Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/8HP5Xq8lrtqkn5h201-7okkzPq4.roa
File: 8HP5Xq8lrtqkn5h201-7okkzPq4.roa (raw, json)
Hash identifier: WP8g6JdUNh8+NUEE1ptFTokCNu2rtnQfuXAaBhtEymc=
Subject key identifier: F0:73:F9:5E:AF:25:AE:DA:A4:9F:98:76:D3:5F:BB:A2:49:33:3E:AE
Certificate issuer: /CN=cea5b3410c3971c42d849996d6de6eb12b7effb0
Certificate serial: 019F236870E84C1BBF32BFEFFD1AC3161D53
Authority key identifier: CE:A5:B3:41:0C:39:71:C4:2D:84:99:96:D6:DE:6E:B1:2B:7E:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/8HP5Xq8lrtqkn5h201-7okkzPq4.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47530
IP address blocks: 2a03:e60:8000::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:70:e8:4c:1b:bf:32:bf:ef:fd:1a:c3:16:1d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea5b3410c3971c42d849996d6de6eb12b7effb0
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f073f95eaf25aedaa49f9876d35fbba249333eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:6d:18:bc:a7:a9:0e:64:63:60:ee:1f:93:
41:82:cf:d2:8e:f9:1c:56:be:97:43:5b:c8:47:4b:
b6:1e:32:8f:fa:09:2c:90:36:1e:7e:1a:67:c3:f3:
ad:7d:bb:a4:ac:27:68:1b:df:fe:b5:79:63:cf:db:
11:b3:ca:48:12:34:3d:91:d1:2f:f9:24:a9:7c:bf:
14:e5:21:d2:02:76:10:bc:6a:15:3c:28:0b:2c:78:
8a:b4:c1:c4:95:0f:33:56:07:f8:fd:1e:57:ca:75:
1c:7a:e4:17:06:4c:62:13:9c:fb:ed:26:b0:2a:f8:
50:5d:63:44:78:a7:11:5a:4f:a1:af:0b:51:bb:bf:
f4:05:e6:33:8f:37:5e:fe:ac:c4:3f:b4:de:cb:39:
ee:8d:e6:3a:e9:1f:8a:c4:64:0b:0f:b3:e3:8f:6d:
b8:38:f7:c7:1d:f9:d4:48:2e:35:cc:f2:d7:17:b2:
78:62:4b:a3:24:f5:7a:f3:63:00:3e:cf:0e:7f:f3:
12:19:d9:2b:44:d9:53:7c:0a:ec:2b:5e:82:90:3b:
28:08:40:39:8c:e5:12:08:97:cd:73:42:a0:c4:58:
4a:7d:d1:f9:0f:24:aa:f5:d2:25:1f:25:21:db:dd:
45:92:1a:b5:ca:22:14:d8:83:22:d5:f9:16:a7:d1:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:73:F9:5E:AF:25:AE:DA:A4:9F:98:76:D3:5F:BB:A2:49:33:3E:AE
X509v3 Authority Key Identifier:
keyid:CE:A5:B3:41:0C:39:71:C4:2D:84:99:96:D6:DE:6E:B1:2B:7E:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/8HP5Xq8lrtqkn5h201-7okkzPq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e60:8000::/46
Signature Algorithm: sha256WithRSAEncryption
14:50:27:0c:b3:cb:e6:bb:4e:3a:68:5d:e8:4e:83:6d:60:36:
18:66:9b:30:5b:6f:2b:f2:24:b3:77:30:04:9c:f4:75:d0:51:
fa:0f:54:7d:fc:02:ba:8a:ec:c2:d7:f1:9e:61:f6:a2:38:ee:
e5:40:8b:1e:0a:bc:92:9c:51:2b:4b:ea:f1:9b:91:59:1c:b0:
e0:8d:13:0f:19:03:45:c6:e9:1b:d5:38:c2:02:0b:76:a8:17:
63:75:16:a4:88:5f:da:a0:da:82:64:d5:04:9e:c4:ab:6b:19:
e0:22:05:68:3b:92:4c:22:bd:f8:49:76:b8:d3:e9:dd:48:59:
c1:47:b8:24:7f:dc:c9:16:1c:98:c2:5d:df:88:cc:ca:5c:78:
86:d2:bb:76:5f:b1:1e:48:05:6c:73:03:17:61:9a:a5:c1:3e:
7d:5e:50:d5:8a:3b:d6:3c:72:e6:bc:fd:c8:a2:e1:ca:1e:eb:
70:b7:58:de:f7:a3:cc:6b:4a:ee:66:39:87:88:ee:80:0e:c5:
e7:99:34:be:1b:30:3b:d6:9c:de:a0:51:b0:96:e5:16:f8:31:
4d:fc:2b:05:23:45:14:ad:5c:e3:40:34:84:4f:87:62:5e:7f:
ce:62:a3:5f:24:cf:e4:54:21:02:87:e3:dd:bd:9e:72:ff:67:
11:bd:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:20:10 2026 by rpki-client