Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/i4nf60hiAIy__g7281Y_4oJKW1g.roa
File: i4nf60hiAIy__g7281Y_4oJKW1g.roa (raw, json)
Hash identifier: gL1CX4wVqbHlNq26ksmLlwHJuvmv/Wn18JRdCqfKh7o=
Subject key identifier: 8B:89:DF:EB:48:62:00:8C:BF:FE:0E:F6:F3:56:3F:E2:82:4A:5B:58
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A0C76E92B398DBED39964F9AA852E8F0BA
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/i4nf60hiAIy__g7281Y_4oJKW1g.roa
Signing time: Tue 22 Sep 2026 04:45:07 +0000
ROA not before: Tue 22 Sep 2026 04:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 2a03:5840:129::/48 maxlen: 48
2a03:5840:167::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:6e:92:b3:98:db:ed:39:96:4f:9a:a8:52:e8:f0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Sep 22 04:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b89dfeb4862008cbffe0ef6f3563fe2824a5b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:3f:85:72:c5:86:32:47:e9:8b:26:59:ce:
64:81:35:95:49:f0:16:5b:06:88:99:41:67:38:32:
fb:06:b5:6b:3a:12:03:9f:76:6a:63:fb:2e:92:6a:
52:25:28:8c:34:eb:83:d0:86:01:e0:94:30:23:48:
99:fb:5a:fb:cb:c8:00:03:6a:ce:ea:2c:d1:7e:e1:
bd:77:cc:0f:c2:53:24:f3:94:38:9b:1d:91:f7:e1:
24:02:27:ee:26:fb:a0:28:42:42:b3:59:80:e9:d3:
ca:37:73:01:6e:40:6f:09:24:a7:fc:ac:66:83:41:
60:e4:da:16:c2:75:d4:d0:fa:e8:fa:54:b8:c1:b5:
bc:2e:59:37:ee:38:7f:a8:05:c3:7d:46:36:97:09:
18:e6:b5:5f:fd:ac:af:e9:e7:24:35:bc:8e:e3:d1:
fe:c5:d3:78:d3:b8:85:a9:70:77:9c:3c:50:6d:90:
ba:c1:13:73:fd:f1:e2:34:09:52:fa:ca:82:43:2f:
f0:3e:d8:c3:9f:cb:94:fd:c4:99:e1:5b:41:31:86:
d1:18:3c:c3:01:fd:da:ec:f7:f3:c9:a6:0e:3c:20:
ff:67:3d:e4:01:14:a8:5d:95:66:ce:e4:78:18:35:
b3:b9:fc:28:78:b4:31:93:f4:4a:f9:3b:1f:41:3a:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:89:DF:EB:48:62:00:8C:BF:FE:0E:F6:F3:56:3F:E2:82:4A:5B:58
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/i4nf60hiAIy__g7281Y_4oJKW1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:129::/48
2a03:5840:167::/48
Signature Algorithm: sha256WithRSAEncryption
50:61:cd:39:55:a7:8f:a8:f4:96:4b:af:c7:2e:fe:73:c5:0e:
32:c5:2e:78:2b:fa:a0:9d:77:b3:3f:70:7d:20:bd:0e:4a:27:
65:e9:91:40:b4:a9:a6:fa:8b:35:1d:2a:38:ad:82:27:99:b2:
98:ce:1d:9d:5c:d6:4e:e4:14:ee:03:8a:4f:14:2a:90:ee:c9:
b2:c7:6b:55:36:a8:12:88:f2:f4:3c:d2:de:b6:8f:9e:74:76:
fc:b4:e9:41:6a:4d:ae:e8:d2:bc:0f:fe:c6:be:95:56:f7:24:
3f:90:94:70:2a:4a:75:f3:9a:da:e9:97:f1:b4:2e:3c:a4:25:
e8:77:ab:c7:ed:75:53:37:26:f4:18:25:3b:cd:03:77:d8:de:
c4:23:e5:34:67:b3:34:27:68:f3:93:79:cd:0d:b9:6d:7b:98:
05:51:4d:1a:ba:f2:79:02:a0:e3:14:be:62:e1:b1:c3:63:54:
a1:f8:bd:6a:e4:98:b0:1f:35:8a:5d:67:52:40:88:8a:22:b4:
25:af:9f:f2:0f:46:16:1c:f5:6b:0b:8c:aa:a0:51:e9:c3:9f:
1f:4f:3c:d0:ae:21:e2:60:bb:89:53:e8:29:34:03:fa:7d:29:
be:92:a3:9f:96:4b:14:5c:12:2c:10:82:26:2e:ff:55:62:83:
a5:ff:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:51:35 2026 by rpki-client