Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/8u2z2Xga5O5N_cJ6XwfoQDyeqjI.roa
File: 8u2z2Xga5O5N_cJ6XwfoQDyeqjI.roa (raw, json)
Hash identifier: UTaNMd3CEd0lWrDH+fieqbIVnu1cLWotgckfZ6yVE20=
Subject key identifier: F2:ED:B3:D9:78:1A:E4:EE:4D:FD:C2:7A:5F:07:E8:40:3C:9E:AA:32
Certificate issuer: /CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Certificate serial: 019F2368B7A0E0EC01A4B6D4FCDBBC63DEE3
Authority key identifier: 5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/8u2z2Xga5O5N_cJ6XwfoQDyeqjI.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24586
IP address blocks: 185.138.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b7:a0:e0:ec:01:a4:b6:d4:fc:db:bc:63:de:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2edb3d9781ae4ee4dfdc27a5f07e8403c9eaa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:f7:ea:e1:2b:ce:8e:c0:a2:08:7a:eb:69:
9f:19:ec:05:07:34:4b:30:b3:39:30:1a:71:2b:19:
45:c4:a1:97:e8:1f:e3:83:8b:3e:ab:d8:63:91:7e:
13:20:c0:e5:5a:62:20:76:b6:63:0f:76:b1:64:c9:
f4:c1:90:86:54:07:32:fa:f4:31:2d:52:61:8f:e5:
42:ba:13:ee:d8:7f:bb:8d:95:95:13:2c:ec:b4:e4:
96:eb:2e:09:2a:c7:39:51:09:9c:68:a2:01:ce:c6:
ec:b1:44:bc:84:fc:24:67:36:86:b8:7e:d4:07:7a:
8b:dd:84:ba:67:31:d9:8c:37:a7:04:2b:a3:08:4f:
e4:b9:d1:b7:40:1b:54:38:ad:9c:e5:35:b6:a3:35:
ed:f8:37:a4:6f:42:73:c4:e4:6b:a2:63:13:1d:1b:
27:53:e6:61:93:7f:67:27:bb:fa:ed:4d:c9:fe:77:
f4:59:40:38:d0:2b:47:c4:ec:78:81:4b:a5:a7:d2:
ab:69:1c:79:d8:df:10:01:49:38:40:7d:cb:20:62:
63:47:82:99:a9:ca:14:82:48:ff:fa:da:3f:44:6c:
66:7b:6f:88:d9:54:9c:a8:74:95:db:10:34:f0:59:
8a:e4:17:9c:e1:96:66:7a:fc:5e:fb:fe:42:a6:e0:
c7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:ED:B3:D9:78:1A:E4:EE:4D:FD:C2:7A:5F:07:E8:40:3C:9E:AA:32
X509v3 Authority Key Identifier:
keyid:5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/8u2z2Xga5O5N_cJ6XwfoQDyeqjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.80.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:97:40:49:a1:f6:bf:d6:51:e7:9f:e9:b5:1f:d3:1a:4d:c6:
03:0b:d5:fc:e6:59:2d:be:51:3a:a8:3d:99:51:53:3c:5e:63:
33:b4:5f:7e:0f:73:96:6f:b6:f4:e0:ba:45:87:b0:d3:c3:1b:
1d:5f:4f:40:a6:34:ab:60:06:7a:2e:12:05:22:5b:45:05:e3:
20:da:57:a3:82:8e:db:ae:b4:2a:28:a1:cf:17:a6:a0:f0:4d:
a6:d8:55:5b:3c:51:37:bb:27:fc:b6:7d:7f:3e:9a:00:eb:64:
17:fb:34:54:38:f0:74:da:8c:2b:5b:68:99:cd:63:9b:b9:be:
32:da:c7:f0:15:0c:7d:4e:30:46:5e:15:2f:1a:71:de:0e:b2:
99:99:f2:ff:81:f4:a4:b7:a4:12:ab:61:4e:f7:aa:82:7a:cf:
69:78:32:5a:c2:0f:97:b7:b5:ab:c1:62:7c:f6:37:08:65:ac:
52:32:1d:af:f3:b0:59:ea:96:33:8e:9b:40:46:66:28:b3:6b:
fd:8b:ca:1d:b8:b9:25:62:1c:74:91:7b:75:aa:34:95:73:6e:
b5:25:17:b5:d1:06:5f:21:90:4d:f4:6e:0a:92:04:7c:64:9e:
c3:04:65:70:8d:43:3b:06:f0:f4:2f:35:8a:40:98:29:f9:2a:
96:64:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:04 2026 by rpki-client