Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/h8XDp3DDphz-qzuGmGW4Nyqxx5w.roa
File: h8XDp3DDphz-qzuGmGW4Nyqxx5w.roa (raw, json)
Hash identifier: befsJFXVxRWhhVswwqWlhSMWy+Fjjq0lJLvYTlqPXpg=
Subject key identifier: 87:C5:C3:A7:70:C3:A6:1C:FE:AB:3B:86:98:65:B8:37:2A:B1:C7:9C
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C8B0D9D6D487FB9272E02B7B6FA78DBF
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/h8XDp3DDphz-qzuGmGW4Nyqxx5w.roa
Signing time: Tue 22 Sep 2026 10:37:08 +0000
ROA not before: Tue 22 Sep 2026 10:37:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a12:980::/29 maxlen: 29
2a12:6080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d9:d6:d4:87:fb:92:72:e0:2b:7b:6f:a7:8d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 10:37:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87c5c3a770c3a61cfeab3b869865b8372ab1c79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:f0:2f:af:8b:35:4c:5b:4e:66:96:2f:0f:
cd:1c:71:37:85:f7:f1:fc:2e:3c:96:54:a9:2d:7e:
94:c2:7e:a3:57:e5:1b:06:1d:94:8d:3c:e8:f3:c5:
71:ca:91:72:ec:b6:6b:c4:cc:88:26:77:84:a6:7d:
29:9a:94:a7:66:e4:13:ff:7a:8d:8c:1b:0b:5a:ff:
38:1c:7e:90:63:7a:65:20:46:ed:f3:9e:45:34:5e:
ae:d3:ed:6c:3f:1a:8b:96:e3:f1:02:13:25:7c:45:
20:f3:ff:32:39:0f:de:4f:28:04:d7:67:e4:10:5a:
88:4b:7a:ce:6c:ff:dc:1f:23:d9:0d:0a:11:5c:67:
a9:43:30:44:df:ad:b0:58:7a:07:35:92:68:8b:65:
be:c7:df:59:ac:a8:0f:ad:79:69:c4:c5:7c:e1:00:
c5:8c:0b:13:de:48:cf:76:fd:5d:2c:e5:ba:a7:f2:
1f:40:6f:86:d4:92:6f:cb:7c:cf:cf:ca:9d:49:c2:
b1:ae:4a:b5:c4:dd:8f:16:7d:12:55:98:d3:d2:a5:
c2:3c:c7:8d:dc:5e:b4:24:24:49:da:96:5e:f9:27:
20:1f:a5:20:12:bc:c1:c0:67:c6:e7:ac:ad:68:ac:
df:a8:4e:2d:ec:ba:0f:f1:11:6d:80:8d:57:37:7d:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C5:C3:A7:70:C3:A6:1C:FE:AB:3B:86:98:65:B8:37:2A:B1:C7:9C
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/h8XDp3DDphz-qzuGmGW4Nyqxx5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:980::/29
2a12:6080::/29
Signature Algorithm: sha256WithRSAEncryption
99:05:73:4a:96:4b:6f:12:dd:6d:48:a8:53:b6:0e:a8:56:45:
49:2c:72:65:5c:8b:9e:d5:63:9d:5b:51:95:30:37:fb:3b:e8:
db:2d:c8:6f:90:58:06:9f:ef:4e:dc:bf:14:9a:a5:12:f5:f1:
39:45:87:26:7f:05:f4:b6:d2:3e:09:5f:8d:8c:8b:45:c5:0d:
e4:5a:12:5f:27:84:48:63:a7:3c:1d:e0:c2:1d:b3:34:81:07:
55:64:2c:49:5e:cd:c0:0f:e5:68:24:63:96:73:f4:ab:be:27:
50:20:01:72:6c:e3:c0:c4:42:ba:90:60:00:83:16:16:74:3c:
10:27:97:bb:d3:f3:da:ad:47:d3:c2:aa:97:80:12:20:cb:24:
ff:87:77:41:66:b6:cc:69:86:8c:96:c3:80:ee:7a:be:54:4a:
39:34:92:22:4d:c1:6e:9c:13:2c:81:90:91:2a:fa:4b:e5:1d:
8e:1f:66:4b:06:2b:d0:3b:5c:91:15:7e:91:85:3f:cf:0d:86:
5d:9f:4b:03:92:10:44:60:98:2e:71:c1:91:1e:c0:d7:38:f0:
26:ab:44:fb:04:d5:a6:e2:19:64:6b:16:dc:37:35:9b:46:38:
95:42:8c:4c:88:c9:82:ae:e1:3a:34:b2:44:5d:6e:87:49:a5:
b1:15:e1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:29:42 2026 by rpki-client