Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/TT8-biGj6CFuxERFdHhLIBjNePs.roa
File: TT8-biGj6CFuxERFdHhLIBjNePs.roa (raw, json)
Hash identifier: FQ8jfBT4/96D/e5hkPSQmC2cdfeej56HOqwfNbEnQl8=
Subject key identifier: 4D:3F:3E:6E:21:A3:E8:21:6E:C4:44:45:74:78:4B:20:18:CD:78:FB
Certificate issuer: /CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Certificate serial: 01A0451F39E71C8D55F8FCEF6D7F5F55AE2F
Authority key identifier: A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/TT8-biGj6CFuxERFdHhLIBjNePs.roa
Signing time: Thu 27 Aug 2026 21:27:49 +0000
ROA not before: Thu 27 Aug 2026 21:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139057
IP address blocks: 2a0c:3440:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:1f:39:e7:1c:8d:55:f8:fc:ef:6d:7f:5f:55:ae:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Validity
Not Before: Aug 27 21:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d3f3e6e21a3e8216ec4444574784b2018cd78fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:3d:a4:06:b0:fc:dd:45:32:d7:68:ba:61:
24:f9:20:71:dc:fa:b8:77:09:51:ef:4a:fe:e7:65:
9a:93:38:d1:d4:95:8e:08:74:72:11:08:3e:56:c9:
25:60:de:96:2c:4d:6b:45:cd:c3:aa:c9:9f:ad:54:
c1:23:c1:25:38:be:0f:9e:66:0e:f2:cb:8e:96:5e:
e6:5a:26:62:d9:f0:60:81:33:0d:45:d4:55:f4:d4:
3f:22:13:78:4a:b7:aa:ad:9b:00:29:84:f6:f1:ac:
d9:36:2e:7f:5b:86:40:fb:9b:85:5f:9c:d2:05:0e:
83:88:3a:2a:ee:1f:26:c8:8e:2b:be:fd:75:60:55:
34:e6:e0:8a:fc:35:61:d9:11:6c:9a:68:15:0a:08:
b7:82:6d:19:1b:03:33:8e:fc:22:7f:0e:cd:f3:67:
5d:3b:71:51:c1:c5:7d:0b:4f:99:d5:d6:60:89:51:
34:08:50:e3:a9:05:2a:f4:dc:4a:46:95:b5:32:8e:
5c:1e:cb:b9:fc:87:82:2b:01:91:29:d4:bd:ea:6c:
34:06:de:cf:09:31:34:77:ba:87:78:c9:ef:72:c0:
d9:ba:71:c1:c2:05:55:75:55:5b:01:d1:d0:4d:82:
dc:b1:44:03:c0:e4:b1:65:59:5f:8f:c7:69:90:20:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:3E:6E:21:A3:E8:21:6E:C4:44:45:74:78:4B:20:18:CD:78:FB
X509v3 Authority Key Identifier:
keyid:A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/TT8-biGj6CFuxERFdHhLIBjNePs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3440:a::/48
Signature Algorithm: sha256WithRSAEncryption
19:a5:b5:97:9d:89:cf:c5:76:72:c4:a1:9a:8d:35:22:67:6c:
22:76:77:76:4d:33:e2:e6:a1:ec:8d:24:c9:2d:e1:92:c9:f7:
96:f2:21:82:0d:10:1d:be:43:80:18:0f:c3:e6:57:0b:11:31:
5b:70:9e:91:a4:63:7b:db:5c:b0:fc:d9:b4:a9:9a:74:19:c0:
c3:59:93:be:a3:08:53:7a:94:59:c4:d1:6a:38:e0:a2:52:b7:
25:99:a3:31:e8:5d:b7:8d:4e:95:64:ca:6d:ef:67:dd:8e:5b:
47:38:61:e1:6d:0a:98:e1:17:84:08:94:f9:1c:fe:c2:4c:5a:
a8:11:cd:8f:21:5d:0d:8e:16:1d:bd:93:f9:10:b6:79:bf:c9:
09:12:8f:75:73:24:68:8e:59:d0:f2:ad:87:7f:0d:6d:79:4f:
46:94:c4:1a:bd:c5:07:2f:4d:77:bd:a5:2b:17:78:31:2b:19:
31:11:d6:e0:4b:9b:0d:3e:e8:02:12:93:ec:54:37:2b:24:24:
0f:95:e9:0c:b7:94:d4:52:c4:0c:ed:1f:09:ab:62:3e:e0:cd:
3e:c8:9f:51:b3:68:a4:a9:af:0a:44:fc:62:5e:08:e1:54:48:
f8:ae:7d:89:51:b0:cd:7e:af:be:7c:a3:71:3d:83:d1:f8:b5:
6c:84:97:45
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBFHznnHI1V+PzvbX9fVa4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMGQ2OTFhYjE5Y2RjZjI4YTk4OTZjYmY1YTdhMGFmNGI5
NjFlOTgwHhcNMjYwODI3MjEyNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDNmM2U2ZTIxYTNlODIxNmVjNDQ0NDU3NDc4NGIyMDE4Y2Q3OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPQ9pAaw/N1FMtdoumEk+SBx3Pq4
dwlR70r+52WakzjR1JWOCHRyEQg+VsklYN6WLE1rRc3DqsmfrVTBI8ElOL4PnmYO
8suOll7mWiZi2fBggTMNRdRV9NQ/IhN4SreqrZsAKYT28azZNi5/W4ZA+5uFX5zS
BQ6DiDoq7h8myI4rvv11YFU05uCK/DVh2RFsmmgVCgi3gm0ZGwMzjvwifw7N82dd
O3FRwcV9C0+Z1dZgiVE0CFDjqQUq9NxKRpW1Mo5cHsu5/IeCKwGRKdS96mw0Bt7P
CTE0d7qHeMnvcsDZunHBwgVVdVVbAdHQTYLcsUQDwOSxZVlfj8dpkCAbNQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFE0/Pm4ho+ghbsRERXR4SyAYzXj7MB8GA1UdIwQY
MBaAFKINaRqxnNzyipiWy/WnoK9Llh6YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2cxcEdyR2MzUEtLbUpiTDlhZWdyMHVXSHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUt
MTJlODI3NmZkYWM0LzEvVFQ4LWJpR2o2Q0Z1eEVSRmRIaExJQmpOZVBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUtMTJlODI3NmZkYWM0
LzEvb2cxcEdyR2MzUEtLbUpiTDlhZWdyMHVXSHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgw0QAAK
MA0GCSqGSIb3DQEBCwUAA4IBAQAZpbWXnYnPxXZyxKGajTUiZ2widnd2TTPi5qHs
jSTJLeGSyfeW8iGCDRAdvkOAGA/D5lcLETFbcJ6RpGN721yw/Nm0qZp0GcDDWZO+
owhTepRZxNFqOOCiUrclmaMx6F23jU6VZMpt72fdjltHOGHhbQqY4ReECJT5HP7C
TFqoEc2PIV0NjhYdvZP5ELZ5v8kJEo91cyRojlnQ8q2Hfw1teU9GlMQavcUHL013
vaUrF3gxKxkxEdbgS5sNPugCEpPsVDcrJCQPlekMt5TUUsQM7R8Jq2I+4M0+yJ9R
s2ikqa8KRPxiXgjhVEj4rn2JUbDNfq++fKNxPYPR+LVshJdF
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:48:55 2026 by rpki-client