Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/8G2-MZzV3XiVkM0Zb_K5F9ikvXw.roa
File: 8G2-MZzV3XiVkM0Zb_K5F9ikvXw.roa (raw, json)
Hash identifier: MHZg5lePPMnrya/XfvQlJN3yfGVFc35lSGTNc281uNo=
Subject key identifier: F0:6D:BE:31:9C:D5:DD:78:95:90:CD:19:6F:F2:B9:17:D8:A4:BD:7C
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 01A1D5A0476C6085738A160823A355B9B1EB
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/8G2-MZzV3XiVkM0Zb_K5F9ikvXw.roa
Signing time: Fri 13 Nov 2026 15:56:53 +0000
ROA not before: Fri 13 Nov 2026 15:56:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15404
IP address blocks: 2a0a:d6c0:145::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:a0:47:6c:60:85:73:8a:16:08:23:a3:55:b9:b1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Nov 13 15:56:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f06dbe319cd5dd789590cd196ff2b917d8a4bd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:72:55:cb:de:fd:8f:33:67:ef:e5:fc:cb:
a3:38:0e:72:7c:a2:ae:20:44:6f:e9:1f:e5:03:e3:
fb:f0:21:fe:18:6c:c4:07:65:bc:f0:04:83:46:67:
b3:4a:94:22:e4:22:00:13:08:47:5f:32:26:54:b4:
01:66:70:73:a1:d2:7f:56:d4:59:22:e9:6d:25:93:
32:b5:fb:cf:f7:79:b3:1b:45:d4:01:40:90:a5:0f:
d6:a1:06:0a:c2:82:9c:6b:4e:6d:d4:47:14:4c:07:
f2:df:18:89:0e:a2:72:32:71:57:6f:60:c7:24:cc:
c9:44:f3:cd:1f:03:0d:90:8a:3f:d2:bd:dc:e1:09:
80:99:7b:32:81:97:88:64:29:0d:db:01:87:af:43:
36:50:ae:7c:b3:64:3d:4a:59:4f:f3:36:c7:68:16:
ac:1d:6e:c5:6a:a6:22:d0:b4:43:d7:12:2e:aa:31:
e0:6d:be:10:3b:a4:79:d4:31:77:d7:0b:a9:b7:37:
d8:49:c3:c3:3d:73:a0:a9:5a:3e:0f:35:78:ff:1d:
df:4f:fb:e3:eb:2a:d3:c9:c2:31:9c:d9:8f:93:a5:
fc:53:15:c0:8f:c5:d2:44:8f:eb:95:24:f3:4c:c2:
e1:78:e5:02:fd:c7:87:6b:14:48:30:5c:49:ce:2d:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6D:BE:31:9C:D5:DD:78:95:90:CD:19:6F:F2:B9:17:D8:A4:BD:7C
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/8G2-MZzV3XiVkM0Zb_K5F9ikvXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:145::/48
Signature Algorithm: sha256WithRSAEncryption
83:78:fe:1e:17:a8:92:b0:ef:98:f3:a9:f0:67:32:12:36:a8:
69:82:61:77:d4:c6:38:7a:9a:8e:1e:17:65:87:14:c9:d6:88:
90:1f:fe:cf:bd:95:54:d6:34:17:40:d3:c9:b2:c3:86:0a:f2:
62:b7:e3:80:ce:bf:7b:9d:50:9a:f7:51:f2:b4:75:b6:e8:61:
14:eb:38:92:ca:82:1e:d9:e3:43:ec:fa:d1:c3:2d:a9:98:92:
a9:83:93:e4:61:66:96:dd:f6:27:68:96:89:72:5c:93:15:96:
48:32:a1:57:77:d8:32:0a:6d:4a:50:a2:95:f4:44:7e:25:42:
97:39:18:2c:67:bc:2e:a0:33:03:e5:e5:e1:3f:1a:3e:11:68:
11:ca:30:37:f9:05:f1:c0:d4:7f:bd:70:be:c8:0b:d1:a9:05:
dd:9c:53:79:b2:90:f6:7b:18:44:fc:57:b5:e1:1b:71:2a:e1:
21:7b:e0:68:fb:25:4f:35:99:9a:2d:1b:de:d3:2d:e8:45:22:
76:46:eb:eb:7a:0d:4f:2c:bd:ac:50:32:5e:a5:25:4f:98:d1:
7e:be:f1:30:1d:b5:b7:f6:7f:79:48:ad:78:8b:fc:31:59:6e:
8c:f5:b0:65:21:90:30:41:78:01:37:b7:7b:14:b9:77:6f:b8:
e7:93:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 03:32:24 2026 by rpki-client