Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/8LCvciV0dDAhQOEozE7Am-gnjB8.roa
File: 8LCvciV0dDAhQOEozE7Am-gnjB8.roa (raw, json)
Hash identifier: eJuQNp8jRHtcAQjHb4N06GUqIPqiE+OvCRt23QibbN8=
Subject key identifier: F0:B0:AF:72:25:74:74:30:21:40:E1:28:CC:4E:C0:9B:E8:27:8C:1F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F47260DF6D8514669A004AFE15A7940E8
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/8LCvciV0dDAhQOEozE7Am-gnjB8.roa
Signing time: Thu 09 Jul 2026 13:51:44 +0000
ROA not before: Thu 09 Jul 2026 13:51:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 87.229.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:26:0d:f6:d8:51:46:69:a0:04:af:e1:5a:79:40:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 9 13:51:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0b0af72257474302140e128cc4ec09be8278c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:d1:60:18:d9:43:70:0b:69:1d:e5:9c:98:
96:a0:6c:bf:c9:f5:f0:0e:5d:7e:f3:3f:df:74:fe:
c1:bc:3e:c3:4a:25:08:0c:2d:de:13:9f:47:c6:82:
15:2c:73:3a:88:e3:8e:bf:fd:c4:ff:eb:46:3f:6d:
6d:de:c6:44:8a:37:6a:dd:50:6c:a7:27:1c:e8:57:
e8:3d:c5:96:d5:5f:ed:2c:3d:04:2d:7e:5e:45:7b:
59:94:dd:1e:e3:aa:24:71:36:88:91:6b:7e:63:da:
f3:36:3b:17:be:db:aa:3e:bf:2e:50:15:d7:6c:0e:
aa:2d:84:65:fd:88:b7:ca:fa:09:a5:a9:e0:48:fe:
37:aa:f6:15:5e:f2:f7:7f:12:d6:d8:e6:57:38:ad:
49:ad:7c:95:91:5f:04:5b:58:6f:b8:38:fe:60:1d:
1b:31:b7:64:15:a0:00:ee:1c:af:37:97:26:77:87:
03:8b:1e:84:02:50:1d:ed:c0:66:3b:e7:ef:65:ed:
0f:44:d3:71:99:48:7e:51:aa:ca:17:39:23:2a:76:
04:bb:45:7a:fa:35:0b:bf:a5:c6:02:91:49:df:04:
ea:f6:75:34:3d:91:09:d7:f5:81:ae:b9:ff:a8:b6:
d2:a8:98:61:86:40:a1:5d:0c:f4:68:3d:7f:95:ef:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B0:AF:72:25:74:74:30:21:40:E1:28:CC:4E:C0:9B:E8:27:8C:1F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/8LCvciV0dDAhQOEozE7Am-gnjB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f8:83:45:17:22:75:b5:96:d0:cb:0a:99:05:68:50:6c:37:
5c:b1:67:bb:d1:14:d4:93:40:72:b2:bf:a1:9b:b6:66:a4:cc:
a7:81:40:c4:4c:8d:2a:07:15:14:21:58:50:d3:02:9b:c7:42:
7c:93:4b:94:b7:d3:40:eb:bb:a5:13:40:77:87:f8:81:7c:ba:
a8:99:03:6f:94:48:6f:16:3e:1c:11:7e:26:cc:a6:08:1a:bc:
1e:d8:13:2d:9c:8e:66:c5:75:88:c6:5f:80:27:92:cb:a8:4c:
50:cf:90:17:ab:63:56:49:43:a5:38:99:7c:0b:91:6b:40:e5:
01:e7:69:d7:0f:d3:74:75:5a:6b:66:fa:8a:18:a2:1d:99:9e:
1c:62:9e:93:f9:74:60:e0:33:a5:dd:29:6c:ac:88:7a:7c:68:
a7:3c:ff:df:4a:fa:aa:aa:6e:5d:ef:ae:3f:ef:5c:81:e3:06:
48:fc:84:c2:96:fc:0a:f1:fa:c8:b5:3d:ba:55:40:5c:45:bf:
6e:22:b8:c3:08:fe:78:4c:2b:e4:b7:ce:22:3c:d8:f5:b9:b7:
1a:97:be:75:b5:a7:22:1a:3c:1d:81:4b:d1:b4:48:0e:cf:56:
13:6d:b2:a0:fe:24:fb:18:36:34:9e:ac:19:12:1a:b0:61:a6:
84:99:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:49 2026 by rpki-client