Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/8vxK53_z8HYklhUFWyAkpktEuw0.roa
File: 8vxK53_z8HYklhUFWyAkpktEuw0.roa (raw, json)
Hash identifier: fteTV33OleXot1hOEaY8Dm7beVaXBAoxCGUbPRMoK00=
Subject key identifier: F2:FC:4A:E7:7F:F3:F0:76:24:96:15:05:5B:20:24:A6:4B:44:BB:0D
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0CCAE8FD767618AD971234E883C961A46
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/8vxK53_z8HYklhUFWyAkpktEuw0.roa
Signing time: Wed 23 Sep 2026 05:13:07 +0000
ROA not before: Wed 23 Sep 2026 05:13:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201176
IP address blocks: 195.252.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:ae:8f:d7:67:61:8a:d9:71:23:4e:88:3c:96:1a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 23 05:13:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2fc4ae77ff3f076249615055b2024a64b44bb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:3f:2d:76:fa:47:f9:34:38:37:ee:c0:f4:
7b:27:ac:fb:5c:d3:61:ed:9f:9b:e3:d6:4f:aa:b7:
9e:b5:01:a4:11:d5:1e:97:ed:db:a7:de:07:1e:98:
14:da:70:a2:f8:5d:64:13:de:64:4d:c5:23:59:19:
2e:63:8c:23:b2:0d:79:83:98:ec:c0:7e:68:94:c1:
af:09:90:f0:cc:9c:28:63:a4:fd:a4:cf:a2:dc:65:
05:ed:cc:db:ab:b4:ac:6a:60:46:ad:53:78:1f:ac:
c1:a1:7b:f3:9c:a6:36:a6:19:61:22:d0:17:84:b2:
f9:d2:e8:bf:f4:a0:c3:df:3a:0c:e2:3c:50:28:62:
54:0c:23:13:72:24:a8:9d:41:e3:59:72:86:ba:35:
ca:12:2a:21:7d:f1:30:10:84:f0:a9:77:81:b2:8e:
e0:b5:96:ae:40:3c:aa:ef:44:a5:45:63:6c:74:e3:
a3:c7:c5:a9:f9:7d:b1:b3:6d:f4:f4:82:b0:82:5b:
31:8d:55:33:d2:0b:d2:30:75:99:b9:d8:d3:6c:86:
d2:ca:61:bc:cd:d5:06:c2:bb:a8:ee:dd:50:48:29:
10:8b:b3:87:c1:86:83:b6:69:38:76:39:05:25:fc:
d4:35:cc:99:d7:d4:3a:95:31:8a:3f:7d:10:6e:b7:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FC:4A:E7:7F:F3:F0:76:24:96:15:05:5B:20:24:A6:4B:44:BB:0D
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/8vxK53_z8HYklhUFWyAkpktEuw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a5:9d:bd:08:23:02:d9:24:69:d0:52:ad:4b:34:71:36:e5:
1e:a1:03:b6:97:fd:78:0e:e9:ba:7b:b8:0b:fe:10:b1:9d:bb:
46:d3:bd:a4:47:8e:f8:a6:44:e2:6c:0e:cf:77:80:b1:47:40:
dc:e5:86:01:26:e5:7d:87:10:a2:01:97:61:b4:8a:05:38:97:
da:f8:c4:70:28:fe:d9:23:9f:a6:cc:3f:37:42:3d:04:cc:60:
3b:37:f7:17:5b:9d:ef:da:63:7e:93:5a:b7:3d:63:dc:f3:85:
24:2f:fa:75:04:84:3b:be:c1:6a:8c:ac:c1:07:60:4f:fd:c0:
58:b2:1a:9f:b6:07:bf:24:aa:11:43:66:ce:f6:41:0c:8f:97:
5f:f7:12:ed:7a:60:3b:e1:4d:6d:f1:1a:db:75:21:3f:12:9b:
a9:8c:f7:0e:95:82:97:2e:c2:45:63:51:6b:04:9a:17:6a:9a:
b0:47:da:0c:58:67:b9:be:35:05:fe:86:77:f0:49:9a:98:6c:
c7:37:bb:eb:e2:b8:e2:ca:8c:fb:29:27:7e:98:46:c9:cd:58:
d9:47:aa:c9:22:b6:61:37:29:2f:9d:cf:e3:2b:79:0f:7c:65:
66:df:f5:81:16:a6:0f:5e:c7:d0:49:5d:54:26:62:bd:a2:5d:
89:dd:83:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:46 2026 by rpki-client