Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/8bTaJMY9KA8sxo8C-PobXPhUnb0.roa
File: 8bTaJMY9KA8sxo8C-PobXPhUnb0.roa (raw, json)
Hash identifier: kBR9btSmRDhhnq1VHoWKPZe1M57zc/8ujhKRSZXQCf0=
Subject key identifier: F1:B4:DA:24:C6:3D:28:0F:2C:C6:8F:02:F8:FA:1B:5C:F8:54:9D:BD
Certificate issuer: /CN=69c466d582ec558e4beaaee650be5007709c589f
Certificate serial: 019F236855EB7470F5583309B82D812D52EF
Authority key identifier: 69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/8bTaJMY9KA8sxo8C-PobXPhUnb0.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49772
IP address blocks: 2a12:e6c0:f001::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:55:eb:74:70:f5:58:33:09:b8:2d:81:2d:52:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c466d582ec558e4beaaee650be5007709c589f
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1b4da24c63d280f2cc68f02f8fa1b5cf8549dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:a8:6d:79:40:d7:3f:3c:39:2c:d4:8c:16:
a3:ee:1b:2b:41:4b:20:1e:eb:5a:bb:2f:11:d9:c7:
b6:eb:33:c8:5d:7d:7a:1a:e0:c3:4f:25:9c:c3:ae:
30:5c:76:d9:15:c1:10:62:72:72:fa:27:7b:3f:0b:
ee:32:94:55:31:06:1e:ee:62:6c:b7:35:d3:13:e8:
fb:78:f2:b2:4d:da:cd:0e:1d:c5:b3:25:4f:b5:a6:
5d:17:6c:7e:21:7b:99:fc:bd:2f:ac:2d:c4:76:c2:
52:c5:43:82:48:8e:56:0f:b9:92:27:66:eb:cb:65:
28:2f:4f:58:3d:9e:fc:b1:89:6a:61:88:ad:6a:63:
52:ce:ad:96:be:68:05:8c:c2:db:03:e2:bc:5c:f5:
07:4f:d3:ad:9d:ec:98:57:85:78:4e:de:74:67:b1:
6a:96:f9:f5:03:93:e9:af:fd:2b:8e:b0:fd:4c:43:
aa:77:e6:aa:e0:5d:57:9e:01:d8:6d:19:cb:f4:92:
94:7b:b8:8b:51:cb:09:51:e3:65:0c:75:98:0e:0d:
29:f2:c7:a2:de:27:2f:32:ae:1d:41:78:00:ae:0f:
8f:92:9c:d0:81:46:01:e7:ba:ca:60:bc:cc:2c:23:
e7:34:9c:82:55:92:34:91:39:d6:7d:e3:c3:3d:14:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B4:DA:24:C6:3D:28:0F:2C:C6:8F:02:F8:FA:1B:5C:F8:54:9D:BD
X509v3 Authority Key Identifier:
keyid:69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/8bTaJMY9KA8sxo8C-PobXPhUnb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e6c0:f001::/48
Signature Algorithm: sha256WithRSAEncryption
82:62:e1:d2:2e:fa:14:55:dd:27:4d:42:28:d6:4a:23:a1:f6:
22:9b:c2:d0:2e:a5:2f:64:d5:1b:14:45:1a:82:eb:08:cc:38:
c4:bd:28:f3:98:57:a2:7d:04:2d:5d:0b:cb:45:4f:f6:94:6b:
d2:23:c9:ae:6e:61:c0:57:b7:a1:45:a0:6d:a6:c2:c8:88:49:
56:22:b1:a7:2d:01:ff:00:b7:32:67:b7:c2:1b:35:0b:a5:5f:
7c:bc:7b:49:57:c2:d8:47:76:44:07:f1:6a:bc:b9:31:8e:cc:
0f:63:3e:3e:d6:f9:33:e6:1a:61:ca:9a:25:14:27:30:fc:72:
32:99:10:79:1a:3e:6e:76:1f:e1:f0:2f:56:95:49:05:34:9c:
d0:ae:f0:17:89:0f:7d:f2:3d:83:12:c6:47:ff:0f:26:b6:76:
2b:dd:41:c1:18:b9:a1:f4:91:48:6d:3c:bf:d3:da:26:cc:1e:
1a:ff:0e:f7:a6:71:02:14:51:6e:07:7e:73:32:66:bd:8b:34:
21:44:2f:65:1e:61:9e:57:00:ee:6a:b4:5d:38:48:6f:86:14:
d2:51:fe:64:76:9d:26:2e:bb:de:4b:22:17:ae:8c:86:3a:07:
64:82:3f:74:08:bb:ed:b5:07:e0:eb:2a:91:18:24:e0:d6:5d:
86:2f:98:9a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaFXrdHD1WDMJuC2BLVLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzQ2NmQ1ODJlYzU1OGU0YmVhYWVlNjUwYmU1MDA3NzA5
YzU4OWYwHhcNMjYwNzAyMTUxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWI0ZGEyNGM2M2QyODBmMmNjNjhmMDJmOGZhMWI1Y2Y4NTQ5ZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOWobXlA1z88OSzUjBaj7hsrQUsg
Hutauy8R2ce26zPIXX16GuDDTyWcw64wXHbZFcEQYnJy+id7PwvuMpRVMQYe7mJs
tzXTE+j7ePKyTdrNDh3FsyVPtaZdF2x+IXuZ/L0vrC3EdsJSxUOCSI5WD7mSJ2br
y2UoL09YPZ78sYlqYYitamNSzq2WvmgFjMLbA+K8XPUHT9OtneyYV4V4Tt50Z7Fq
lvn1A5Ppr/0rjrD9TEOqd+aq4F1XngHYbRnL9JKUe7iLUcsJUeNlDHWYDg0p8sei
3icvMq4dQXgArg+PkpzQgUYB57rKYLzMLCPnNJyCVZI0kTnWfePDPRSYUQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPG02iTGPSgPLMaPAvj6G1z4VJ29MB8GA1UdIwQY
MBaAFGnEZtWC7FWOS+qu5lC+UAdwnFifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt
MWE4MzFiNTk5YzE4LzEvOGJUYUpNWTlLQThzeG84Qy1Qb2JYUGhVbmIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4
LzEvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLmwPAB
MA0GCSqGSIb3DQEBCwUAA4IBAQCCYuHSLvoUVd0nTUIo1kojofYim8LQLqUvZNUb
FEUagusIzDjEvSjzmFeifQQtXQvLRU/2lGvSI8mubmHAV7ehRaBtpsLIiElWIrGn
LQH/ALcyZ7fCGzULpV98vHtJV8LYR3ZEB/FqvLkxjswPYz4+1vkz5hphypolFCcw
/HIymRB5Gj5udh/h8C9WlUkFNJzQrvAXiQ998j2DEsZH/w8mtnYr3UHBGLmh9JFI
bTy/09omzB4a/w73pnECFFFuB35zMma9izQhRC9lHmGeVwDuarRdOEhvhhTSUf5k
dp0mLrveSyIXroyGOgdkgj90CLvttQfg6yqRGCTg1l2GL5ia
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:27 2026 by rpki-client