Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/8vgTugo7ihb7UgfqZWda25-i0Pc.roa
File: 8vgTugo7ihb7UgfqZWda25-i0Pc.roa (raw, json)
Hash identifier: PmVCQhXXRDOgOfx/jGgYMdCqgeZPuz3gWfYho//C+Dg=
Subject key identifier: F2:F8:13:BA:0A:3B:8A:16:FB:52:07:EA:65:67:5A:DB:9F:A2:D0:F7
Certificate issuer: /CN=fb7c546aa45cac84bc87356077c90353bc4505ea
Certificate serial: 01A0C8977A8A58357FB73DC16EB911263D79
Authority key identifier: FB:7C:54:6A:A4:5C:AC:84:BC:87:35:60:77:C9:03:53:BC:45:05:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/8vgTugo7ihb7UgfqZWda25-i0Pc.roa
Signing time: Tue 22 Sep 2026 10:09:25 +0000
ROA not before: Tue 22 Sep 2026 10:09:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212081
IP address blocks: 193.163.34.0/24 maxlen: 24
2a10:bc80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:97:7a:8a:58:35:7f:b7:3d:c1:6e:b9:11:26:3d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7c546aa45cac84bc87356077c90353bc4505ea
Validity
Not Before: Sep 22 10:09:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2f813ba0a3b8a16fb5207ea65675adb9fa2d0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:7d:af:93:49:cc:84:3b:f3:d7:4f:36:d2:
1b:62:ac:e0:60:34:ff:5c:1e:50:c4:2a:d1:c8:f8:
98:16:3f:28:94:b7:16:c3:90:69:8e:8f:27:50:a0:
24:e5:08:69:9a:af:74:d1:fd:73:1c:09:c0:20:d4:
d0:dc:44:80:6e:3e:e6:cc:13:4c:33:27:e8:06:e5:
c2:d8:86:93:b8:7a:2f:a9:f8:ad:5c:bd:05:43:0e:
d8:79:35:60:d2:4a:4e:d2:6d:a9:f6:19:17:b1:3a:
1d:7c:6f:9b:12:ef:83:5a:27:ab:ac:67:a3:d0:09:
bc:d7:65:2e:df:01:8e:33:94:14:ce:6b:9f:85:0e:
d8:2c:69:8f:c6:eb:25:d7:4f:fb:cb:15:26:e3:eb:
5a:48:c0:95:eb:d8:10:36:28:dd:12:35:29:1c:44:
a5:57:3c:da:36:a7:41:35:43:db:ca:f7:ee:77:0c:
aa:53:a4:8d:d3:a9:5e:60:28:a3:b1:c2:fd:8b:2e:
07:38:a6:55:86:86:f3:5f:fb:55:38:e3:cd:1d:2c:
ea:40:ee:8c:1d:8f:08:a3:37:ad:18:9e:af:18:02:
bd:8c:ef:39:87:ec:e8:cb:f5:28:80:70:74:10:8c:
53:ae:5a:95:10:c9:a0:57:42:89:e7:1c:74:b1:30:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:13:BA:0A:3B:8A:16:FB:52:07:EA:65:67:5A:DB:9F:A2:D0:F7
X509v3 Authority Key Identifier:
keyid:FB:7C:54:6A:A4:5C:AC:84:BC:87:35:60:77:C9:03:53:BC:45:05:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/8vgTugo7ihb7UgfqZWda25-i0Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.34.0/24
IPv6:
2a10:bc80::/29
Signature Algorithm: sha256WithRSAEncryption
44:55:fa:76:49:79:62:6d:d2:17:87:37:9a:7d:f6:39:3f:09:
5c:2c:32:d3:81:fa:e7:2a:16:a9:e7:d6:70:83:2b:f4:0b:20:
1e:bd:c1:e2:24:e9:11:fa:12:b6:26:d6:4e:e4:ab:68:c5:29:
72:fd:95:f0:d4:58:9d:49:1a:c7:af:e1:6e:1f:87:86:a1:f9:
0c:e7:d8:0c:c7:d8:51:f0:3a:63:f9:4c:c4:9d:bc:9b:c4:14:
d6:7f:ab:8b:47:bb:ba:ea:06:f7:4b:c5:93:91:62:f1:e2:e2:
a1:81:43:18:7b:5a:f5:65:a5:71:f5:2d:d0:9d:13:68:f1:2f:
47:b6:54:0d:9a:60:1b:58:de:b3:fa:4c:28:cd:97:0b:7f:67:
dc:69:ed:52:5e:10:a3:9d:2c:34:ac:63:22:61:30:d6:f5:81:
5d:ee:f1:4a:16:86:0c:ba:1b:25:7e:d3:86:41:de:85:6d:57:
65:20:58:a3:f0:a4:92:f4:72:a5:bc:43:16:cf:46:ea:22:63:
e4:08:5b:65:15:36:dd:81:a6:d1:89:a8:ad:bd:ea:1d:e4:86:
0b:d0:5c:00:aa:6d:c8:78:3a:d1:2e:b8:af:b9:98:66:ab:59:
d4:45:a4:37:c5:af:c2:45:7d:41:29:8f:84:10:75:25:ca:8d:
48:17:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:28:40 2026 by rpki-client