Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/n8e067z642oPG-VSPPf5NH1kdkc.roa
File: n8e067z642oPG-VSPPf5NH1kdkc.roa (raw, json)
Hash identifier: PJ1ZxoSfLoBxIG9KpA+HcKOU0Yd/GTsGewdqlSPBL7U=
Subject key identifier: 9F:C7:B4:EB:BC:FA:E3:6A:0F:1B:E5:52:3C:F7:F9:34:7D:64:76:47
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019CE21CA16A66A1FF5F0B31160459B93814
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/n8e067z642oPG-VSPPf5NH1kdkc.roa
Signing time: Thu 12 Mar 2026 12:54:12 +0000
ROA not before: Thu 12 Mar 2026 12:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213670
IP address blocks: 85.132.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:1c:a1:6a:66:a1:ff:5f:0b:31:16:04:59:b9:38:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Mar 12 12:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fc7b4ebbcfae36a0f1be5523cf7f9347d647647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:2b:92:71:8e:6a:2b:e0:df:cf:c3:49:1e:
7b:51:b4:c5:ec:d7:ca:d4:ed:4f:46:f2:80:3e:4f:
62:ac:50:c0:45:1a:c9:5c:6a:92:e5:bb:d4:d9:0f:
02:52:1b:ef:53:67:90:67:4a:5e:a4:68:47:55:ac:
de:f6:20:9f:ce:9a:d2:b9:8f:00:e4:75:97:cb:87:
14:30:1c:e2:17:d1:d8:2c:17:b9:69:ea:a0:ff:2e:
9f:9b:fc:41:01:02:66:b6:56:a5:82:04:9a:d6:42:
e1:08:df:9d:e1:d6:f1:ef:ff:4b:5d:8f:c7:4e:1b:
64:5c:35:86:43:13:3f:ec:41:89:59:06:62:22:69:
6e:f5:33:1f:41:f6:68:c1:f9:71:3b:77:a7:54:cd:
3b:a2:47:49:1e:e5:b6:48:1c:f2:4e:09:12:56:d6:
5c:05:13:40:00:31:8d:78:e4:6e:86:da:fd:e5:fd:
6c:50:37:96:5f:2a:94:86:09:b1:d1:32:ed:78:6f:
20:86:f0:55:d3:43:48:cb:66:1a:26:13:7a:30:3c:
f5:19:60:68:85:c2:d3:aa:1d:7c:f9:4e:98:b2:92:
e3:aa:76:09:e0:a4:43:c8:6a:4a:a1:be:77:63:aa:
f1:bb:27:3c:03:26:dd:70:4b:b1:37:37:9b:b2:05:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C7:B4:EB:BC:FA:E3:6A:0F:1B:E5:52:3C:F7:F9:34:7D:64:76:47
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/n8e067z642oPG-VSPPf5NH1kdkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.132.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7f:cf:78:36:8b:aa:56:31:1b:b2:0c:3f:80:4e:3d:ef:d2:
77:eb:10:98:35:02:f0:f7:81:a1:93:cf:06:0a:e9:f6:9c:89:
7b:7a:87:ea:47:d2:53:bf:43:d1:43:00:c0:d2:dd:3c:a8:c6:
51:b5:20:a9:e8:13:f6:e1:e6:c4:ea:f4:51:ae:44:6a:94:94:
ee:2b:16:ff:1c:73:5e:9f:15:e1:ec:86:6f:4c:a3:24:ba:bb:
a6:ad:9e:d3:1f:d6:c3:85:41:03:76:b0:84:2c:3f:7a:de:0d:
9d:cf:2a:22:76:7c:97:33:70:b8:bf:80:d8:ac:f2:5b:10:6a:
68:51:11:80:d2:ec:f0:46:3b:ec:af:79:9f:69:0b:5b:9d:9a:
03:01:af:70:44:5e:5b:84:e7:f6:31:32:0f:1a:f4:b5:bc:87:
e3:5d:7f:04:32:74:90:f8:9e:21:05:49:2a:c8:1e:3f:7d:58:
a5:2d:0d:e4:c7:36:a8:48:cf:e3:51:c7:32:df:37:64:ee:03:
25:a9:ae:e3:2d:13:14:83:05:e8:b2:4b:78:1f:07:7e:c1:89:
5e:17:c2:cb:74:24:a3:dd:72:87:e4:ab:c3:79:6b:86:db:f7:
e5:93:88:07:7f:6c:a0:5c:52:be:67:04:2d:bc:e0:3c:04:df:
19:b8:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:39:28 2026 by rpki-client