Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/8GcZVYe92v13intCg5ID91bOLno.roa
File: 8GcZVYe92v13intCg5ID91bOLno.roa (raw, json)
Hash identifier: b3DSszyVIPa0dAbS/Sd5p3m5O/sg4MNTHqFlJONsIZM=
Subject key identifier: F0:67:19:55:87:BD:DA:FD:77:8A:7B:42:83:92:03:F7:56:CE:2E:7A
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F605D6E5C35905B3314FD3199E3880E23
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/8GcZVYe92v13intCg5ID91bOLno.roa
Signing time: Tue 14 Jul 2026 11:22:43 +0000
ROA not before: Tue 14 Jul 2026 11:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a10:3e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:5d:6e:5c:35:90:5b:33:14:fd:31:99:e3:88:0e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jul 14 11:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f067195587bddafd778a7b42839203f756ce2e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:2e:a4:9b:18:28:bc:63:a6:80:23:d5:b9:
c2:c9:51:48:8e:11:c4:0c:f9:2e:9a:42:85:0e:47:
08:44:8c:50:5a:9b:03:b5:f9:20:be:22:bf:a7:14:
48:6b:93:17:09:ec:81:1f:44:7a:05:e1:6e:17:09:
9e:8b:aa:b6:5c:9b:e8:5a:52:29:88:20:41:9a:c4:
9d:1c:50:25:e7:2b:bb:9c:88:b6:7d:10:41:3c:c7:
7c:2a:33:d4:20:be:37:28:d3:ba:09:fd:6a:19:8f:
90:28:4e:ba:fb:d6:48:fa:83:f2:41:2a:60:43:97:
55:9e:d2:f9:96:02:70:fb:78:eb:c5:20:e6:ac:cb:
27:4f:dd:69:37:d1:33:64:5e:b3:74:cb:97:d9:04:
06:11:8d:b2:64:be:bc:07:c6:02:4f:2f:ea:7f:d3:
50:98:c7:6a:52:ef:4f:42:db:6b:79:7a:69:6a:a6:
7b:ea:df:1a:a7:69:27:96:a3:92:7f:8c:16:85:60:
b0:3e:b4:2a:b8:4d:6a:1b:97:c0:ae:1d:6a:b1:68:
b4:a4:cf:8b:b4:96:99:b8:ec:e9:1b:d5:6f:f6:0d:
dd:1c:75:7f:5f:e1:09:81:15:87:3f:e2:ab:40:5f:
15:0b:e8:2b:1e:0e:03:23:d3:d6:63:a1:51:99:96:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:67:19:55:87:BD:DA:FD:77:8A:7B:42:83:92:03:F7:56:CE:2E:7A
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/8GcZVYe92v13intCg5ID91bOLno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
0c:95:66:08:93:20:53:12:03:b7:1f:2d:f3:dc:47:16:95:cd:
d5:27:ea:69:3c:aa:58:87:c5:4c:b4:c5:51:8e:8e:76:6b:2a:
ef:f5:d4:31:e6:c2:b5:5f:20:78:e3:e9:d1:08:20:68:27:1c:
e1:ca:f3:a5:85:ec:3c:34:66:81:10:ba:e4:5d:7e:2c:19:d4:
6e:f7:5e:51:05:61:f5:a3:45:e7:e3:02:02:7a:1e:10:a2:6b:
99:5e:fb:7b:67:e6:56:3d:61:ee:74:e7:68:6b:d0:5c:cb:d2:
cb:1a:9e:d3:ec:04:44:ff:d4:37:28:de:32:22:90:73:37:e5:
51:2c:cb:b1:af:c6:a4:23:92:b6:d2:83:70:2e:99:f7:54:7e:
ec:fc:ef:86:b7:c7:33:a2:df:43:65:07:ed:37:69:43:6f:b8:
83:57:21:d3:5e:c6:9e:12:d3:34:a0:d2:0f:75:95:0a:0b:da:
5d:b8:08:34:51:07:c4:21:6d:1e:d0:35:82:a4:29:40:c4:56:
eb:6d:d6:84:0d:0d:3e:fc:01:be:c5:34:bc:a4:35:79:15:1b:
2a:53:39:cc:cd:f3:87:0b:dc:a9:86:65:84:7c:00:a7:eb:37:
91:0f:01:e6:6d:01:13:dc:52:e2:0c:48:86:42:d8:e5:2c:5e:
99:28:ff:d8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ9gXW5cNZBbMxT9MZnjiA4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwNzE0MTEyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDY3MTk1NTg3YmRkYWZkNzc4YTdiNDI4MzkyMDNmNzU2Y2UyZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t8upJsYKLxjpoAj1bnCyVFIjhHE
DPkumkKFDkcIRIxQWpsDtfkgviK/pxRIa5MXCeyBH0R6BeFuFwmei6q2XJvoWlIp
iCBBmsSdHFAl5yu7nIi2fRBBPMd8KjPUIL43KNO6Cf1qGY+QKE66+9ZI+oPyQSpg
Q5dVntL5lgJw+3jrxSDmrMsnT91pN9EzZF6zdMuX2QQGEY2yZL68B8YCTy/qf9NQ
mMdqUu9PQttreXppaqZ76t8ap2knlqOSf4wWhWCwPrQquE1qG5fArh1qsWi0pM+L
tJaZuOzpG9Vv9g3dHHV/X+EJgRWHP+KrQF8VC+grHg4DI9PWY6FRmZaPiQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPBnGVWHvdr9d4p7QoOSA/dWzi56MB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvOEdjWlZZZTkydjEzaW50Q2c1SUQ5MWJPTG5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhA+gDAN
BgkqhkiG9w0BAQsFAAOCAQEADJVmCJMgUxIDtx8t89xHFpXN1SfqaTyqWIfFTLTF
UY6Odmsq7/XUMebCtV8geOPp0QggaCcc4crzpYXsPDRmgRC65F1+LBnUbvdeUQVh
9aNF5+MCAnoeEKJrmV77e2fmVj1h7nTnaGvQXMvSyxqe0+wERP/UNyjeMiKQczfl
USzLsa/GpCOSttKDcC6Z91R+7PzvhrfHM6LfQ2UH7TdpQ2+4g1ch017GnhLTNKDS
D3WVCgvaXbgINFEHxCFtHtA1gqQpQMRW623WhA0NPvwBvsU0vKQ1eRUbKlM5zM3z
hwvcqYZlhHwAp+s3kQ8B5m0BE9xS4gxIhkLY5SxemSj/2A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:18 2026 by rpki-client