Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/lGfVfyfCjOGPuM1XDP32hGeN36s.roa
File: lGfVfyfCjOGPuM1XDP32hGeN36s.roa (raw, json)
Hash identifier: 8TQVC2yr/Ila9hB2GU7fW+CI0VF4Hq3Yu+npudfKOm0=
Subject key identifier: 94:67:D5:7F:27:C2:8C:E1:8F:B8:CD:57:0C:FD:F6:84:67:8D:DF:AB
Certificate issuer: /CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Certificate serial: 01A06B3AF409984E8446016906044C38363D
Authority key identifier: 8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/lGfVfyfCjOGPuM1XDP32hGeN36s.roa
Signing time: Fri 04 Sep 2026 07:03:40 +0000
ROA not before: Fri 04 Sep 2026 07:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31027
IP address blocks: 37.25.64.0/21 maxlen: 21
185.19.232.0/22 maxlen: 22
185.29.168.0/22 maxlen: 22
213.146.64.0/19 maxlen: 19
2a00:4960::/32 maxlen: 32
2a00:4961::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:3a:f4:09:98:4e:84:46:01:69:06:04:4c:38:36:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Validity
Not Before: Sep 4 07:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9467d57f27c28ce18fb8cd570cfdf684678ddfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:c5:ed:6c:0e:35:7a:a1:b7:61:5b:c7:30:
49:f8:4d:94:8d:a0:53:a6:fd:a5:1d:3e:25:29:ce:
7e:7e:66:0e:6a:d4:fe:1d:69:ab:13:44:00:ee:fc:
2f:84:7c:90:ce:61:6e:fa:e2:3b:12:74:81:f3:74:
09:44:c4:82:97:71:00:55:78:20:61:0e:0a:a3:61:
25:57:e2:cd:9a:98:ef:f2:43:ba:73:e5:89:ea:f0:
f6:f2:e0:85:fb:42:70:01:32:28:07:f5:1d:94:4a:
5f:de:a3:c3:4b:7f:8f:88:10:89:57:c9:84:46:47:
31:4a:81:8d:e5:5a:d9:75:0d:20:24:e3:bb:5c:2e:
bf:a7:37:13:4e:df:fd:c0:46:e6:6b:d7:8d:cf:59:
03:66:4c:03:58:f5:ed:dd:12:f4:3d:14:6b:11:6c:
9a:b6:ab:aa:2f:45:2b:c1:d6:31:dd:5f:a4:51:fe:
1e:5c:aa:83:d8:8e:e9:38:8a:a6:ea:5b:c2:f3:b4:
81:f9:99:88:69:17:02:39:ab:83:a1:7e:34:56:45:
2f:77:1f:c7:fb:a9:4b:1f:c1:5e:69:4c:3d:9a:11:
41:c1:0d:a5:8b:1c:11:03:1f:52:4b:45:2c:6a:1e:
90:12:60:57:48:21:d5:e4:0a:52:f9:43:6f:4d:43:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:67:D5:7F:27:C2:8C:E1:8F:B8:CD:57:0C:FD:F6:84:67:8D:DF:AB
X509v3 Authority Key Identifier:
keyid:8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/lGfVfyfCjOGPuM1XDP32hGeN36s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.64.0/21
185.19.232.0/22
185.29.168.0/22
213.146.64.0/19
IPv6:
2a00:4960::/31
Signature Algorithm: sha256WithRSAEncryption
8d:e2:1f:b7:c7:b0:35:9f:4d:51:ef:81:f0:f9:01:e3:cf:37:
bf:82:72:5a:20:f4:42:65:aa:26:19:b1:ef:0f:3f:ad:8a:1c:
9f:51:85:80:bf:bf:d8:86:ba:38:56:fb:73:65:d5:61:d0:4f:
f5:2e:e7:ac:f4:47:98:b3:9e:05:48:2b:fe:47:68:f2:5b:c1:
fd:ed:39:4e:b0:17:4c:cd:84:00:94:01:f6:a6:04:7c:9f:7b:
c4:4d:fd:f7:a2:4f:12:b0:f7:ce:9b:49:3f:ec:90:c9:73:e8:
d1:28:a0:21:bc:76:17:ae:c3:89:c7:78:62:72:8a:1d:2b:e5:
06:80:52:58:a9:c6:25:4c:bc:fb:b1:8b:27:78:30:0f:0d:f4:
3c:3a:2b:1e:f3:91:4a:3b:26:34:8f:01:b9:d1:a4:99:87:7f:
fb:af:31:69:f2:b1:b3:62:a5:96:da:e5:f1:a0:6f:55:15:23:
26:d2:54:0e:de:c6:bf:62:e1:2b:0b:44:7b:ee:b1:d7:6a:34:
e4:3a:23:b8:b5:d4:62:e5:77:96:91:57:bc:20:b5:06:fd:91:
28:a3:4e:54:bd:24:58:2b:a6:31:11:ab:89:28:80:f7:b0:3b:
be:66:66:eb:17:34:2f:89:ed:4d:02:38:e5:a8:14:0f:ec:3a:
52:07:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:29:01 2026 by rpki-client