Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/8h9N0o1DP4cTa1joJkvtjZ69cPY.roa
File: 8h9N0o1DP4cTa1joJkvtjZ69cPY.roa (raw, json)
Hash identifier: QzvwZtMRPLOwFSrMXC5EMOKl6ZFJXjd+NvjDqLCoAws=
Subject key identifier: F2:1F:4D:D2:8D:43:3F:87:13:6B:58:E8:26:4B:ED:8D:9E:BD:70:F6
Certificate issuer: /CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Certificate serial: 019F2368CEE4B12FA2698B65995FF7E13D89
Authority key identifier: 59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/8h9N0o1DP4cTa1joJkvtjZ69cPY.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215246
IP address blocks: 2a0c:e304:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:e4:b1:2f:a2:69:8b:65:99:5f:f7:e1:3d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f21f4dd28d433f87136b58e8264bed8d9ebd70f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:21:3a:ae:0d:7e:13:95:01:b0:93:14:7b:98:
13:bc:6b:32:5d:72:25:60:11:e3:3e:96:78:af:21:
27:6d:88:6c:4e:92:ec:6b:1f:43:c4:71:b2:94:67:
12:b8:97:aa:33:f1:b6:2c:15:65:0a:64:d5:18:df:
3e:d7:27:a1:43:65:69:97:52:cb:7a:9f:a6:cf:67:
85:36:01:19:9b:2f:9e:54:97:8e:78:25:7e:70:03:
b1:9a:13:07:b8:4f:07:6c:a3:1d:8c:13:9d:59:18:
91:9e:3c:55:3a:38:19:ae:f4:97:80:23:5e:0f:a1:
d3:f4:54:9a:03:37:dd:3f:53:a7:d5:59:57:28:7f:
36:a0:b3:bf:c2:d7:ca:1c:d2:fb:95:ed:69:60:f6:
c9:a8:2b:ed:48:45:0c:40:3b:8d:e3:79:2a:4f:a3:
4d:52:38:77:16:d8:ca:7d:8c:94:39:7b:1f:61:75:
97:b1:0e:83:71:10:bb:4f:54:3f:bb:8d:b2:22:31:
5f:bf:83:83:8f:5c:dd:40:76:42:a8:bf:9f:c3:d7:
31:b9:5c:09:a7:bc:2e:6d:f8:17:dc:97:fa:6d:20:
ac:ae:59:af:8f:cb:27:18:85:b5:c2:be:2a:1b:de:
26:05:23:e3:1d:85:44:c8:02:bd:71:74:01:b2:b2:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1F:4D:D2:8D:43:3F:87:13:6B:58:E8:26:4B:ED:8D:9E:BD:70:F6
X509v3 Authority Key Identifier:
keyid:59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/8h9N0o1DP4cTa1joJkvtjZ69cPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e304:2::/48
Signature Algorithm: sha256WithRSAEncryption
a3:a7:44:4e:73:ef:fb:79:1d:42:db:db:6c:5a:2c:20:9c:a5:
eb:9a:40:cf:7e:9f:be:7b:20:c4:81:26:07:63:70:99:70:3e:
54:28:96:ef:cc:c1:2b:49:11:90:73:c5:b8:6b:24:1c:e2:e5:
a6:8b:ae:89:e2:fa:7c:43:ff:43:58:62:7f:dc:59:39:2d:fd:
8d:b1:cc:60:0d:b5:0b:0b:07:dc:e2:a8:9d:8f:fd:39:51:2d:
c1:34:32:af:fe:99:23:52:fa:6e:76:17:b5:74:5f:37:03:0f:
e1:a9:9b:fe:3e:32:4b:8e:d2:48:5a:1f:0a:2a:1a:61:cb:b2:
cc:0c:1a:2f:57:8c:45:ae:83:df:c6:d6:b7:5f:3d:00:e2:9d:
8e:91:31:15:55:f9:31:11:e3:80:b0:89:31:3a:9e:7a:b8:6c:
f5:74:49:32:c7:39:76:97:75:8e:14:4d:26:0c:f8:41:e8:48:
b4:e7:16:a3:3f:af:79:d5:a5:60:30:ba:c0:64:2b:1b:bb:e1:
a6:f9:47:db:18:05:31:ac:e8:35:75:47:5d:23:db:3d:b6:3a:
29:1e:08:88:51:61:27:8a:5d:8e:12:fb:85:9c:b5:3c:c8:6b:
e9:e6:b6:c8:a8:c2:8f:3f:be:3a:ea:a1:c1:c4:81:cb:ee:c0:
ff:65:12:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:29:56 2026 by rpki-client