Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8GErTU908jLJWW8BYLO_QdVqxVc.roa
File: 8GErTU908jLJWW8BYLO_QdVqxVc.roa (raw, json)
Hash identifier: 9/XNlSOhIV/fVmTkvz6mDIApLRrpZKGj4lrvXdp0Eos=
Subject key identifier: F0:61:2B:4D:4F:74:F2:32:C9:59:6F:01:60:B3:BF:41:D5:6A:C5:57
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0F71B08F4A08C606B82DDE91441C2388A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8GErTU908jLJWW8BYLO_QdVqxVc.roa
Signing time: Thu 01 Oct 2026 10:55:39 +0000
ROA not before: Thu 01 Oct 2026 10:55:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213434
IP address blocks: 2a06:9801:70::/44 maxlen: 44
2a06:9801:1583::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:1b:08:f4:a0:8c:60:6b:82:dd:e9:14:41:c2:38:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 1 10:55:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0612b4d4f74f232c9596f0160b3bf41d56ac557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:f1:f3:70:cd:f6:be:51:c3:8a:6a:4a:55:
4a:6d:60:3f:ec:91:b0:4e:43:88:8c:59:16:8a:e8:
63:b5:bf:0d:2d:69:33:b9:8a:ce:0f:f4:69:73:e7:
62:55:fd:39:c1:2c:51:dc:4f:8e:1d:db:a2:ee:a0:
ea:4e:f2:a1:fe:5e:06:b0:c0:f9:81:a2:8a:5b:b4:
f5:ea:82:ba:d7:7b:cc:4c:6c:cf:87:71:64:5a:e5:
7a:26:5a:84:62:3c:38:4f:19:1d:66:54:82:d4:f3:
af:3a:96:7f:65:a7:40:af:64:f7:1a:f7:ab:17:64:
b0:f7:40:01:c0:42:e5:2b:97:95:71:cf:a4:49:fb:
31:aa:bd:a6:d8:64:64:19:26:66:2c:9d:4e:07:51:
19:5e:1b:3d:46:1b:d4:1a:eb:2e:8a:ba:61:a6:6c:
0f:2d:d2:22:95:0a:3d:c4:66:70:80:f1:1b:94:a3:
92:32:2f:df:3b:2f:0e:1e:0b:dc:7b:d9:2c:df:ea:
3b:d7:f8:ca:ad:03:69:ce:68:cc:04:c6:98:ed:d8:
84:57:27:2a:a5:15:b4:f3:e7:9e:06:16:7f:9a:85:
ce:34:43:46:70:55:c1:a3:f4:54:17:d3:e2:a1:cc:
f8:26:49:40:00:af:a1:5a:a7:4c:ca:0c:90:ab:15:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:61:2B:4D:4F:74:F2:32:C9:59:6F:01:60:B3:BF:41:D5:6A:C5:57
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8GErTU908jLJWW8BYLO_QdVqxVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:70::/44
2a06:9801:1583::/48
Signature Algorithm: sha256WithRSAEncryption
30:ec:aa:d4:65:74:c2:fa:c6:1c:2a:25:ea:6e:1b:a5:5c:8a:
c0:bf:78:78:33:8d:b2:5f:e8:a8:81:af:fc:42:ca:95:02:62:
5c:7e:48:ca:10:af:1f:27:61:7f:bd:c0:27:7e:e4:5a:b1:63:
9f:f7:45:fc:83:32:52:ea:1e:dd:65:86:56:fe:7c:84:8f:cc:
05:42:69:43:21:15:84:1a:10:2e:1b:30:f8:3e:a9:e2:78:02:
85:23:0a:9d:5a:8c:27:47:87:de:db:42:3e:04:ca:b6:27:f0:
da:56:40:83:95:e2:d2:f2:19:c8:3f:87:91:bb:b3:47:28:9f:
82:f2:04:ab:27:11:20:6b:34:61:14:3f:42:6f:7a:d6:3f:13:
c1:d8:af:6a:31:99:43:c0:6a:80:08:c5:64:75:14:f6:e2:5f:
ed:bc:af:9d:48:c4:b3:01:6b:7c:27:7f:e2:0c:bd:7d:2e:27:
ff:d7:89:f2:07:aa:02:ce:01:02:1b:2f:d0:8b:eb:c8:96:1a:
73:a4:d4:96:5c:9c:09:59:43:5e:97:90:bb:89:db:66:c5:24:
af:aa:1f:69:31:0e:1f:bb:88:13:6c:f3:41:25:36:49:3e:13:
45:8d:7a:a5:ca:0a:6c:d1:4f:38:6c:1b:0f:e4:08:52:e2:47:
65:19:f6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:50:37 2026 by rpki-client