Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/8yPXyFTgkgtYTMqpIyGD6WGQpbs.roa
File: 8yPXyFTgkgtYTMqpIyGD6WGQpbs.roa (raw, json)
Hash identifier: TPkch1MUj3NLgPFZhJqPVUIPJfq7KiSr5N+fQveEZ04=
Subject key identifier: F3:23:D7:C8:54:E0:92:0B:58:4C:CA:A9:23:21:83:E9:61:90:A5:BB
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01A09F7431FEF79F51BF07F16DC1D6102F6B
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/8yPXyFTgkgtYTMqpIyGD6WGQpbs.roa
Signing time: Mon 14 Sep 2026 10:26:27 +0000
ROA not before: Mon 14 Sep 2026 10:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215238
IP address blocks: 195.123.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:74:31:fe:f7:9f:51:bf:07:f1:6d:c1:d6:10:2f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Sep 14 10:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f323d7c854e0920b584ccaa9232183e96190a5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:43:49:24:29:d9:f4:00:f3:5f:1c:24:09:
06:e4:86:59:d8:96:42:f5:fa:c3:04:d0:b6:ea:1d:
d2:db:fb:f5:00:b4:9c:87:fb:e1:4b:94:bf:2a:ce:
23:cb:6f:79:e0:47:1f:40:95:43:bb:9f:04:19:5f:
6e:84:ad:40:91:f3:95:a6:cd:e4:6a:13:12:6a:52:
e1:0f:a3:c0:12:5e:3e:78:c2:bd:d6:bf:32:6e:bb:
7c:3c:f7:61:f7:9d:a2:2e:13:e1:f7:2b:db:5e:7d:
67:9d:d5:5a:6f:79:6f:59:f9:24:8d:76:ea:f1:4b:
58:e7:21:fb:f3:25:89:44:20:11:0f:4c:ec:eb:57:
c7:8d:f4:f4:e6:11:27:23:37:6b:a4:b9:26:06:ee:
76:25:92:b6:5b:6a:d8:4b:66:d4:0b:1f:12:79:aa:
84:10:74:3e:87:66:7e:fc:0d:0b:90:8a:e9:52:8e:
9c:69:7e:a7:fe:d0:31:df:51:cb:bd:ec:dd:85:24:
7d:75:73:67:64:b9:86:14:04:6b:3f:0c:07:7f:3c:
9b:eb:09:0a:bb:26:24:99:28:74:ca:fd:89:70:8e:
c7:67:f4:21:58:f8:44:57:0c:c0:68:44:cd:b4:95:
86:ba:5c:07:21:86:ba:ad:ad:93:49:77:d3:cc:7d:
39:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:23:D7:C8:54:E0:92:0B:58:4C:CA:A9:23:21:83:E9:61:90:A5:BB
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/8yPXyFTgkgtYTMqpIyGD6WGQpbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.4.0/24
Signature Algorithm: sha256WithRSAEncryption
50:58:c9:5e:1a:65:fe:ff:d7:0b:81:e7:9e:a5:28:09:ad:26:
f8:2c:51:e4:b3:20:72:fe:ab:1d:45:a6:82:bf:92:56:d3:4a:
1a:8b:1d:0b:c5:59:77:31:d9:c4:9c:63:70:16:6d:1f:ed:3c:
93:81:f8:fc:25:8b:c8:01:39:99:c6:5d:81:c6:69:1e:b2:9a:
89:8f:d7:93:df:de:2d:84:d0:58:27:f5:c5:d5:2d:a7:d5:31:
d6:d8:b8:62:a4:41:08:af:ce:66:e0:a9:d5:4a:a2:27:9c:ae:
82:1f:fb:64:54:16:e8:9d:51:21:e9:b3:99:fa:99:6c:70:bf:
54:36:63:29:f5:9f:03:dd:08:21:ba:0e:1c:67:36:da:a8:09:
b4:e9:db:ec:1d:f7:38:87:f6:8f:b5:74:76:6f:99:ba:a6:92:
4a:68:87:c0:07:74:bd:61:73:2d:a6:e4:fa:7c:aa:e6:e1:d2:
eb:de:48:2f:fc:47:ae:00:8e:48:eb:33:78:91:51:3a:4b:43:
8c:f8:0e:b1:1d:cf:1b:db:b1:3e:96:57:e9:bb:81:45:70:4d:
06:fd:19:3d:02:c9:8f:a8:d9:eb:ff:d1:e4:45:4e:0d:ed:c7:
5d:83:b1:c9:2b:af:67:6c:50:1d:ef:7c:c5:de:ac:a3:b6:47:
8d:b1:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:29:46 2026 by rpki-client