Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8Phkec0AoLEnzb7HN_K7IVomNho.roa
File: 8Phkec0AoLEnzb7HN_K7IVomNho.roa (raw, json)
Hash identifier: iUgZGUOzzjmHudMmpTkNqMkKtz9vYae7mrrl6eT/00Y=
Subject key identifier: F0:F8:64:79:CD:00:A0:B1:27:CD:BE:C7:37:F2:BB:21:5A:26:36:1A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A18BDF9D536598B57DA61B2B9DF3F331A2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8Phkec0AoLEnzb7HN_K7IVomNho.roa
Signing time: Fri 30 Oct 2026 08:14:10 +0000
ROA not before: Fri 30 Oct 2026 08:14:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213254
IP address blocks: 82.115.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:df:9d:53:65:98:b5:7d:a6:1b:2b:9d:f3:f3:31:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 30 08:14:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0f86479cd00a0b127cdbec737f2bb215a26361a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:4e:1f:a0:8b:4a:ca:1d:61:2d:6f:6c:a7:
9a:04:95:89:d5:0a:03:08:6f:8f:55:90:6a:52:20:
7e:b2:f4:8a:21:ae:6a:53:bf:de:00:e2:c6:98:72:
c0:33:18:5c:50:0d:cf:bb:1b:fb:a5:6e:5d:32:a2:
cb:8d:c1:c2:fe:0c:bf:e2:8f:e3:65:9d:69:29:0d:
31:63:d9:27:ae:c2:68:cf:d0:32:85:a5:cd:19:1d:
e4:1b:f5:65:19:10:20:b0:2e:97:5f:ee:b2:77:5e:
71:ca:23:3b:d6:ec:db:69:27:29:e6:26:71:94:d8:
d3:1a:38:2c:ea:e2:79:e8:81:93:86:2e:3e:db:c1:
f9:2c:8e:1c:36:08:9a:6d:d2:75:67:05:92:35:34:
3a:bf:be:69:9f:61:05:b1:4d:00:22:a5:46:d3:c2:
fd:3c:b1:fa:c8:51:89:6e:e0:af:85:97:aa:39:bf:
0e:a8:46:3e:c0:3a:c4:d2:25:73:c4:26:38:41:78:
aa:e7:da:ec:fa:13:30:4a:a4:11:61:4f:66:67:9d:
5b:e1:57:e6:52:a0:8d:fa:36:ed:10:79:41:f4:29:
54:63:a9:a4:82:71:89:0c:7f:21:34:30:e3:35:a0:
7f:04:d0:a9:82:ed:45:df:ea:6d:f1:4b:34:78:c6:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F8:64:79:CD:00:A0:B1:27:CD:BE:C7:37:F2:BB:21:5A:26:36:1A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8Phkec0AoLEnzb7HN_K7IVomNho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.0.0/24
Signature Algorithm: sha256WithRSAEncryption
69:84:e7:26:fa:cf:6f:8f:2b:c7:b7:7c:13:24:f6:0f:5b:5f:
02:a9:fb:7f:09:9d:0f:2f:90:67:2c:c8:49:18:1a:0d:01:08:
b8:3b:06:4f:45:f5:a8:70:da:25:bb:3c:56:d2:1e:e9:df:b1:
fc:82:4b:bb:7b:b9:a8:dc:bd:3a:62:42:98:37:c1:2b:31:2e:
df:66:30:dd:53:50:60:bb:92:49:4a:9d:79:98:1b:43:c9:6d:
22:ff:26:8a:0c:99:ec:24:81:48:cc:b1:6b:a1:bc:93:38:ab:
e4:57:7d:15:91:5b:dc:e8:45:45:3a:0a:54:9f:08:f8:c7:61:
d4:9a:60:68:9f:80:88:26:8c:14:5d:ee:26:d0:a1:30:0f:98:
82:22:4f:d7:57:b6:c0:b4:e6:51:16:22:73:66:8f:40:77:11:
6a:6c:41:66:2c:bc:f9:2d:46:f0:3f:91:b1:81:d7:47:bf:83:
8c:68:95:75:16:7a:cf:e2:b4:0c:07:12:83:45:9e:27:79:5c:
7a:a4:7e:70:be:dd:79:4f:c3:92:05:03:fd:7f:9e:91:90:d7:
b8:20:f1:7a:07:4b:84:43:b3:5d:70:d4:36:2d:01:1d:78:ed:
4a:cc:4a:6c:4e:8e:8e:6d:42:37:0f:f0:d2:c3:a1:52:c1:1a:
e8:f1:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:59 2026 by rpki-client