Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/8_uN9lxayPNFYSFMe_-SzdqsN_M.roa
File: 8_uN9lxayPNFYSFMe_-SzdqsN_M.roa (raw, json)
Hash identifier: JquMORB08SkqUpDd0r0GoDrQiAxCIucTbEwQ0tt/Va0=
Subject key identifier: F3:FB:8D:F6:5C:5A:C8:F3:45:61:21:4C:7B:FF:92:CD:DA:AC:37:F3
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019F11E5BBA6E799792AE0FBB6B13D6B484F
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/8_uN9lxayPNFYSFMe_-SzdqsN_M.roa
Signing time: Mon 29 Jun 2026 05:41:36 +0000
ROA not before: Mon 29 Jun 2026 05:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1014
IP address blocks: 64.83.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:e5:bb:a6:e7:99:79:2a:e0:fb:b6:b1:3d:6b:48:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jun 29 05:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3fb8df65c5ac8f34561214c7bff92cddaac37f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:5d:8a:58:bf:eb:17:71:2b:a7:99:91:68:
2a:88:2d:f5:3b:13:39:b0:a3:ed:f8:43:5b:58:49:
73:b7:d7:61:93:9f:a1:9a:2c:07:d0:9a:5b:4c:4a:
e4:e7:83:54:1b:38:66:01:ce:0d:d1:5f:67:ba:e1:
4f:9c:08:9d:02:30:d4:65:55:35:1d:a3:2a:3d:0b:
5d:ad:4e:f2:68:4b:a9:f5:8c:11:e4:b1:9e:54:ef:
00:14:5e:41:49:b2:bd:24:ec:b8:ce:7f:73:88:c0:
69:ff:df:79:89:d0:74:96:45:b5:e0:3e:c6:56:01:
b1:d4:3a:86:65:a5:77:57:6f:68:e6:38:7c:63:9c:
c4:0c:0d:dc:2b:ea:51:79:2b:ac:dc:23:7f:20:18:
61:0e:41:bf:e8:3d:bd:be:63:a8:c2:fd:57:50:c6:
58:01:06:a7:a8:8d:e1:cf:df:71:95:47:a7:35:1f:
00:bb:ff:22:0b:50:00:c6:17:ef:b9:09:ff:17:9b:
8f:c5:87:64:4c:96:3d:0a:1b:59:5f:66:28:1f:79:
07:d9:4e:cd:d1:31:41:02:4f:b7:5e:65:fb:7a:91:
47:34:b6:a9:91:b6:4e:5a:bd:e2:c3:00:f4:c4:09:
09:df:a5:c3:2e:76:e5:f2:cd:65:25:9d:fb:97:97:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:8D:F6:5C:5A:C8:F3:45:61:21:4C:7B:FF:92:CD:DA:AC:37:F3
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/8_uN9lxayPNFYSFMe_-SzdqsN_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.83.0.0/18
Signature Algorithm: sha256WithRSAEncryption
07:d9:42:b8:af:be:36:80:91:a1:8f:f6:29:eb:45:81:0f:ae:
3d:48:b9:6a:4f:4d:b1:c2:ad:18:23:4e:d9:ac:03:8f:2e:e6:
c2:c6:70:d5:db:25:28:12:53:b3:16:0f:18:26:5b:a7:84:e1:
f1:80:b9:e6:ac:71:5c:29:ef:f5:08:2e:79:8e:fc:08:5d:e0:
ad:a6:8d:90:39:eb:34:ce:87:3f:30:0d:76:43:3f:4f:e8:0f:
34:33:a3:eb:00:60:4d:08:37:c9:72:de:80:b1:4e:d6:28:b2:
2d:28:cc:19:46:7e:38:db:fd:ef:ca:b7:1c:c2:d9:6a:51:37:
e0:eb:20:5b:7a:b8:f6:da:88:03:e1:6f:0c:4a:69:60:fb:fd:
09:4c:bd:9a:1d:e9:64:62:da:04:c8:6d:01:79:0e:c4:22:31:
d7:e1:46:a2:23:75:61:6e:d5:0b:e8:d3:c2:c2:9a:e4:24:f5:
be:0a:30:fa:e3:2c:b4:44:0c:4a:1b:45:25:3c:79:6f:3a:17:
d4:64:d3:4b:8e:19:37:21:c6:06:e1:a9:6b:7c:b8:9d:0f:23:
7b:d8:ca:10:a5:f2:bd:cc:ea:cc:35:1d:f5:56:34:fd:35:f6:
0a:2c:08:53:67:53:2d:4b:bf:eb:07:8b:77:00:36:2e:73:92:
87:ed:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:38 2026 by rpki-client