Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/8oTK3TC0D2Jp0RoOQfL5lALHOb0.roa
File: 8oTK3TC0D2Jp0RoOQfL5lALHOb0.roa (raw, json)
Hash identifier: bDWj0S7zTHlaNQd9wpyLKfimVq/tWXy8hbrpF7M3lP8=
Subject key identifier: F2:84:CA:DD:30:B4:0F:62:69:D1:1A:0E:41:F2:F9:94:02:C7:39:BD
Certificate issuer: /CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Certificate serial: 019F2369071234D174C17485D7477D2F072E
Authority key identifier: 80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/8oTK3TC0D2Jp0RoOQfL5lALHOb0.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214192
IP address blocks: 2a14:52c0:ae43::/48 maxlen: 48
2a14:52c0:af44::/48 maxlen: 48
2a14:52c0:f045::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:07:12:34:d1:74:c1:74:85:d7:47:7d:2f:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f284cadd30b40f6269d11a0e41f2f99402c739bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:14:be:f7:ae:32:bd:ed:7f:16:e4:75:83:
23:5a:f5:71:98:a5:3d:c2:bc:78:4d:4f:89:83:9a:
da:60:c8:54:de:42:50:5b:e8:58:c2:68:1a:71:92:
77:23:93:0e:a2:84:1c:47:e6:5f:61:16:1c:29:b4:
58:d3:85:44:3e:a0:9c:88:80:ba:f4:aa:14:44:cd:
14:f5:cd:87:92:3a:a6:1e:1f:0e:58:a5:c5:66:fd:
b0:4c:a1:5f:57:d2:ef:01:f5:2a:25:a1:dd:89:9e:
76:e0:d0:82:7e:3a:6d:42:59:f5:42:9d:d6:69:1e:
39:6c:71:ab:28:66:49:d8:51:ba:f3:3a:33:36:d3:
35:db:65:d9:81:19:29:f5:d4:a5:f1:64:43:ea:2a:
4d:d5:f2:93:f9:f7:e7:3c:96:08:2d:7f:f5:1f:99:
5e:0c:db:be:c2:7f:78:fe:18:0a:1d:fa:e4:5c:80:
25:0a:30:52:3a:9e:9f:9b:31:39:d7:5e:93:d7:81:
74:8d:c9:68:ab:72:1f:c4:7f:2b:c8:a8:c4:15:aa:
e9:db:5b:1f:fd:14:8b:c8:7f:25:1c:6b:89:5a:e0:
8f:18:43:33:de:d4:85:9f:22:4a:ca:45:26:8c:84:
47:23:78:f4:e6:22:5d:be:16:1e:e5:36:ae:fd:80:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:84:CA:DD:30:B4:0F:62:69:D1:1A:0E:41:F2:F9:94:02:C7:39:BD
X509v3 Authority Key Identifier:
keyid:80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/8oTK3TC0D2Jp0RoOQfL5lALHOb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:52c0:ae43::/48
2a14:52c0:af44::/48
2a14:52c0:f045::/48
Signature Algorithm: sha256WithRSAEncryption
90:50:4c:09:2b:37:0f:77:29:96:58:cb:ab:54:d5:bf:67:84:
4c:ad:d2:d9:1d:d6:28:e3:37:d7:35:82:1b:66:b6:4e:ec:71:
66:08:82:84:71:e9:d3:53:e5:b6:e3:71:88:0c:5a:cc:77:2c:
01:41:41:19:ba:d6:70:8f:10:47:58:e0:11:d1:88:b0:77:54:
5d:ec:88:cc:30:9a:44:0d:f0:0c:86:aa:cc:18:f9:12:dd:f0:
c2:0a:24:a9:92:75:83:37:41:23:34:bb:a3:af:4c:70:9e:50:
4d:4c:6d:a9:58:64:49:ba:99:1d:20:87:f9:d2:37:7e:de:f0:
2e:61:13:6b:b1:07:10:56:ca:f6:81:a0:5a:d3:5a:00:53:65:
37:3b:35:30:0a:cc:b6:16:81:dc:32:9e:2b:b0:32:ed:f1:8e:
00:df:37:37:3b:bc:84:5b:17:ca:9a:17:9e:d6:33:d8:39:3c:
32:05:a9:7c:2b:8a:64:15:4f:9d:25:bc:a0:7c:68:8c:dd:2c:
d2:57:58:ee:60:07:60:5e:91:e1:59:b9:60:44:0b:ff:08:76:
9b:47:fa:2d:63:fb:77:8f:8e:d7:7c:9a:f1:8d:d9:a7:3d:4d:
72:ab:8c:ad:a1:1b:4d:19:2e:c8:d3:8a:94:ff:e0:8e:cb:5c:
2d:4e:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:10 2026 by rpki-client