Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8Gjto0eoGFhXbbAUYh0UtNAPLmA.roa
File: 8Gjto0eoGFhXbbAUYh0UtNAPLmA.roa (raw, json)
Hash identifier: 5QA5OnfQ6532CVpwOS0hyhhPMN+wGjKPbblXS4zKHeQ=
Subject key identifier: F0:68:ED:A3:47:A8:18:58:57:6D:B0:14:62:1D:14:B4:D0:0F:2E:60
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FEAB3FBBD982AC8F5012E7474C184EF3E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8Gjto0eoGFhXbbAUYh0UtNAPLmA.roa
Signing time: Mon 10 Aug 2026 08:04:51 +0000
ROA not before: Mon 10 Aug 2026 08:04:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32613
IP address blocks: 2a0f:e8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:b3:fb:bd:98:2a:c8:f5:01:2e:74:74:c1:84:ef:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 10 08:04:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f068eda347a81858576db014621d14b4d00f2e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:e3:0f:6f:e1:08:c8:73:cd:59:3c:98:bd:
0f:9d:17:f6:7d:5d:46:0c:c5:ba:cd:16:de:18:dc:
4f:aa:ea:68:95:95:f2:8f:57:83:0c:49:a1:ec:9f:
70:23:6d:b6:47:c8:d5:a4:69:b3:53:58:ff:44:9d:
49:5e:2a:bc:d1:e4:a1:78:6d:58:c2:7f:b3:08:e7:
95:4f:35:80:9d:af:5d:70:49:8f:d1:99:71:69:8f:
eb:07:fa:70:7a:09:a6:e2:82:4d:44:1e:ec:c3:17:
2e:ab:8a:e2:f5:70:cf:8e:8d:81:ac:48:33:d8:80:
96:e0:ad:08:bd:e8:f4:dd:21:77:7b:31:a7:c8:18:
7c:9e:17:0c:ad:0e:15:ba:87:af:10:64:04:8d:0d:
20:b5:9d:a0:cd:0d:16:4d:cf:f7:5c:fb:72:eb:33:
8a:d9:c5:76:78:22:3a:0f:ff:06:62:72:f3:38:a9:
92:98:f6:39:28:95:bc:c6:6b:97:cd:0b:9f:b5:22:
ee:7c:1d:a8:99:a3:4d:fe:d7:3c:ad:43:ec:f0:87:
b4:0c:b7:b6:43:2d:07:7b:eb:0c:19:86:34:ad:25:
a5:2b:73:c4:c3:7d:85:22:e7:11:89:b7:96:cd:42:
38:a6:6b:75:a9:f1:e1:0a:ef:75:48:5a:59:81:c3:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:68:ED:A3:47:A8:18:58:57:6D:B0:14:62:1D:14:B4:D0:0F:2E:60
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8Gjto0eoGFhXbbAUYh0UtNAPLmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
26:4d:25:4e:17:76:1b:68:43:2e:b5:7f:bb:dc:6b:b5:5d:17:
21:3e:ed:4a:67:ad:2c:29:71:f3:e1:1b:2e:a2:cb:e1:38:62:
29:1d:c3:a7:7a:08:79:e5:0e:e0:94:75:84:75:69:8c:ca:5f:
71:c7:07:cf:82:43:fd:ed:65:96:9a:c7:f0:d3:29:3e:eb:86:
4b:40:22:76:db:12:87:15:52:47:93:f6:a0:5a:f3:4e:fb:67:
96:08:b5:78:53:7c:35:73:9c:de:42:2a:32:d3:5b:09:82:46:
08:3c:31:be:b0:fa:55:90:51:6a:6e:db:e8:53:86:8a:10:0f:
85:3a:da:5b:fb:1e:43:45:b0:3c:1a:ce:92:6f:1b:96:a7:9c:
b1:f9:b9:4a:3c:88:96:5a:13:bd:5e:7e:20:6d:2b:d8:5f:25:
9d:d4:5b:bb:f8:41:70:b7:ac:19:47:b3:14:85:30:72:0a:f9:
09:6c:6b:cf:0a:98:4c:cc:1e:00:b6:dd:2d:05:b7:cf:a7:0a:
d6:4f:f6:43:d4:9f:1a:57:4e:14:e2:89:4a:81:80:7f:08:e5:
d9:95:bc:db:63:9b:17:3b:7f:04:c5:3d:28:a6:fc:d7:15:31:
5c:c8:19:ef:24:bb:1e:57:05:83:0f:8c:6b:3d:0b:cf:30:ca:
f4:60:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:47 2026 by rpki-client