Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/v8r0rY2VCO6nb9UP-j9QEKj0a1U.roa
File: v8r0rY2VCO6nb9UP-j9QEKj0a1U.roa (raw, json)
Hash identifier: CERCDOSiJAtXuY0RaMNWqfoNX8rm7x072fiyZ3U62oY=
Subject key identifier: BF:CA:F4:AD:8D:95:08:EE:A7:6F:D5:0F:FA:3F:50:10:A8:F4:6B:55
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A0816AE20D3134F8C032EF6104E5E49AED
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/v8r0rY2VCO6nb9UP-j9QEKj0a1U.roa
Signing time: Tue 08 Sep 2026 14:27:40 +0000
ROA not before: Tue 08 Sep 2026 14:27:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5552
IP address blocks: 193.164.96.0/19 maxlen: 19
212.44.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:6a:e2:0d:31:34:f8:c0:32:ef:61:04:e5:e4:9a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Sep 8 14:27:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfcaf4ad8d9508eea76fd50ffa3f5010a8f46b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:b9:a2:4a:8a:d5:2d:b0:1b:43:f9:c8:00:
16:be:de:d8:d9:76:a1:df:08:3d:d9:0d:57:26:22:
71:80:3f:6e:cb:d2:bc:0e:d8:0e:fa:5e:dd:33:c1:
7b:da:6a:49:3a:65:2a:ab:c1:a9:32:05:16:68:71:
46:cb:cb:46:bb:77:29:0b:3d:b6:9e:55:e5:2c:ef:
5b:c0:19:1b:fe:3c:34:21:26:1e:35:79:a3:f6:e8:
c4:57:43:73:30:e4:c9:3a:0d:0d:5e:4a:f9:d8:a5:
71:43:59:bb:e6:0e:f6:80:c7:f8:a6:e4:1b:3c:70:
9f:f4:d7:21:75:cd:41:e3:d3:9e:69:4f:a4:88:75:
6d:d5:99:32:04:26:e1:0e:ea:d8:2e:d3:7b:0a:33:
d8:a1:ec:f5:74:c6:98:58:51:b0:ae:ed:85:45:51:
af:a3:db:d8:3d:da:97:53:51:e8:e7:0e:0f:9e:79:
7a:10:ff:af:be:83:1d:ac:72:3e:7a:cf:a9:cd:72:
3e:87:7c:af:c7:7f:e0:00:fa:68:1e:aa:48:c6:80:
34:99:6d:4e:58:94:c7:00:c4:31:b2:b7:6b:88:5f:
c0:df:0e:46:de:62:ed:3a:3f:b3:67:1d:b6:dc:88:
d8:b4:6c:24:3d:27:d5:ed:d9:7f:3a:22:19:71:f1:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:F4:AD:8D:95:08:EE:A7:6F:D5:0F:FA:3F:50:10:A8:F4:6B:55
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/v8r0rY2VCO6nb9UP-j9QEKj0a1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.96.0/19
212.44.0.0/18
Signature Algorithm: sha256WithRSAEncryption
83:c4:93:d6:ae:47:0d:d8:e2:3c:50:2c:c1:2b:e3:23:a7:21:
c2:88:d1:2f:4a:f0:5a:25:45:ce:d8:6e:eb:c1:da:ad:9f:f6:
3b:77:6c:91:03:4a:78:f6:0d:a3:1b:f4:72:ec:c2:ba:29:73:
46:30:03:fa:f0:e8:9e:cf:f1:2e:a6:c2:1b:ef:e1:f0:5c:ea:
d8:b1:96:f0:f4:80:d8:e3:c0:6e:13:4c:ff:27:b7:66:1c:1a:
6e:00:2e:40:51:42:96:be:87:b3:b6:d4:95:df:63:be:6e:be:
d5:eb:85:8b:fa:f8:31:5f:ed:6b:72:34:19:e6:e9:af:37:ae:
2d:95:57:00:ff:f8:f0:8d:00:f4:10:1f:dd:b9:1d:a8:03:08:
99:18:86:68:bd:bf:39:43:01:59:9f:3c:9a:c3:f6:ae:69:2e:
31:3c:e3:93:7a:3d:0a:84:71:85:a5:0e:21:36:10:4e:38:c8:
80:1d:93:8b:c0:bc:1a:1d:7c:6d:58:c1:f9:91:4e:ae:8c:30:
ad:6b:9e:ea:4d:dc:81:d2:21:80:24:64:e3:47:5b:28:97:3c:
b0:3a:6f:1d:a7:38:90:09:c3:26:1d:7f:00:9d:e8:3d:e8:b7:
d8:e4:77:23:74:ff:0f:6b:7a:5b:9b:dd:60:dd:40:b0:ec:ca:
15:a0:a2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:26:04 2026 by rpki-client