Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8UoDd4hLt4bFvzfhRJuUTLKY098.roa
File: 8UoDd4hLt4bFvzfhRJuUTLKY098.roa (raw, json)
Hash identifier: WtnndOer3s2+jKVDr+m+Jb9c8/oUiUbL1KguiqM5zbQ=
Subject key identifier: F1:4A:03:77:88:4B:B7:86:C5:BF:37:E1:44:9B:94:4C:B2:98:D3:DF
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019FDDCF808C8EBC2C68505830D4EE5C632F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8UoDd4hLt4bFvzfhRJuUTLKY098.roa
Signing time: Fri 07 Aug 2026 19:59:51 +0000
ROA not before: Fri 07 Aug 2026 19:59:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215685
IP address blocks: 2a0f:b240:b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:cf:80:8c:8e:bc:2c:68:50:58:30:d4:ee:5c:63:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 7 19:59:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f14a0377884bb786c5bf37e1449b944cb298d3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d8:c7:53:81:7d:5a:6e:20:6f:4c:3e:44:6e:
2c:39:2b:0c:59:0a:b8:8a:4d:c1:cf:a7:10:49:70:
a6:aa:4e:d5:f1:be:44:0b:1d:74:3b:54:6f:a5:02:
70:37:35:99:04:cb:8f:49:86:1b:9b:fa:51:6a:61:
fb:ae:59:6d:6d:28:80:f9:e8:01:87:1d:a9:08:fb:
97:8a:92:3a:62:b7:5c:39:0b:36:e1:80:de:14:c0:
be:d8:11:49:c2:ab:11:2c:3d:00:4f:63:53:bd:8a:
9e:39:9e:b8:a2:5a:3c:52:ea:f6:58:83:dd:dc:5f:
dd:d8:d8:c7:9f:70:36:20:23:f0:ee:7f:e8:8d:ce:
1f:9b:70:45:61:bf:91:8c:ff:a7:bc:d6:c1:34:a4:
e9:15:cf:53:77:90:90:21:67:76:f4:fc:cb:e6:c5:
02:51:89:51:6f:f3:46:00:b0:8a:cf:3a:37:3b:bd:
49:9f:04:13:43:f9:88:2f:82:98:e1:3b:9e:cd:5d:
d1:2a:8c:87:79:04:dd:30:40:72:a6:b5:90:57:5f:
43:85:99:f5:31:aa:d8:cb:5e:cf:29:e7:b5:ff:28:
c9:76:aa:9f:80:eb:af:f0:62:16:da:ad:7f:d3:7f:
ca:8d:81:b6:94:a7:27:c3:30:39:2f:f5:41:38:5d:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:03:77:88:4B:B7:86:C5:BF:37:E1:44:9B:94:4C:B2:98:D3:DF
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8UoDd4hLt4bFvzfhRJuUTLKY098.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:b0::/44
Signature Algorithm: sha256WithRSAEncryption
8c:09:df:af:19:2e:8a:07:4f:05:3c:5b:8c:73:77:ba:23:22:
f0:b4:8f:d3:60:f2:c7:d4:13:51:cc:f1:68:40:c3:06:6a:d0:
22:f5:47:70:56:36:08:24:5c:4e:4e:41:87:89:4e:c3:4f:99:
2b:ea:cd:fe:16:36:04:a8:22:f5:7e:bd:0e:f7:f2:94:10:d2:
a0:17:5d:29:02:9d:b9:53:f8:98:8e:65:a0:68:81:ee:2b:0d:
72:f9:c5:52:51:d3:5c:38:c1:da:39:f1:a8:41:2d:5e:f4:93:
96:94:07:2f:11:fb:42:4d:ba:8f:08:01:69:6a:c1:5a:2f:50:
92:61:54:a6:a9:0a:3b:63:c8:5c:0c:ee:d1:d6:03:54:97:f1:
ef:0f:d0:f1:19:52:34:e1:dd:5f:d4:de:5c:2f:6f:6c:fd:0d:
07:17:a9:e7:bc:58:bc:76:4a:2a:f0:38:80:10:b2:2d:1e:66:
9a:11:19:57:91:1b:60:e7:f9:d3:6f:6a:ae:b8:36:80:5e:66:
95:63:ab:96:24:46:ea:1b:52:4a:52:c6:d6:41:ef:64:8e:e0:
71:83:90:5d:3f:16:60:d9:34:c7:ae:1d:a1:51:26:07:ba:cf:
2d:78:35:df:58:94:b0:dc:32:08:30:97:e1:23:dc:ac:a6:de:
6e:6f:91:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 23:05:15 2026 by rpki-client