Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/8yzRL6UTfoY2UAWRhFfcY21aiw8.roa
File: 8yzRL6UTfoY2UAWRhFfcY21aiw8.roa (raw, json)
Hash identifier: 9a1PcOeE8ZLKSk+KrqFMb26rK/NZVC1SSfxLpvqFg4A=
Subject key identifier: F3:2C:D1:2F:A5:13:7E:86:36:50:05:91:84:57:DC:63:6D:5A:8B:0F
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 019F236839C93F19D5D27098E24129149DA6
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/8yzRL6UTfoY2UAWRhFfcY21aiw8.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210262
IP address blocks: 213.231.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:39:c9:3f:19:d5:d2:70:98:e2:41:29:14:9d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f32cd12fa5137e86365005918457dc636d5a8b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:ce:8b:16:c4:46:4a:a5:a0:70:51:33:62:
da:72:d8:34:a9:06:27:40:5b:0e:14:49:b2:51:bc:
55:83:88:f0:5e:06:35:91:6e:4f:4c:bc:14:a7:b1:
6d:c0:b4:9f:37:91:f7:39:59:26:78:fc:85:a1:4d:
02:24:9b:ce:b1:75:a0:29:ed:d3:11:49:c7:63:79:
cb:f2:bf:76:16:63:45:09:e2:46:47:e3:2b:ad:3c:
83:d3:bd:cb:82:4c:43:92:e9:00:21:fb:08:dd:22:
50:11:ad:69:8a:a0:21:c6:08:2c:b0:f3:8e:b6:6b:
2e:81:cc:83:ee:e4:33:b8:6c:c7:d5:f3:b5:68:10:
e1:df:ef:00:77:58:cc:0f:50:dc:90:e5:d5:3e:33:
95:ac:f1:44:ab:c8:a5:ee:5d:9f:ce:c8:4a:fe:34:
5b:88:38:aa:a0:58:f1:48:ad:51:33:59:64:cb:0a:
60:4f:bc:3e:d1:dd:c9:15:1f:6a:8c:a2:4a:65:93:
bf:89:66:3b:38:17:01:3c:19:b7:56:02:38:f8:e1:
4a:7e:85:00:d6:c5:3b:02:99:3a:f5:0b:2f:4a:74:
d3:dd:81:0d:f1:0c:30:38:08:32:82:13:4d:cf:a1:
2b:d5:69:c7:4e:cf:8a:b3:35:16:7a:fb:18:16:16:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2C:D1:2F:A5:13:7E:86:36:50:05:91:84:57:DC:63:6D:5A:8B:0F
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/8yzRL6UTfoY2UAWRhFfcY21aiw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.231.197.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d5:38:f2:55:f2:18:5e:14:ea:25:e2:2e:69:83:a0:b6:7b:
76:33:8a:e6:a2:a3:22:a1:7a:a2:96:d7:27:6e:4e:88:e7:1e:
ba:9e:a3:fd:08:a4:b0:35:8e:ab:09:5d:a8:19:a5:78:d2:91:
e2:04:32:7d:36:b2:5c:84:4e:15:2c:5d:e2:73:47:ef:a4:8b:
ee:cd:67:76:c7:b1:3e:96:29:50:ed:5c:c2:88:d0:ca:89:f4:
46:08:5c:2c:d9:ba:37:a7:6a:5c:97:2b:2e:53:75:c8:c1:bb:
1c:3d:85:26:80:f7:2e:88:2d:3f:00:c2:9f:5d:41:5d:f4:4b:
99:03:79:59:2d:33:c4:bf:e0:dd:c6:94:cb:65:68:bb:5d:d7:
3c:db:26:20:b1:a4:70:1b:6f:69:93:b1:2e:28:3b:c6:e1:50:
b0:b2:de:b7:82:41:eb:20:ba:44:ea:e0:61:35:41:20:ca:67:
bb:28:19:e9:db:43:02:55:f9:81:64:2e:80:cd:ae:77:3b:42:
98:57:54:ed:e6:21:9e:04:ae:85:eb:21:b8:21:e5:fe:4b:e8:
3f:97:08:ec:e7:6f:48:a7:61:57:03:6c:0d:41:dc:ad:af:97:
34:85:36:e3:d5:6c:91:3c:a9:f8:ff:25:2d:92:d1:95:00:74:
ed:66:6d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:29 2026 by rpki-client