Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/8Oc7yZGaKTkBanIXgPYbk2WNQUE.roa
File: 8Oc7yZGaKTkBanIXgPYbk2WNQUE.roa (raw, json)
Hash identifier: VRHFGWRbTtCED6xXvR0yrUQ50Zl08CMmuoJmDA12A5s=
Subject key identifier: F0:E7:3B:C9:91:9A:29:39:01:6A:72:17:80:F6:1B:93:65:8D:41:41
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019F22911FDF16F93E2D646C08674525ED1E
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/8Oc7yZGaKTkBanIXgPYbk2WNQUE.roa
Signing time: Thu 02 Jul 2026 11:22:43 +0000
ROA not before: Thu 02 Jul 2026 11:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3204
IP address blocks: 2a03:d9c0::/29 maxlen: 48
2a06:4fc0::/29 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a07:46c0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a07:fe00::/29 maxlen: 48
2a09::/29 maxlen: 48
2a09:7:200a::/48 maxlen: 48
2a0b:4080::/32 maxlen: 48
2a0b:89c0::/29 maxlen: 48
2a0c:59c0::/29 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a0d:4bc0::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a0d:c7c0::/29 maxlen: 48
2a0d:de80::/29 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a10:480::/29 maxlen: 48
2a10:2600::/29 maxlen: 48
2a12:9d00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:91:1f:df:16:f9:3e:2d:64:6c:08:67:45:25:ed:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jul 2 11:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0e73bc9919a2939016a721780f61b93658d4141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:03:09:8d:17:4b:b7:18:bb:14:2f:aa:81:
a8:49:5e:ab:af:1b:4a:57:46:82:ef:65:b8:82:15:
17:77:90:0b:fe:f8:23:c5:75:70:dd:44:4a:01:ac:
1b:60:fb:7d:2e:fa:15:57:46:2d:38:d9:25:7d:6a:
29:9a:03:19:d9:9c:e5:9e:05:5e:5c:5d:f7:c1:8d:
7c:34:eb:24:89:9c:49:69:2a:d4:c2:e3:a1:cf:75:
17:00:7a:03:ec:ea:96:b7:4b:6d:80:93:3c:16:53:
67:b2:9a:e9:12:98:4b:89:38:3b:83:6e:0e:ef:77:
0a:d9:86:42:21:e7:e2:0e:8a:27:76:e7:81:9a:d7:
4f:54:44:10:33:e7:ab:e8:b1:a2:cb:6e:e4:be:95:
af:1a:03:33:60:12:68:1e:c8:0b:9b:c3:9c:c7:c3:
55:24:e4:72:57:98:64:04:0d:6e:a7:8d:49:42:3e:
6b:d3:f4:ac:d2:bb:c2:35:b4:ce:24:38:6b:72:c9:
a0:cc:ef:7e:8a:2f:09:d8:28:0c:55:3a:e3:54:6e:
a2:94:21:0a:68:7e:a5:70:1d:29:41:3f:83:6a:74:
ad:2a:0f:88:c4:27:8e:b4:f4:8d:8c:ca:60:73:51:
c5:e8:c9:98:83:98:c7:67:28:f1:54:18:3f:00:84:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E7:3B:C9:91:9A:29:39:01:6A:72:17:80:F6:1B:93:65:8D:41:41
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/8Oc7yZGaKTkBanIXgPYbk2WNQUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:46c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:c7c0::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
2a12:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
12:e8:73:9c:ee:8f:cf:de:ec:8b:9f:ea:6a:b9:35:86:bf:12:
f4:d5:de:95:91:8c:74:8d:de:46:5e:ba:24:91:b5:4f:07:55:
02:0f:bb:87:0f:75:07:34:93:1e:8f:b1:2b:fa:e9:72:c9:44:
90:e9:3e:21:ed:c3:cf:00:0a:d4:5b:5b:7a:0e:bd:4d:a4:4a:
3b:21:74:98:47:cc:69:71:d7:43:00:46:70:31:69:43:cb:06:
42:ef:44:07:02:c1:27:91:91:54:fc:3c:6f:28:10:0d:6b:25:
5e:88:b2:62:8c:ac:67:63:0e:f7:ad:ac:89:01:f9:24:6e:61:
88:e6:4a:5f:fe:e8:1e:06:16:b7:92:4f:88:52:5d:a5:ea:be:
3f:ff:b8:c0:90:2f:df:e6:e5:42:df:a8:47:44:22:2d:3a:ff:
d5:b4:98:8a:c5:93:98:e8:ac:8a:7e:01:2c:cb:11:05:d2:e7:
26:a1:a9:6b:ce:86:80:c2:55:51:de:ee:f3:e4:ee:8f:77:e6:
6f:c4:c9:9e:a8:22:73:f1:21:cd:41:9f:f0:a8:2b:8f:8c:0d:
b0:50:67:20:9a:d1:98:fd:a8:9f:9e:dc:61:f7:0f:5d:11:ec:
76:99:d5:df:b7:71:f5:bb:de:e9:7f:9c:b6:3d:39:0f:e6:d4:
f7:f2:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:22 2026 by rpki-client