Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/k8BbPKe3zDaEG8erTcVGfXUzWz4.roa
File: k8BbPKe3zDaEG8erTcVGfXUzWz4.roa (raw, json)
Hash identifier: FGXIVoVE914VJSU7fecgdSgEJFlK859BoDPJSA3aMsg=
Subject key identifier: 93:C0:5B:3C:A7:B7:CC:36:84:1B:C7:AB:4D:C5:46:7D:75:33:5B:3E
Certificate issuer: /CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Certificate serial: 019F23688A1CCB194F6EF4E2B27D2A8714CD
Authority key identifier: 34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/k8BbPKe3zDaEG8erTcVGfXUzWz4.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 146.227.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8a:1c:cb:19:4f:6e:f4:e2:b2:7d:2a:87:14:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93c05b3ca7b7cc36841bc7ab4dc5467d75335b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:ff:fd:bb:dc:b4:f7:eb:4c:07:2e:c4:99:
16:ef:b3:5b:3c:a5:35:07:20:78:2e:29:a5:4f:14:
f7:c9:3c:31:ef:bb:c9:b9:8a:7a:a3:12:ce:94:f5:
b4:ae:54:95:49:dc:cb:81:ce:a6:97:92:f1:d0:eb:
a2:1c:c1:8a:c5:29:cc:d0:bd:8a:ae:cf:7f:ba:21:
dc:2f:ce:54:9a:12:0f:a2:fd:75:ff:aa:7c:fd:2e:
03:78:d7:13:5a:60:b6:6e:d2:3e:b0:2a:c4:89:d0:
9f:23:f0:5f:1f:b4:4c:24:d8:0e:d6:a8:15:fb:a6:
c2:a6:13:79:07:5c:e2:87:e4:ba:ac:91:d8:ea:ac:
59:c7:46:27:92:76:6f:cd:9a:f3:7a:01:c2:09:ba:
b5:e4:0e:38:bd:7e:be:f1:7e:95:16:f9:5f:5c:70:
70:c6:9d:52:b1:43:41:c9:bc:6d:07:80:be:99:dd:
df:8b:5d:6f:21:6f:26:23:9a:35:48:16:b5:a8:42:
73:9e:4f:57:4f:89:a9:ee:48:97:26:46:53:d0:2f:
16:e4:e9:a2:2f:08:26:61:57:f5:34:86:e2:5e:95:
ad:e0:a0:e1:80:4b:ca:05:1b:e7:bd:11:99:ac:1e:
27:97:09:e6:99:47:c1:49:f5:2c:b9:dc:58:fd:33:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C0:5B:3C:A7:B7:CC:36:84:1B:C7:AB:4D:C5:46:7D:75:33:5B:3E
X509v3 Authority Key Identifier:
keyid:34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/k8BbPKe3zDaEG8erTcVGfXUzWz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.227.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:36:c2:10:d5:bc:0b:f5:39:e2:71:c5:81:6d:88:02:5b:72:
11:3f:be:55:b9:8a:3e:ed:dd:e6:a3:df:4e:f6:d2:c5:f2:9d:
b4:03:49:42:4a:b5:80:94:09:13:9a:53:f2:61:8f:dd:40:17:
c6:33:07:4d:d3:7c:63:ba:b7:cb:a6:91:f5:3f:f3:a0:9e:1c:
1e:0a:bf:d2:84:22:94:9a:73:cc:88:59:1b:88:5a:8c:4b:d1:
cc:ac:fd:b1:35:8e:10:d5:b7:6f:36:80:2f:70:40:db:a5:36:
d6:90:77:67:50:e7:07:6e:1a:41:ef:54:79:c9:d5:8e:4d:a6:
9d:f0:8e:58:17:05:8d:42:10:f7:f2:f3:4a:6d:e3:57:5e:f1:
5e:7a:35:c1:5a:fb:d4:94:c7:fc:53:38:b7:24:bd:66:2a:cf:
2b:12:c0:7b:32:42:b5:db:e1:6a:f3:b7:4b:87:d7:b8:79:46:
4d:33:43:3e:e4:c3:82:f8:32:4f:71:53:64:1c:34:8a:6b:50:
6d:f4:63:35:9d:01:ba:6f:2d:58:31:cf:7f:01:d8:35:0f:71:
39:ac:20:c4:95:77:3b:14:91:64:ee:28:9c:36:30:7f:47:6f:
4c:b9:46:45:ce:55:46:8b:d6:8b:9a:fd:fb:dc:c9:c6:63:f1:
70:dd:97:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:55 2026 by rpki-client