Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/apq8PiI5IBB6D-WAnVPZgt_lX_k.roa
File: apq8PiI5IBB6D-WAnVPZgt_lX_k.roa (raw, json)
Hash identifier: K1ypiigJ0MNk3GMQqR4a1+1BIA4lafG7jrwQYNiI23U=
Subject key identifier: 6A:9A:BC:3E:22:39:20:10:7A:0F:E5:80:9D:53:D9:82:DF:E5:5F:F9
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 01A19BB5C823C5317147BAB6CDB2E3802909
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/apq8PiI5IBB6D-WAnVPZgt_lX_k.roa
Signing time: Mon 02 Nov 2026 10:02:23 +0000
ROA not before: Mon 02 Nov 2026 10:02:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 83.168.112.0/24 maxlen: 24
83.168.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:b5:c8:23:c5:31:71:47:ba:b6:cd:b2:e3:80:29:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Nov 2 10:02:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a9abc3e223920107a0fe5809d53d982dfe55ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:30:72:d5:38:fa:11:0e:b4:46:29:c6:00:
de:8c:10:f4:b8:eb:cf:ae:da:4a:80:9d:7a:94:56:
5d:85:68:41:56:a4:b6:3c:23:73:df:a3:e4:9e:1e:
63:55:ff:10:71:d1:1d:cf:c0:fe:28:1e:5a:46:bb:
8a:82:88:cd:59:bb:7b:b2:1c:86:24:69:bf:8b:b5:
a6:b0:3b:c6:c5:c7:a2:d1:70:0c:2c:f0:68:a7:1d:
3c:37:d5:e8:0b:dd:1e:1e:a6:14:17:35:df:5d:90:
5b:92:3f:df:6a:d3:f5:c6:e2:8a:22:a3:24:50:e3:
3b:43:a4:51:33:a1:ac:94:b4:84:2d:9b:92:43:1a:
fc:13:26:4a:2e:88:bf:7d:78:fe:39:4f:f9:68:6d:
49:b6:a2:2a:7a:4e:73:00:a4:09:a5:b7:81:88:21:
5a:97:07:6b:66:95:17:d0:93:df:bf:52:ca:48:7d:
90:47:e8:ca:55:7e:bd:d6:b4:84:04:18:ee:81:46:
f2:8f:1f:72:7b:4a:b2:81:14:40:09:ae:e8:d4:0f:
0d:4e:cb:d1:3b:03:3f:74:b0:61:50:fa:0c:92:32:
b9:d6:81:49:62:f4:66:89:70:6a:5b:42:d1:22:43:
11:58:a0:dc:78:c9:0f:b3:f2:ab:00:80:d6:84:aa:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9A:BC:3E:22:39:20:10:7A:0F:E5:80:9D:53:D9:82:DF:E5:5F:F9
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/apq8PiI5IBB6D-WAnVPZgt_lX_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.112.0/23
Signature Algorithm: sha256WithRSAEncryption
90:42:e8:5e:fd:8f:90:e2:f5:0a:75:d8:a8:9e:1f:43:fd:d8:
cc:e8:41:d1:68:3a:53:2d:92:ac:b8:9e:3a:10:61:4e:3c:46:
92:3f:95:68:0c:18:28:16:d9:41:70:f5:70:5f:5e:bc:76:56:
0d:31:ef:a2:ae:9f:11:cd:4f:b0:49:72:14:af:8e:46:ee:c1:
cf:23:8d:96:c8:ac:f7:23:db:a5:37:cc:38:c2:ca:a8:6f:7c:
25:6d:80:12:9e:60:25:fc:d5:9b:8f:c6:5d:9c:7b:7d:c4:98:
0f:28:7e:49:78:d4:dd:03:16:ec:89:bd:28:76:dd:4d:d0:a0:
0f:cb:4c:09:45:2f:15:39:fb:2f:f0:f7:66:90:bb:a9:9e:f4:
5f:66:ed:07:13:a1:d7:3b:01:d3:51:7a:d8:1b:10:bd:5f:41:
07:3f:b8:af:dd:ec:11:f9:d1:84:27:94:a3:02:bc:25:27:9a:
40:28:2c:9e:62:93:74:1c:d1:0a:1b:2f:50:8d:eb:69:a4:07:
86:77:b7:53:d5:e9:cd:39:28:e6:d3:4e:ee:01:c6:83:a2:5b:
f5:40:a1:4d:99:b5:b1:f9:62:8e:8e:ba:42:3f:16:34:e6:1b:
48:42:ec:97:09:2f:69:84:99:06:8c:c7:5c:79:2e:6c:6e:e1:
ea:c4:59:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:04 2026 by rpki-client