Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/1P8-Eu_s8X1vC1WJsAZg_Ou2ULc.roa
File: 1P8-Eu_s8X1vC1WJsAZg_Ou2ULc.roa (raw, json)
Hash identifier: hNqY/15U7ZpfBuCkPLmvWiqUPA5qOkLjYnByAuLQRq4=
Subject key identifier: D4:FF:3E:12:EF:EC:F1:7D:6F:0B:55:89:B0:06:60:FC:EB:B6:50:B7
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019DE4081941EAB7F274948FB3473D4A3EAF
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/1P8-Eu_s8X1vC1WJsAZg_Ou2ULc.roa
Signing time: Fri 01 May 2026 14:53:49 +0000
ROA not before: Fri 01 May 2026 14:53:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 2001:4c68:201::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:08:19:41:ea:b7:f2:74:94:8f:b3:47:3d:4a:3e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: May 1 14:53:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4ff3e12efecf17d6f0b5589b00660fcebb650b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:5f:48:83:a6:9e:0a:0f:26:95:0b:12:b0:
05:42:61:62:45:d8:4c:c1:91:c9:70:0d:74:9d:7b:
31:53:2b:b5:21:25:12:12:10:0f:23:2d:54:c0:7b:
89:80:47:21:29:43:40:87:f0:36:b5:f2:22:14:61:
c1:fa:88:e0:b2:33:19:02:a8:93:de:e6:5e:5a:22:
81:4b:31:f1:ac:84:e2:ab:fa:3b:c8:bd:71:5b:57:
f8:ab:04:d7:50:e8:75:b9:ca:f5:6b:02:cb:cb:54:
3c:eb:a4:c1:7f:55:45:6a:be:f9:3c:ca:5c:ef:09:
4e:81:84:6a:2e:cc:e1:f8:5c:be:28:6a:8b:f5:32:
d3:2c:a5:0c:19:fd:ba:3b:2a:99:9a:a8:c0:2e:26:
8c:47:2e:a3:d9:06:c7:2f:7b:05:41:04:86:86:00:
4d:74:32:f1:73:6f:f5:65:1b:98:35:72:84:e5:76:
c9:d5:1d:4c:e5:19:bc:25:df:91:d4:2f:ab:2d:6e:
e1:1e:12:98:65:6c:38:21:9c:8f:ec:63:69:d8:1c:
93:d6:58:ae:8b:3e:02:02:80:5f:67:af:aa:ff:dd:
4f:30:9f:43:7d:a5:cb:9e:76:d6:c2:7f:88:28:53:
47:e5:20:d6:5b:d3:0d:c2:ac:ba:0f:eb:0f:1d:c9:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:3E:12:EF:EC:F1:7D:6F:0B:55:89:B0:06:60:FC:EB:B6:50:B7
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/1P8-Eu_s8X1vC1WJsAZg_Ou2ULc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4c68:201::/48
Signature Algorithm: sha256WithRSAEncryption
3f:10:f1:4b:c2:94:92:5e:6a:37:10:4a:fc:8a:90:f2:24:b1:
f1:31:12:38:a3:6b:53:44:87:dd:d3:81:2d:bd:e0:ad:59:82:
33:fc:6b:61:7e:1c:7e:5a:8a:b8:d7:c2:58:3d:88:f0:98:18:
27:70:33:76:d8:45:73:fc:e6:3e:c0:80:65:70:9c:db:b4:07:
6c:76:af:87:b7:88:29:89:cb:53:7b:d5:0d:4d:53:de:b1:3b:
e4:37:d9:49:3b:cc:14:5b:6b:ac:8f:c6:4f:b0:4d:f1:e7:a0:
e1:60:fe:c1:46:04:60:21:6b:c2:aa:28:c1:00:df:9a:09:8d:
12:5d:dd:4c:fe:93:3e:ba:62:3b:2c:65:c9:ca:1c:53:a1:aa:
10:a7:3b:ff:4b:46:bf:ed:c6:ea:5b:77:1f:67:82:7b:f1:2e:
84:90:12:73:98:7f:4b:a7:19:70:9e:32:f9:75:a0:dd:97:19:
c0:04:f9:0f:8d:f3:a4:75:64:57:06:a9:bc:e2:de:d6:a5:32:
b8:52:b7:60:1a:5c:b7:44:ac:55:fa:dd:d3:48:b3:5e:30:86:
1c:09:9f:c1:30:c0:92:1c:36:54:ce:f1:50:54:1c:a1:6f:ee:
fc:df:f5:41:ba:b6:d9:21:c5:fa:e7:f8:39:4a:fe:b6:9f:57:
00:5f:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:07 2026 by rpki-client