Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/r8wF2OXMB_9Dwl4OqLwAGoqB14E.roa
File: r8wF2OXMB_9Dwl4OqLwAGoqB14E.roa (raw, json)
Hash identifier: hrHAOe2h0QoqTlJJp+6hxC5CoPl4npWeklLV6pbne5o=
Subject key identifier: AF:CC:05:D8:E5:CC:07:FF:43:C2:5E:0E:A8:BC:00:1A:8A:81:D7:81
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C8B0D5AA8C7C9248DA848C6C133D7A10
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/r8wF2OXMB_9Dwl4OqLwAGoqB14E.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a11:d780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d5:aa:8c:7c:92:48:da:84:8c:6c:13:3d:7a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afcc05d8e5cc07ff43c25e0ea8bc001a8a81d781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:e1:8a:53:d5:dc:e8:d6:a4:47:fe:ff:f5:
16:49:92:a0:77:34:ad:b4:a8:1a:cb:5c:bc:49:f9:
0f:96:3f:2d:73:eb:74:5b:f0:21:8f:8f:6c:e7:65:
68:a5:86:f5:a8:e4:0c:b1:15:89:f5:52:bc:41:88:
3a:4f:39:d4:71:e3:5b:e4:a5:9e:6a:fd:5b:de:f3:
49:29:88:07:6e:aa:20:fc:de:c8:56:48:de:35:c6:
0e:50:be:09:3d:35:c2:27:3e:52:03:72:81:0e:f1:
68:c6:6b:d2:89:cf:d1:66:1e:b8:8b:65:bf:d8:76:
6f:e5:a1:64:26:55:69:c3:85:c0:38:40:12:20:20:
1c:54:44:5d:a6:b8:28:97:9a:00:31:c0:16:54:33:
e5:6d:1c:b9:7b:98:ff:a6:e7:10:39:44:25:be:6a:
a3:8d:f9:b2:42:0d:d8:6f:6d:db:df:c4:d6:e9:7b:
6a:be:91:92:1e:85:2e:0c:13:9f:24:30:f0:d9:5f:
6c:09:d6:ae:13:4c:70:03:da:55:f1:f5:93:69:bf:
e5:83:fb:aa:54:35:82:9d:3a:7c:f1:29:7e:85:14:
f0:cd:f5:f4:26:86:93:e1:bd:89:d5:ea:8a:cc:91:
45:0f:f7:95:2a:0a:f3:30:05:66:4f:34:63:26:fc:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CC:05:D8:E5:CC:07:FF:43:C2:5E:0E:A8:BC:00:1A:8A:81:D7:81
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/r8wF2OXMB_9Dwl4OqLwAGoqB14E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d780::/29
Signature Algorithm: sha256WithRSAEncryption
3c:ff:1f:b8:5a:04:6e:31:4e:3a:f7:51:0d:48:8a:8d:4a:46:
db:96:27:cd:78:7c:2e:77:0b:69:52:b8:53:7d:9f:a1:6d:69:
59:12:4b:cd:83:e2:c6:1b:75:38:70:0b:32:c5:2c:2f:12:4b:
3a:9d:e6:e8:88:2f:76:ef:8d:38:aa:b3:8e:e5:38:ed:0d:50:
60:b1:b8:b2:9d:a2:62:26:b7:22:d6:0e:49:bf:d7:c7:4d:06:
92:03:12:d9:ee:bd:86:bb:93:87:38:e6:6b:9a:b8:e4:ab:0a:
ba:dd:0c:d3:38:d2:11:d6:fd:a7:8b:d1:1e:ea:bb:93:05:67:
d8:7d:8d:04:94:5b:6e:60:23:2a:82:8d:b9:6f:e0:30:05:d0:
52:b3:01:05:b2:09:44:5f:0b:0a:78:c4:f8:14:28:5b:6a:ac:
d0:03:01:87:f9:22:a6:0b:4e:2d:60:02:0b:85:ba:ac:35:85:
a9:a7:69:ff:3f:80:96:6a:be:88:20:b2:d1:91:e8:aa:1e:b8:
be:c9:5a:89:04:83:8c:2b:c6:ff:d7:bb:6a:3c:66:ba:61:f0:
52:d0:60:b2:38:ad:47:47:dd:ce:eb:ca:19:82:98:4a:bf:0b:
c9:c5:81:20:28:40:59:6c:4b:b0:26:00:6f:bf:e4:ae:21:bc:
96:71:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:41:17 2026 by rpki-client