Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/1-MYXb6Dn8l9Sni47o7eWRZtN3fo.roa
File: 1-MYXb6Dn8l9Sni47o7eWRZtN3fo.roa (raw, json)
Hash identifier: zMSUZdzn/nIFjJVu5UqN5nxZSdS9vq4wDRYE1tXZj7E=
Subject key identifier: F8:C6:17:6F:A0:E7:F2:5F:52:9E:2E:3B:A3:B7:96:45:9B:4D:DD:FA
Certificate issuer: /CN=a8006b308d94364c41ef4708804afdbad71acf32
Certificate serial: 01A0C5820399F7B0E8E264EB386409FFFFD9
Authority key identifier: A8:00:6B:30:8D:94:36:4C:41:EF:47:08:80:4A:FD:BA:D7:1A:CF:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qABrMI2UNkxB70cIgEr9utcazzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/1-MYXb6Dn8l9Sni47o7eWRZtN3fo.roa
Signing time: Mon 21 Sep 2026 19:47:07 +0000
ROA not before: Mon 21 Sep 2026 19:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20853
IP address blocks: 195.210.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qABrMI2UNkxB70cIgEr9utcazzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:82:03:99:f7:b0:e8:e2:64:eb:38:64:09:ff:ff:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8006b308d94364c41ef4708804afdbad71acf32
Validity
Not Before: Sep 21 19:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8c6176fa0e7f25f529e2e3ba3b796459b4dddfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:d9:2f:5f:4f:ff:78:a6:13:70:43:c0:97:
fe:36:71:32:81:79:1a:2e:0c:3d:ac:2b:d1:ab:bb:
e0:e3:a0:1b:06:06:86:4e:e6:41:ec:bb:d3:7c:cf:
9a:76:dc:6b:38:4b:10:a9:6a:04:f8:bc:0f:7d:90:
28:f2:83:7c:ea:00:07:a6:4a:78:a4:e6:93:84:fc:
bb:33:64:bd:64:ba:cd:5d:b3:86:95:93:25:f8:e8:
94:27:66:2d:16:9b:e9:bb:99:8b:1b:7d:94:75:86:
bf:39:aa:0d:44:b3:bb:6b:ec:d4:6a:f8:ca:d0:a5:
bb:fa:58:86:c4:31:d4:de:bf:fa:0f:58:02:18:4f:
c3:35:b8:dc:88:4c:a7:01:5c:e6:1d:2b:65:21:26:
40:41:39:b1:62:63:8c:e3:1f:e7:b9:5b:fd:68:90:
5c:20:e2:05:cf:25:08:33:e6:b9:29:1f:98:c8:8f:
9b:c0:83:d5:00:a9:e2:d4:53:25:7f:6c:28:72:cb:
65:bb:7d:c6:f7:a1:a0:1e:a0:15:1d:b1:f9:7e:05:
09:d4:06:d4:46:37:70:81:03:a4:56:9d:1b:93:36:
0c:74:72:af:21:c9:b1:15:2b:8c:05:aa:0d:5c:21:
dc:af:31:47:3c:e3:09:4f:ab:6d:62:a4:77:74:03:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C6:17:6F:A0:E7:F2:5F:52:9E:2E:3B:A3:B7:96:45:9B:4D:DD:FA
X509v3 Authority Key Identifier:
keyid:A8:00:6B:30:8D:94:36:4C:41:EF:47:08:80:4A:FD:BA:D7:1A:CF:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qABrMI2UNkxB70cIgEr9utcazzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/1-MYXb6Dn8l9Sni47o7eWRZtN3fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.8.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d0:41:c4:33:73:d0:ae:0c:5b:cb:e7:8b:00:24:d0:bf:60:
ca:b5:9b:23:35:ff:5b:dd:9a:cb:81:55:73:36:27:f8:ee:bf:
9b:ba:3d:e6:b3:08:81:9b:c5:e9:ca:17:2a:e5:f5:09:d7:8e:
13:12:9a:38:a9:07:65:8a:4c:b1:24:9a:aa:d1:cf:55:75:b4:
fc:4c:2c:48:05:f2:00:3d:b0:f7:a1:e9:7d:0c:09:f5:f2:ff:
f1:a1:12:4e:bb:6e:89:a6:4c:20:97:3b:4f:aa:20:73:ad:5f:
80:04:02:db:61:a1:50:d0:e5:d2:18:7a:78:49:c4:36:64:b9:
b3:57:e6:ec:c1:77:38:09:ed:7a:b8:07:c2:b9:49:b9:8d:8a:
c7:ed:28:d8:a0:c6:b4:51:93:94:f5:b2:ce:69:f0:95:22:24:
d1:5f:63:c5:ca:88:e5:34:eb:a3:6e:23:75:5f:8a:ca:63:ec:
6a:43:0d:a5:93:7b:47:92:55:59:70:55:c5:ff:6b:7e:a6:a8:
1a:b5:92:26:e2:a7:60:d9:0a:2e:b1:39:30:aa:37:99:08:21:
9a:ef:72:ee:3a:57:51:ba:82:3a:44:19:01:7d:4e:84:fd:ae:
08:91:20:e0:84:a9:5e:0c:47:fa:76:d3:9a:6b:c6:4f:21:b1:
56:f0:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:42 2026 by rpki-client