Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8QTNfqjnnHtuu44GcLSXnNrypJg.roa
File: 8QTNfqjnnHtuu44GcLSXnNrypJg.roa (raw, json)
Hash identifier: WZ63synLrPvj1I/tcokPX5yVy42WNPXRxfgsL9OKkak=
Subject key identifier: F1:04:CD:7E:A8:E7:9C:7B:6E:BB:8E:06:70:B4:97:9C:DA:F2:A4:98
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A04DBEEB64C49216F3B0F8DD3A593B662F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8QTNfqjnnHtuu44GcLSXnNrypJg.roa
Signing time: Sat 29 Aug 2026 13:39:12 +0000
ROA not before: Sat 29 Aug 2026 13:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:be:eb:64:c4:92:16:f3:b0:f8:dd:3a:59:3b:66:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 29 13:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f104cd7ea8e79c7b6ebb8e0670b4979cdaf2a498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:c1:26:7f:96:27:9a:be:67:da:4b:7f:54:
d4:7c:45:a3:98:aa:08:7c:80:98:50:9c:95:78:23:
c9:46:9b:dc:ec:1d:3a:83:cf:03:af:11:7c:7d:7c:
d1:34:fc:06:22:9d:e1:e6:04:1e:29:76:4a:15:aa:
2c:bc:da:a3:9e:cc:22:b8:4d:be:a0:f9:6b:7d:f8:
76:4a:d8:82:51:03:53:91:f8:68:2d:05:9b:00:05:
5e:23:86:a7:10:35:13:0c:42:5d:3c:6d:c4:40:95:
3f:b1:34:02:e5:73:0e:0f:f0:bf:fc:b2:07:5d:29:
11:93:f1:15:41:a8:17:44:e6:53:a9:30:80:73:a5:
13:dd:21:0b:e7:83:3a:64:09:4c:81:d0:c3:88:2c:
76:b0:d4:cf:7f:13:e7:3e:51:69:fc:50:b4:ff:83:
77:fb:55:3a:5e:c2:1a:13:7e:46:0c:01:6f:59:f1:
97:7e:05:58:61:42:2a:e2:13:d2:b7:73:1a:03:ba:
b5:9f:eb:da:71:06:d3:22:f8:46:ab:56:93:07:1d:
d9:28:87:b2:9b:b1:9e:9c:e9:cf:45:a5:e5:e8:c9:
f7:84:ee:1f:5f:dc:f0:f7:8a:ed:e4:83:c6:6c:57:
89:01:1e:e4:4f:67:60:d9:c3:3f:d8:dc:8b:5c:68:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:04:CD:7E:A8:E7:9C:7B:6E:BB:8E:06:70:B4:97:9C:DA:F2:A4:98
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8QTNfqjnnHtuu44GcLSXnNrypJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7a:fd:02:fb:a9:3f:88:97:c3:f3:96:87:42:b5:6d:2b:1c:
f3:1f:f5:60:6e:02:39:b8:19:54:2f:c4:ef:87:d0:d6:f7:ae:
8e:8f:04:cd:98:25:ef:3a:a4:95:b3:53:57:5c:a3:da:d8:24:
f8:c6:20:26:c7:65:20:fb:63:98:df:d3:91:77:1b:41:4a:c5:
c8:84:1a:d8:58:7d:91:96:86:72:3c:93:92:5d:80:bc:96:6b:
94:e3:9a:63:cb:10:82:35:a0:7c:52:b5:38:f3:fa:99:e1:3d:
e0:5c:d2:2b:33:0d:33:b4:0e:85:b2:d7:a8:fa:cc:af:6b:46:
33:b8:a3:d3:06:c7:14:76:25:ae:b4:00:37:85:fe:ab:1b:3c:
8a:bd:cf:5b:ea:c2:3e:a8:f3:2a:1e:ca:60:7a:99:e2:12:0a:
53:03:6f:33:29:94:04:21:07:96:c3:09:8d:3a:1f:8d:37:c4:
5b:50:55:bd:f8:99:db:c5:bf:df:7e:51:85:0a:c9:ee:4a:11:
9c:8d:86:3f:61:30:a6:8a:e2:09:9e:c9:4a:30:21:6b:8f:16:
26:6e:d4:b1:13:f5:ef:43:21:5b:cd:a6:74:75:71:48:76:6a:
d3:09:a0:67:ec:14:74:a8:09:1b:9c:97:ed:65:10:33:e6:13:
76:18:17:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 20:27:17 2026 by rpki-client