Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/kiP1Rz2Pye239_k7zKt16ngvMws.roa
File: kiP1Rz2Pye239_k7zKt16ngvMws.roa (raw, json)
Hash identifier: yBmHRNv/foMNtquyhN6WcywCwjnz3nqPI2PwBXBJSX8=
Subject key identifier: 92:23:F5:47:3D:8F:C9:ED:B7:F7:F9:3B:CC:AB:75:EA:78:2F:33:0B
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 019F6B17242D25A39BA182A44E65CC2C7400
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/kiP1Rz2Pye239_k7zKt16ngvMws.roa
Signing time: Thu 16 Jul 2026 13:21:46 +0000
ROA not before: Thu 16 Jul 2026 13:21:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214017
IP address blocks: 2001:67c:f3c::/48 maxlen: 48
2001:67c:f3c:c333::1/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:17:24:2d:25:a3:9b:a1:82:a4:4e:65:cc:2c:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Jul 16 13:21:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9223f5473d8fc9edb7f7f93bccab75ea782f330b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:55:24:a7:c2:00:8c:85:bc:6e:1e:6e:4b:
45:d3:b6:6e:1f:00:bd:a1:1f:17:6b:97:f8:f3:94:
11:21:19:91:70:dc:ff:54:83:39:b0:4e:a3:01:55:
3d:02:85:37:a4:10:20:e9:67:ae:b4:56:7f:97:fe:
cf:f2:2c:2a:38:9e:42:ac:17:cb:5e:b7:52:ea:f3:
8d:5f:b9:d4:f4:92:92:8f:b1:f6:fb:9a:be:d7:a3:
75:e2:83:bd:be:18:e5:0c:d1:7e:80:c8:0a:7c:86:
69:f2:11:6e:f1:12:73:3b:a5:56:b2:32:28:2a:81:
ef:b5:b1:40:dd:0e:46:63:0c:7d:20:61:f7:09:92:
15:65:ef:0c:99:81:50:15:28:03:0c:fd:03:0c:a6:
e1:c4:64:58:60:7d:b9:1f:a6:7d:5b:75:a2:31:6d:
73:a3:89:fd:5a:35:0e:ab:4e:23:4e:91:da:75:b8:
c7:77:23:49:a6:c1:9d:db:14:47:90:e7:c9:d2:ad:
11:9f:11:03:3c:08:c0:47:be:41:55:52:b8:c5:b3:
40:42:14:e0:95:de:5a:88:ff:4a:11:3d:a4:f3:06:
24:8f:73:ff:61:be:c1:c3:c4:97:f5:fa:31:0f:29:
18:bd:c1:20:a2:8d:5b:13:57:5e:2a:8f:8c:90:cd:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:F5:47:3D:8F:C9:ED:B7:F7:F9:3B:CC:AB:75:EA:78:2F:33:0B
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/kiP1Rz2Pye239_k7zKt16ngvMws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f3c::/48
Signature Algorithm: sha256WithRSAEncryption
27:cd:c3:76:77:8e:73:28:66:14:de:8e:1c:eb:00:e8:4a:a1:
15:77:e9:a6:13:35:48:02:c3:aa:2d:2c:af:f4:7b:0a:cf:5c:
ac:29:b4:1a:5d:c1:4e:c4:ad:6a:d1:8d:50:1e:48:e0:84:bc:
a6:10:60:ef:b8:f4:c8:2f:a2:10:bd:71:de:b0:94:8a:60:68:
cd:02:8c:b1:47:f9:60:cf:8a:55:70:d5:71:2e:1c:19:53:bd:
3e:0c:5c:89:06:e5:45:5d:95:38:c3:fb:b1:7f:04:67:34:f4:
96:70:81:8b:92:ae:a7:d4:73:e7:16:40:20:7d:26:e7:c1:ce:
50:ac:e5:a5:09:c3:7e:d2:b8:c5:4d:ec:4f:68:94:38:ca:5c:
bc:7a:f1:5a:ff:29:3b:3a:da:ac:4f:e2:18:a1:95:cc:31:58:
e2:5f:d3:90:12:fe:05:e9:d6:8d:a3:72:fb:89:38:76:10:43:
15:c3:98:fe:a8:f1:c5:c4:19:2f:a5:ef:dd:ff:c1:c8:0e:24:
ae:41:72:29:cd:93:c8:9b:e3:de:d8:61:08:9b:e9:e0:2d:4d:
fd:a1:1e:84:9c:e7:01:52:de:69:9e:02:c1:6d:7b:b9:c1:dc:
49:85:96:8d:f7:8d:bd:76:61:be:b3:80:95:ed:8f:39:97:3c:
a0:60:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:52 2026 by rpki-client