Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/8cev6T1zaLrh6Jk14ObD9NyakTQ.roa
File: 8cev6T1zaLrh6Jk14ObD9NyakTQ.roa (raw, json)
Hash identifier: to4V+vWxwt5dlu/ctWHIBNuLYFM8RdFNyqXTXudedwM=
Subject key identifier: F1:C7:AF:E9:3D:73:68:BA:E1:E8:99:35:E0:E6:C3:F4:DC:9A:91:34
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 019F6516D794C875E0D99DD22FF213EA08C9
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/8cev6T1zaLrh6Jk14ObD9NyakTQ.roa
Signing time: Wed 15 Jul 2026 09:23:43 +0000
ROA not before: Wed 15 Jul 2026 09:23:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8143
IP address blocks: 2a12:1340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:16:d7:94:c8:75:e0:d9:9d:d2:2f:f2:13:ea:08:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: Jul 15 09:23:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1c7afe93d7368bae1e89935e0e6c3f4dc9a9134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:59:a9:35:65:a5:b8:7d:49:55:43:15:de:
cf:88:be:65:56:2e:c7:35:23:82:94:b6:9d:c6:ab:
5e:f1:a0:0f:58:ee:bc:3b:cb:6f:71:e6:22:29:c3:
1a:fa:02:ec:79:20:b5:2d:33:87:96:9a:8f:21:c9:
4c:7e:ee:af:7a:df:e7:03:99:88:59:06:be:d3:b4:
7e:f0:57:58:f4:f9:fc:db:e2:41:28:3a:28:b0:f6:
71:2e:05:ff:59:56:75:d9:f2:52:6a:bf:bd:d1:9d:
c3:96:00:68:48:e2:3d:e5:bd:2d:0f:88:0e:7f:78:
f3:cd:33:60:2e:32:db:6f:43:b4:29:f5:50:7b:fb:
17:ee:1b:e7:e0:96:e5:d5:ba:5d:6d:9f:39:67:00:
aa:d4:44:6c:80:4a:3e:fe:6b:82:83:b2:25:8f:e6:
28:f8:a3:7a:42:9d:48:33:7b:1c:48:49:04:45:64:
d3:73:ff:4d:ba:f0:e4:94:d5:ae:7f:d1:4e:75:c2:
00:92:75:44:ee:bf:50:5d:e4:34:a6:7c:20:b9:06:
0e:65:d4:70:82:de:d3:59:b4:d7:a0:5a:61:14:06:
a1:03:04:e4:60:09:ba:0c:0c:02:93:23:f8:f5:25:
a9:7b:da:d4:71:ee:0a:df:9c:72:8f:f9:19:f0:d1:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C7:AF:E9:3D:73:68:BA:E1:E8:99:35:E0:E6:C3:F4:DC:9A:91:34
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/8cev6T1zaLrh6Jk14ObD9NyakTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1340::/29
Signature Algorithm: sha256WithRSAEncryption
97:9a:9e:42:12:a4:31:64:fd:29:e1:e2:1b:23:c8:b3:9e:2a:
47:e3:cc:a1:18:f1:80:06:19:93:d5:df:9c:52:04:ae:90:68:
bb:bc:6d:f5:b0:f4:62:33:9e:81:d8:3a:1c:a0:8f:f9:cf:3a:
f5:a6:ca:76:37:7c:fe:ce:a6:fe:dc:8a:81:95:db:c1:b1:1d:
9f:d9:13:3d:b8:4d:47:df:63:91:31:d5:49:df:5e:25:d1:b5:
06:9b:e2:7c:b4:b2:d7:b0:27:cc:75:af:b8:87:c2:9a:7c:f7:
2d:1e:89:d7:ce:55:eb:c6:5b:90:b3:ac:1b:8b:eb:e1:52:3f:
ef:c8:fb:21:67:e6:72:ef:5b:f7:20:bb:c5:06:80:2b:84:53:
23:72:c8:9a:3b:51:68:ba:ca:3c:31:d1:0f:4e:78:4a:b5:87:
d0:9a:f7:10:60:db:b5:62:fc:73:70:98:7f:27:98:15:65:4b:
b9:34:65:79:05:1d:c0:dd:3c:2f:03:81:9b:ca:bc:15:b2:9c:
56:d8:de:fb:ec:a9:ed:79:cc:57:39:1d:06:4e:dd:5b:bb:d5:
06:70:84:94:01:22:12:43:ed:cb:5c:99:ec:fe:aa:39:a3:a9:
41:f5:bd:d4:a3:ef:96:61:a7:df:de:2e:66:d2:d8:fa:ff:61:
1d:a6:27:b1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ9lFteUyHXg2Z3SL/IT6gjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDQxYzcxZmE4Yzc2NGEyZGMyYzBlY2MxODNlNTJkMjNh
N2FlMWYwHhcNMjYwNzE1MDkyMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWM3YWZlOTNkNzM2OGJhZTFlODk5MzVlMGU2YzNmNGRjOWE5MTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcVZqTVlpbh9SVVDFd7PiL5lVi7H
NSOClLadxqte8aAPWO68O8tvceYiKcMa+gLseSC1LTOHlpqPIclMfu6vet/nA5mI
WQa+07R+8FdY9Pn82+JBKDoosPZxLgX/WVZ12fJSar+90Z3DlgBoSOI95b0tD4gO
f3jzzTNgLjLbb0O0KfVQe/sX7hvn4Jbl1bpdbZ85ZwCq1ERsgEo+/muCg7Ilj+Yo
+KN6Qp1IM3scSEkERWTTc/9NuvDklNWuf9FOdcIAknVE7r9QXeQ0pnwguQYOZdRw
gt7TWbTXoFphFAahAwTkYAm6DAwCkyP49SWpe9rUce4K35xyj/kZ8NE6owIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPHHr+k9c2i64eiZNeDmw/TcmpE0MB8GA1UdIwQY
MBaAFMtEHHH6jHZKLcLA7MGD5S0jp64fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBRY2NmcU1ka290d3NEc3dZUGxMU09ucmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82MjBlODQtYzVhMy00OGJiLWEwMTQt
ZWU3MGUxZGQ1YTEwLzEvOGNldjZUMXphTHJoNkprMTRPYkQ5Tnlha1RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82MjBlODQtYzVhMy00OGJiLWEwMTQtZWU3MGUxZGQ1YTEw
LzEveTBRY2NmcU1ka290d3NEc3dZUGxMU09ucmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhITQDAN
BgkqhkiG9w0BAQsFAAOCAQEAl5qeQhKkMWT9KeHiGyPIs54qR+PMoRjxgAYZk9Xf
nFIErpBou7xt9bD0YjOegdg6HKCP+c869abKdjd8/s6m/tyKgZXbwbEdn9kTPbhN
R99jkTHVSd9eJdG1BpvifLSy17AnzHWvuIfCmnz3LR6J185V68ZbkLOsG4vr4VI/
78j7IWfmcu9b9yC7xQaAK4RTI3LImjtRaLrKPDHRD054SrWH0Jr3EGDbtWL8c3CY
fyeYFWVLuTRleQUdwN08LwOBm8q8FbKcVtje++yp7XnMVzkdBk7dW7vVBnCElAEi
EkPty1yZ7P6qOaOpQfW91KPvlmGn394uZtLY+v9hHaYnsQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:29 2026 by rpki-client