Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/T8nmRcwL31CW9Xx2v6VBjAM3wHs.roa
File: T8nmRcwL31CW9Xx2v6VBjAM3wHs.roa (raw, json)
Hash identifier: 7sFmq39gZSixNOcn4t7KUsQQ3zZZ8MvVLjGB/O/rItE=
Subject key identifier: 4F:C9:E6:45:CC:0B:DF:50:96:F5:7C:76:BF:A5:41:8C:03:37:C0:7B
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 01A142F11923B58FE1906C1E7918A43943C4
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/T8nmRcwL31CW9Xx2v6VBjAM3wHs.roa
Signing time: Fri 16 Oct 2026 04:20:59 +0000
ROA not before: Fri 16 Oct 2026 04:20:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218764
IP address blocks: 2a13:7c00:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:f1:19:23:b5:8f:e1:90:6c:1e:79:18:a4:39:43:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Oct 16 04:20:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fc9e645cc0bdf5096f57c76bfa5418c0337c07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:e8:00:8d:d7:56:34:6c:5c:c4:da:ba:ab:
52:b7:e9:7d:21:95:66:3c:28:a2:e7:a8:2d:14:c2:
5e:2d:0e:60:42:aa:25:c0:6d:aa:58:4c:06:e8:b6:
bb:c9:13:a8:ff:c8:53:f6:ad:1c:7d:33:6e:e0:ed:
4a:5a:62:cf:5a:cd:d5:17:fa:5e:cb:42:3a:fc:2e:
a7:33:b4:17:41:11:31:ff:07:c0:a0:89:79:d7:55:
07:49:52:c3:2a:00:78:ae:ac:6f:c5:eb:f0:e9:73:
38:2f:22:18:0f:55:86:ea:cf:b1:d8:8f:a1:c6:c9:
68:8c:a0:f2:f6:d7:95:86:f3:57:a1:ea:ba:dc:24:
f4:48:f5:fb:67:07:17:06:71:2a:8e:60:ea:82:37:
ce:ca:8c:13:02:84:08:a3:47:7c:3e:b3:76:19:ab:
d1:6c:db:55:f1:42:ce:73:e6:10:7e:b7:42:1d:ed:
48:d2:ec:20:fb:68:a0:5d:27:d3:4a:47:75:b7:d7:
0f:b7:2c:94:c4:3c:f5:18:27:8d:1f:22:7f:d5:f6:
3c:21:a3:3e:f2:9a:cb:bf:1a:e2:30:30:d5:54:c0:
9e:65:c8:63:21:47:7c:1e:cc:ab:44:c8:61:82:c2:
ef:09:72:b1:3e:e8:b4:45:6d:a7:60:57:a1:9a:9c:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C9:E6:45:CC:0B:DF:50:96:F5:7C:76:BF:A5:41:8C:03:37:C0:7B
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/T8nmRcwL31CW9Xx2v6VBjAM3wHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7c00:9::/48
Signature Algorithm: sha256WithRSAEncryption
46:92:b3:7a:55:4b:14:d3:dc:03:f6:54:35:04:d2:6d:24:54:
a9:58:90:bc:1e:06:33:60:37:2b:54:ab:b8:de:76:fb:e5:48:
4d:de:69:75:ac:ad:72:9f:b6:a7:d5:d8:4e:05:db:22:8a:34:
11:8d:06:8f:cf:d4:e8:eb:cf:d9:ca:8d:4b:cd:36:4f:3a:ee:
94:4b:ba:59:0a:e5:7b:a3:a8:d3:4f:b0:90:f5:4e:67:46:f8:
30:2e:50:c9:58:af:e9:4c:0d:99:bc:bf:95:76:b3:ec:5f:44:
e6:9b:16:1c:c9:c1:dc:70:e7:44:c7:af:8c:80:3c:42:31:38:
a1:6c:13:01:7b:39:c5:ad:79:2f:b7:74:d3:1e:28:29:cb:72:
0c:8a:6e:f1:a1:e6:8e:94:02:be:5d:b2:b6:12:1f:77:58:72:
7f:9a:ac:68:82:6d:03:8a:90:4e:aa:87:b0:0c:d7:99:6a:ef:
94:d5:a4:75:00:af:3d:5c:c6:90:ab:0e:ab:e7:41:c3:c4:49:
69:99:47:06:e7:e7:c3:28:87:b6:7e:75:aa:4f:4e:50:0b:ba:
ee:f5:f4:67:b2:40:41:aa:71:94:62:04:57:28:4d:b9:bb:2a:
91:61:3a:40:6b:4c:30:72:2d:80:97:f9:cd:23:ef:79:7f:a4:
72:49:d7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:40:27 2026 by rpki-client