20:66:b7:6b:8c:73:
26:23:ad:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:03 2026 by rpki-client