Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/1-8NbCoWGL2RGLtrzFx5dvyYdViM.roa
File: 1-8NbCoWGL2RGLtrzFx5dvyYdViM.roa (raw, json)
Hash identifier: +8X4viP4tBSyquY8znXf6UEmn4jZ8QbXgaaFStEun3c=
Subject key identifier: FB:C3:5B:0A:85:86:2F:64:46:2E:DA:F3:17:1E:5D:BF:26:1D:56:23
Certificate issuer: /CN=4e815c92fc1c6425aacbcc451596c73ed6457007
Certificate serial: 019B76EABBDEB1328249FC6FA20CDBC26221
Authority key identifier: 4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/1-8NbCoWGL2RGLtrzFx5dvyYdViM.roa
Signing time: Thu 01 Jan 2026 00:17:33 +0000
ROA not before: Thu 01 Jan 2026 00:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210436
IP address blocks: 2001:67c:152c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:bb:de:b1:32:82:49:fc:6f:a2:0c:db:c2:62:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e815c92fc1c6425aacbcc451596c73ed6457007
Validity
Not Before: Jan 1 00:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbc35b0a85862f64462edaf3171e5dbf261d5623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:3c:74:37:0a:ea:8d:d9:ca:bc:97:b9:f7:
9c:4b:9b:99:fe:18:a4:38:43:0d:8c:29:0d:06:a9:
3e:ec:ab:77:7b:f3:be:aa:d0:4c:70:c5:93:fd:15:
f8:be:1c:df:f1:5e:d6:07:d1:38:c4:61:4f:30:0e:
51:85:2d:f6:3b:9d:68:7b:b6:cc:a4:98:8b:24:33:
1c:55:a6:66:f4:b7:70:d2:88:59:ec:e3:ef:d4:84:
47:f3:3a:e4:a7:d2:1a:02:db:b0:c1:2b:c4:12:73:
2e:dc:3c:0b:eb:51:00:9e:b9:08:38:4c:8c:1a:c0:
7b:4a:34:21:a4:65:51:3c:6f:65:79:91:b5:7b:f2:
56:7f:f7:dd:ad:9c:a7:56:3b:a2:af:56:92:30:60:
44:9f:fa:23:15:0b:a7:21:7a:ea:96:5e:bc:fe:a3:
73:8a:0d:62:e9:b5:eb:f5:35:f0:43:07:5e:05:90:
3c:0f:00:e0:04:ca:6c:76:56:57:6c:ee:b4:70:20:
b2:cd:f7:33:2a:c6:6c:99:03:21:08:62:bc:9e:49:
8d:41:72:7b:fc:58:e2:d6:53:71:4b:34:6c:7c:f3:
18:7f:ca:fb:d4:47:4c:74:fe:ad:7a:32:7d:4d:23:
e6:3a:9c:f4:25:5c:3a:da:b3:38:c6:38:51:cd:04:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:5B:0A:85:86:2F:64:46:2E:DA:F3:17:1E:5D:BF:26:1D:56:23
X509v3 Authority Key Identifier:
keyid:4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/1-8NbCoWGL2RGLtrzFx5dvyYdViM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:152c::/48
Signature Algorithm: sha256WithRSAEncryption
b7:b6:c2:cb:2b:17:99:21:7a:12:55:88:a1:9e:64:0d:99:76:
36:1f:4d:e6:0e:68:5a:be:6f:15:ee:fa:c7:25:08:80:42:88:
1b:78:b1:0c:7f:2a:fe:b6:66:9f:1c:d2:91:33:c3:78:62:93:
f4:2a:ca:ea:7d:b2:ff:fb:85:76:10:c5:c4:ac:2b:9a:85:c7:
5c:f7:09:a1:67:d3:1c:ec:d7:2e:75:2d:46:43:8f:c5:54:37:
1f:1e:7d:c7:32:a2:91:a4:86:d5:2d:82:81:0e:10:6c:90:ae:
a3:dc:81:36:79:f2:4c:0f:08:8f:b7:41:fe:2e:7a:94:13:e8:
39:aa:c0:6e:45:73:50:59:0f:1d:20:ce:dd:13:10:0e:f3:af:
4a:0b:b1:92:99:e5:1d:8c:75:83:13:a5:76:fe:0e:8d:aa:07:
74:2e:d4:47:94:53:43:73:27:e2:b5:a5:a0:91:ea:d9:68:d3:
67:a4:b4:22:82:4c:5b:23:c4:85:85:aa:f4:61:8e:b5:27:53:
50:02:9e:4b:c6:b1:93:db:13:95:4e:9b:91:34:1b:b2:2e:17:
4c:56:f1:7f:d7:6b:dd:e2:00:64:2e:48:e2:8e:01:14:c5:40:
80:79:7e:6f:10:c9:cb:d0:6e:ae:6a:28:17:15:ca:10:da:f1:
ab:ce:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:40:21 2026 by rpki-client