Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/c615D8oSACjgyS0Bjo-bfdZkb4E.roa
File: c615D8oSACjgyS0Bjo-bfdZkb4E.roa (raw, json)
Hash identifier: n24Thc8UUcK00qhEsfmxNbzqwY3Cfr8ykDQu6rNqA2o=
Subject key identifier: 73:AD:79:0F:CA:12:00:28:E0:C9:2D:01:8E:8F:9B:7D:D6:64:6F:81
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01A1CA39128CFA3BD7C8F81A6756CF14E6B3
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/c615D8oSACjgyS0Bjo-bfdZkb4E.roa
Signing time: Wed 11 Nov 2026 10:48:20 +0000
ROA not before: Wed 11 Nov 2026 10:48:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 80.46.136.0/24 maxlen: 24
80.46.137.0/24 maxlen: 24
80.46.138.0/24 maxlen: 24
80.46.141.0/24 maxlen: 24
193.39.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:39:12:8c:fa:3b:d7:c8:f8:1a:67:56:cf:14:e6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Nov 11 10:48:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73ad790fca120028e0c92d018e8f9b7dd6646f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:b5:3b:87:8d:1d:8e:cf:91:28:2b:03:58:
c6:78:c1:5c:88:10:a6:c4:c7:39:30:8d:a2:18:92:
f8:94:be:91:5b:9f:96:16:8c:a3:f3:c4:9b:67:8f:
66:7b:ed:28:61:c1:65:22:9d:6c:a7:89:12:b2:4e:
54:d6:fc:28:1f:99:36:8c:c9:ea:0c:e7:95:62:65:
89:68:d2:23:e2:27:8c:ab:f8:a8:57:2c:f1:2c:36:
13:91:8e:4d:b6:b6:4b:d3:2c:6a:77:52:5a:bb:2c:
08:d2:9a:d4:10:58:15:4f:43:90:4b:f0:9b:5c:62:
56:87:35:d5:f2:66:c2:4e:07:64:bc:25:93:b2:22:
92:47:fd:79:cc:dd:a3:70:fb:bc:39:bc:8d:3a:1a:
eb:87:a9:f4:82:db:b1:d0:d3:12:1f:90:7a:bd:e7:
cd:5e:18:f4:3a:5e:f8:e9:11:97:1a:3f:7f:3e:bc:
08:0d:9d:d6:39:ac:53:83:1f:1c:13:e6:6c:ea:76:
78:54:73:95:58:90:eb:82:81:6a:ab:b5:af:34:84:
7f:3c:75:97:9a:3a:85:f5:e0:43:7d:33:88:3b:44:
fe:9f:0d:cc:e0:75:f0:56:99:93:14:d5:55:0b:74:
1a:f1:90:5c:22:0e:1f:3a:6b:6a:b4:89:67:6d:1c:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AD:79:0F:CA:12:00:28:E0:C9:2D:01:8E:8F:9B:7D:D6:64:6F:81
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/c615D8oSACjgyS0Bjo-bfdZkb4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.46.136.0-80.46.138.255
80.46.141.0/24
193.39.215.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2b:e4:97:b4:1d:97:3d:23:42:30:7c:c2:dc:f0:af:9a:e9:
76:eb:52:7a:24:7b:7b:6e:bc:cc:5e:dc:d2:70:f8:30:17:6a:
69:81:3f:b4:70:c7:c1:b7:96:96:cd:9c:a0:78:71:4f:6c:9a:
fc:e8:6d:aa:07:4f:bc:a9:02:b7:a7:69:c7:b0:2b:25:55:24:
30:fb:6c:67:74:ec:3b:41:88:03:55:ca:ed:76:83:55:04:dd:
cc:00:4a:ff:0f:90:5b:08:ed:55:2f:bb:3a:16:b7:86:0f:32:
ef:18:9b:58:a8:da:46:0a:2b:01:0d:8c:92:48:60:1b:1b:95:
65:80:db:eb:8f:ab:ae:7c:e1:d5:2a:10:2c:cd:87:51:a5:d9:
e6:8c:ea:8c:be:42:de:68:1a:2c:c1:d2:af:42:1d:d4:f1:eb:
c6:46:94:cd:5b:d0:dc:bb:99:39:a2:c1:4c:23:77:30:c1:93:
f7:fe:57:4a:8c:0f:b7:24:f3:67:d4:ac:62:67:bf:7a:93:7f:
8e:2e:d0:df:2b:11:4c:78:d1:8a:8f:56:64:8b:4a:27:70:be:
76:69:29:a2:ba:29:38:98:48:5e:23:d1:6d:ba:e5:5c:ff:ab:
15:01:ac:37:76:e8:3d:e1:1e:8f:59:86:7a:80:a8:72:39:d1:
10:a4:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:37:16 2026 by rpki-client