Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/8UQ12RUPPEvdMji-ZyJml8s8f5w.roa
File: 8UQ12RUPPEvdMji-ZyJml8s8f5w.roa (raw, json)
Hash identifier: x37qOhjZGVYP01a7al4BChLeleCGAwV9M3Yfmjfcv5k=
Subject key identifier: F1:44:35:D9:15:0F:3C:4B:DD:32:38:BE:67:22:66:97:CB:3C:7F:9C
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 01A17C9F6E2FEE0FFBCA48A4831E62DB1F73
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/8UQ12RUPPEvdMji-ZyJml8s8f5w.roa
Signing time: Tue 27 Oct 2026 09:09:45 +0000
ROA not before: Tue 27 Oct 2026 09:09:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213320
IP address blocks: 85.27.128.0/17 maxlen: 17
85.27.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:9f:6e:2f:ee:0f:fb:ca:48:a4:83:1e:62:db:1f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Oct 27 09:09:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f14435d9150f3c4bdd3238be67226697cb3c7f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:12:64:fa:85:9b:48:82:e5:4b:7f:d5:2d:
26:d9:ab:a2:96:ae:50:53:65:23:66:fe:47:62:12:
c6:f1:82:78:f6:4f:3d:a5:1b:73:ae:94:5b:55:e7:
68:c6:b3:90:b0:b0:92:0d:a7:a3:30:e3:3e:2b:d5:
4f:c9:07:d1:28:eb:19:82:d3:1a:5e:b1:13:de:f9:
5a:1f:26:6b:4a:8e:46:ea:1f:9c:6a:8e:a8:4c:77:
30:d3:bb:43:19:a7:39:c9:5d:5a:91:30:0e:a0:7e:
fe:7d:df:9f:2d:6f:85:02:1f:5d:1f:90:64:af:21:
1b:47:f3:9e:4a:08:07:9e:2f:6e:df:84:dc:d2:7a:
82:7d:84:58:d4:ba:c2:8f:7f:90:bd:90:26:43:3b:
a3:42:bb:9d:5c:98:eb:de:5b:df:04:17:0a:a9:0d:
6e:82:52:3b:d0:31:53:66:32:a2:4c:45:54:4f:62:
f6:d0:25:25:6c:ca:61:d1:5d:bf:d9:8b:16:24:a4:
9e:a7:53:d7:67:1b:e2:00:2d:4d:d7:4b:6b:30:73:
df:b2:45:6f:96:6a:70:2a:0a:f4:1c:02:09:3c:24:
09:60:67:e5:f9:a0:7a:e9:7e:b1:94:2e:7d:c5:02:
3f:b0:db:e5:fd:22:e4:c2:b9:25:0c:ca:c5:e3:b4:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:44:35:D9:15:0F:3C:4B:DD:32:38:BE:67:22:66:97:CB:3C:7F:9C
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/8UQ12RUPPEvdMji-ZyJml8s8f5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.27.128.0/17
Signature Algorithm: sha256WithRSAEncryption
47:38:58:77:b6:d5:55:df:f5:36:b0:9f:80:ae:7c:bc:c6:44:
0f:90:35:ce:c9:04:90:d4:a3:3a:56:b4:f2:dc:cf:4c:70:d3:
05:bc:71:10:f1:04:4c:24:63:92:42:c6:e3:2f:87:92:b3:5f:
3b:01:33:e2:2a:ef:69:dc:0a:bf:2b:fe:bc:4b:3f:87:82:89:
99:09:99:60:77:52:95:07:98:8c:ca:4c:c7:be:22:31:a1:49:
dd:30:65:07:eb:c3:0e:69:9a:f2:3d:3d:24:f6:2c:50:e4:55:
11:98:67:b6:63:5d:9b:7c:f7:62:9e:db:2b:72:42:ca:3a:53:
b8:92:72:a8:35:c2:42:62:c4:1d:c5:8a:80:be:80:26:99:e7:
6e:96:1d:ed:ee:90:20:2a:d3:52:10:a9:14:c9:e6:de:21:65:
24:4e:ed:3c:f3:45:45:57:83:3f:fa:8f:00:c3:ba:48:75:3f:
6e:64:27:b8:31:db:6e:83:ad:1c:ef:90:5e:47:6f:e2:7b:10:
5b:c1:01:c5:05:6c:97:b7:cd:aa:61:fb:a2:b7:79:7a:61:d1:
22:d8:8b:af:e8:66:b3:28:e4:17:35:e7:74:42:03:bf:c3:8e:
b4:91:31:6d:43:63:7f:50:36:4a:00:c4:56:97:f6:3e:ff:16:
42:a6:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:12:07 2026 by rpki-client