Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/8bE78mpMyT-fzMopFI6agt1LIHQ.roa
File: 8bE78mpMyT-fzMopFI6agt1LIHQ.roa (raw, json)
Hash identifier: 18ves12NZPDEDkbnslIxRHI/+HnQh65e8LkrDzNVrd8=
Subject key identifier: F1:B1:3B:F2:6A:4C:C9:3F:9F:CC:CA:29:14:8E:9A:82:DD:4B:20:74
Certificate issuer: /CN=0a89e874160239baf098e2e3dd04673e8bc82ffd
Certificate serial: 01A048BF3A05B574F63E9E9689BA39262C5F
Authority key identifier: 0A:89:E8:74:16:02:39:BA:F0:98:E2:E3:DD:04:67:3E:8B:C8:2F:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ConodBYCObrwmOLj3QRnPovIL_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/8bE78mpMyT-fzMopFI6agt1LIHQ.roa
Signing time: Fri 28 Aug 2026 14:21:26 +0000
ROA not before: Fri 28 Aug 2026 14:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206432
IP address blocks: 185.186.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ConodBYCObrwmOLj3QRnPovIL_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:bf:3a:05:b5:74:f6:3e:9e:96:89:ba:39:26:2c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a89e874160239baf098e2e3dd04673e8bc82ffd
Validity
Not Before: Aug 28 14:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1b13bf26a4cc93f9fccca29148e9a82dd4b2074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:6a:d7:13:50:2b:b8:07:03:91:0d:03:de:
78:24:78:dd:0c:e0:cf:ca:93:4a:d9:54:5e:fd:3b:
67:62:60:72:13:24:f5:a9:79:59:cf:4e:29:45:91:
94:03:cb:d6:b5:cd:34:83:30:b4:40:ae:50:d8:a4:
1f:ec:e1:5d:db:6c:d2:03:6f:19:4b:34:cd:32:00:
67:68:e7:83:50:b1:d6:0a:09:99:01:b4:09:e6:42:
9d:78:e3:e7:1f:00:37:16:a3:f2:93:00:57:30:66:
78:6b:d0:1d:42:74:18:99:30:f5:a7:9c:9b:ef:6d:
30:87:f8:e1:66:c7:76:34:24:38:08:10:fc:3f:5c:
c6:81:2c:6e:43:db:f2:b6:c0:ee:2b:98:55:ff:15:
7a:86:3e:15:f4:88:6e:19:15:66:14:6d:0a:ef:42:
24:81:85:ec:84:03:cf:26:34:ad:f2:94:7f:61:a0:
8c:1b:e4:bb:43:0f:0e:ac:61:fa:a3:e0:63:3e:93:
17:dd:4a:04:bd:0c:77:7a:b6:01:61:1e:ce:14:e2:
e5:b4:86:65:4f:2a:8e:c3:9e:9a:e1:a0:33:b5:0e:
1c:76:88:70:6e:6d:87:79:90:9f:4e:38:47:9b:fd:
4e:ed:3d:44:a4:56:4e:54:16:98:c8:53:fa:1f:83:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:3B:F2:6A:4C:C9:3F:9F:CC:CA:29:14:8E:9A:82:DD:4B:20:74
X509v3 Authority Key Identifier:
keyid:0A:89:E8:74:16:02:39:BA:F0:98:E2:E3:DD:04:67:3E:8B:C8:2F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ConodBYCObrwmOLj3QRnPovIL_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/8bE78mpMyT-fzMopFI6agt1LIHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.156.0/22
Signature Algorithm: sha256WithRSAEncryption
12:5f:c3:bc:56:6c:02:cb:3e:1f:0e:f6:46:2a:2d:24:ae:d3:
c8:15:89:1b:1b:65:89:f3:26:d8:ab:03:a3:79:18:a2:df:40:
00:05:bb:ee:1a:f4:74:2a:02:b5:41:9d:f8:b3:9f:55:33:cc:
74:07:76:fd:aa:c7:c6:da:b5:6c:cc:ff:75:86:bd:a7:7e:77:
68:8b:1a:43:fb:fd:c6:28:b7:33:49:fe:1b:5b:c6:7f:eb:57:
96:10:9b:2e:b0:4c:a8:ef:fd:d3:62:08:6a:13:bd:14:a5:4e:
03:17:56:d9:33:2b:88:17:08:aa:5c:f3:86:fe:b9:7e:b1:08:
09:22:40:32:65:3d:56:73:6a:27:dd:92:4a:42:8f:2c:a2:2d:
7c:22:d8:33:a0:68:0c:9d:b2:af:7d:26:bf:3f:6c:7e:52:08:
e1:85:6b:6f:da:d4:10:09:04:ca:1d:d5:26:69:f2:13:3f:03:
fa:7a:82:f3:6b:27:29:8c:0e:20:9b:42:69:88:da:3a:27:27:
ae:7e:28:a0:62:40:07:29:e9:73:66:de:3a:a2:27:bc:0d:77:
1a:e0:05:c6:77:68:1c:73:fd:64:f9:9a:ba:1b:d8:6d:c3:09:
66:8c:b5:c0:3e:d1:fd:54:3b:17:26:bf:e0:42:c3:68:d6:b3:
47:80:59:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:01:19 2026 by rpki-client