Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/8ZvH2moT5LWA0pvGUb_nhaecrRA.roa
File: 8ZvH2moT5LWA0pvGUb_nhaecrRA.roa (raw, json)
Hash identifier: vQ6P8MGQM1plUIoOIqS+HYiN2U0Ko89LQ4s+pHmv7B0=
Subject key identifier: F1:9B:C7:DA:6A:13:E4:B5:80:D2:9B:C6:51:BF:E7:85:A7:9C:AD:10
Certificate issuer: /CN=df4fe9c97061ff99f5da5a84f4e32e946a4e7889
Certificate serial: 019F236870ACE998B2360C5547C1A8E58D40
Authority key identifier: DF:4F:E9:C9:70:61:FF:99:F5:DA:5A:84:F4:E3:2E:94:6A:4E:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30_pyXBh_5n12lqE9OMulGpOeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/8ZvH2moT5LWA0pvGUb_nhaecrRA.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137
IP address blocks: 158.110.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/30_pyXBh_5n12lqE9OMulGpOeIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:70:ac:e9:98:b2:36:0c:55:47:c1:a8:e5:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4fe9c97061ff99f5da5a84f4e32e946a4e7889
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f19bc7da6a13e4b580d29bc651bfe785a79cad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:b8:05:76:48:00:e2:0c:df:4e:38:91:47:
bc:00:90:5f:1d:65:47:58:d2:39:42:ae:d9:49:d5:
49:57:6a:a4:bd:11:48:23:1a:39:56:c9:18:15:88:
72:46:64:9f:67:ac:87:0f:93:96:f7:d1:18:c3:f1:
3e:90:24:63:d5:40:34:2d:98:60:c7:82:35:8f:e2:
75:f7:de:17:ab:dc:ce:10:40:8b:7d:aa:6e:9e:0b:
0e:df:a7:ce:40:7d:f4:0d:bc:be:49:ef:02:f3:c9:
63:26:a0:3e:59:6c:08:f0:80:04:a4:7e:6d:ae:a5:
00:81:14:dd:6c:4e:c1:4b:92:2c:b3:95:b6:b4:60:
4f:b5:b1:b0:70:ee:83:82:26:9e:1b:b4:2d:5c:21:
9b:19:60:00:95:25:1e:5a:2f:38:e4:2d:be:e2:c0:
ca:6c:5f:77:51:4f:91:3d:02:69:01:ce:08:f1:b0:
78:1b:9b:50:3a:b4:3c:a1:27:60:53:43:cc:41:c3:
af:f3:3b:7c:6a:ee:00:8b:f4:76:53:29:91:81:3d:
ea:ac:c3:28:e7:58:a6:66:4a:12:95:d6:aa:d1:d9:
f2:96:28:82:33:a8:0a:14:be:b8:ed:a7:8e:10:34:
5e:0e:20:6b:fc:9f:89:d7:63:62:80:d2:f0:0c:13:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:C7:DA:6A:13:E4:B5:80:D2:9B:C6:51:BF:E7:85:A7:9C:AD:10
X509v3 Authority Key Identifier:
keyid:DF:4F:E9:C9:70:61:FF:99:F5:DA:5A:84:F4:E3:2E:94:6A:4E:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30_pyXBh_5n12lqE9OMulGpOeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/8ZvH2moT5LWA0pvGUb_nhaecrRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/30_pyXBh_5n12lqE9OMulGpOeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:b5:5a:2f:43:59:e2:53:4c:c6:e0:3c:86:e7:03:02:e4:e8:
12:9f:9b:8c:6b:0c:46:3e:5c:d9:c4:9b:e3:68:19:40:a2:e2:
be:a2:01:9e:cc:bc:a9:a7:d3:30:d5:6d:d8:13:a4:3e:64:34:
dc:6b:e5:98:d0:9f:65:d7:55:90:24:ce:a5:ef:0d:7b:45:2a:
53:0b:d2:d8:93:89:48:3d:36:07:5c:9f:f1:87:fc:e7:b2:b3:
80:c4:8b:70:6f:0a:bc:33:03:16:86:cc:02:f5:61:b3:68:c0:
78:6d:1e:52:3e:a3:17:d5:66:74:db:c5:a2:b5:b5:8c:11:2f:
58:79:6e:8b:12:87:d4:a4:be:9b:11:c6:19:e0:58:66:89:47:
73:31:8b:92:c2:a5:20:e0:d2:22:69:35:f3:16:7e:92:c9:56:
5d:80:9e:05:77:53:31:31:f2:8a:5f:46:98:63:ec:43:6f:17:
3b:b2:4e:57:aa:6e:48:f2:82:de:f8:22:02:93:14:d1:ea:76:
ca:4e:ce:8e:97:e5:9b:9f:17:a1:c4:a1:c8:5d:d7:42:3f:e3:
36:07:1e:fb:1e:04:d4:02:15:f9:a5:1a:1f:54:e0:57:0c:e6:
7e:94:e0:ec:5b:24:48:eb:4b:a9:43:ac:df:56:67:77:20:14:
ef:1b:de:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:17 2026 by rpki-client