Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/8tSEwUH0JKaj9-b78A6P1HNWucA.roa
File: 8tSEwUH0JKaj9-b78A6P1HNWucA.roa (raw, json)
Hash identifier: /2i4x0ciVTUv5ry6RgoyWYRvzmYenJ7v0fQyaaOhTzk=
Subject key identifier: F2:D4:84:C1:41:F4:24:A6:A3:F7:E6:FB:F0:0E:8F:D4:73:56:B9:C0
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 01A046BA4CE169BBE67EC702CA985F978878
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/8tSEwUH0JKaj9-b78A6P1HNWucA.roa
Signing time: Fri 28 Aug 2026 04:56:49 +0000
ROA not before: Fri 28 Aug 2026 04:56:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 136.148.128.0/22 maxlen: 22
212.108.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:46:ba:4c:e1:69:bb:e6:7e:c7:02:ca:98:5f:97:88:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Aug 28 04:56:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2d484c141f424a6a3f7e6fbf00e8fd47356b9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:d0:72:8d:b9:c5:01:79:c5:78:47:53:10:
a0:3a:7b:9e:76:9a:3e:c4:17:51:0b:d0:4a:9e:5f:
b2:7f:86:43:b1:7b:16:3c:e5:9a:90:9e:26:38:9d:
46:65:47:cf:23:c2:92:b0:b0:b6:64:38:7a:1c:42:
f9:42:14:e3:6c:f1:a1:00:6b:95:c3:75:9f:96:c1:
26:c0:f3:56:53:0a:b1:c6:ca:a7:91:fa:3e:33:ef:
26:81:96:14:ab:57:ec:1d:cf:9b:1f:89:a9:13:df:
a5:74:45:da:ae:a3:61:e2:83:f9:49:9c:a8:80:b7:
64:d9:90:15:49:3d:a2:b9:80:1d:92:b6:00:24:d1:
46:ea:12:7c:0e:13:d5:37:dc:14:88:93:7c:55:98:
b1:7e:0c:f9:92:a4:ca:fa:42:85:c7:16:9d:db:da:
3f:7e:9c:7a:b9:bd:7c:92:9a:6c:e2:f2:c8:62:15:
32:6f:06:d1:b5:48:8f:c1:4e:2f:f8:2f:c1:66:6c:
0f:57:26:50:20:f5:36:f9:10:f3:32:10:5a:13:90:
06:d5:95:2a:c6:9f:87:b3:7b:b3:9c:d4:65:30:f8:
7d:6e:ce:a6:c2:4a:22:bf:57:1d:11:b8:6d:c2:e5:
15:f4:5c:98:08:ce:a9:72:11:da:89:68:f4:13:2f:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D4:84:C1:41:F4:24:A6:A3:F7:E6:FB:F0:0E:8F:D4:73:56:B9:C0
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/8tSEwUH0JKaj9-b78A6P1HNWucA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.128.0/22
212.108.113.0/24
Signature Algorithm: sha256WithRSAEncryption
81:3f:d3:09:10:a7:d9:82:87:01:c7:f8:1a:1d:fc:81:f6:9c:
7a:bf:77:65:28:a7:d1:1a:c4:f8:47:98:43:27:9c:ce:66:52:
1c:cf:1a:8d:60:09:b8:9d:fb:ae:d2:07:de:eb:fc:80:3c:18:
ba:1b:3b:b1:4c:c5:86:af:66:29:47:bf:7b:67:7b:f7:e8:cd:
e4:84:89:9d:ca:7d:2e:c2:57:a3:2a:11:02:44:94:96:9e:57:
ab:31:d8:e9:ea:c7:32:ba:ab:e2:09:ca:59:b8:77:b1:b4:e1:
57:2d:71:56:0c:ac:6b:6e:c8:94:b7:d4:fa:7b:0d:b9:82:c7:
d5:72:ec:29:b8:93:f4:f6:cc:5b:8f:bf:d8:06:e8:da:be:51:
1c:fb:5a:db:5b:a5:3f:14:4a:de:48:0a:3a:26:b5:0a:3c:03:
6d:63:16:24:51:77:3f:28:2a:7f:27:85:4a:f4:bb:e3:6d:86:
5a:be:29:e3:bd:b8:e3:3f:d3:38:c1:5a:32:18:02:31:18:a5:
fb:29:6c:10:4f:f7:e3:13:c4:41:ab:11:82:ba:0a:05:1c:80:
91:38:09:6b:41:97:8b:ce:8e:f1:c6:c5:5b:27:dd:88:33:59:
72:c6:5e:2f:49:f3:0f:4f:a6:7c:b8:c1:a0:94:69:a2:52:06:
da:ef:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:08 2026 by rpki-client