Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/8sWq3iBM9wYecX3JTdNG7Ia3bJE.roa
File: 8sWq3iBM9wYecX3JTdNG7Ia3bJE.roa (raw, json)
Hash identifier: q2E9rflz/LIYtWYQs+DXx+8pAI3puYyAV0/X9AJkqv0=
Subject key identifier: F2:C5:AA:DE:20:4C:F7:06:1E:71:7D:C9:4D:D3:46:EC:86:B7:6C:91
Certificate issuer: /CN=6471203dcbed6aeb62dbb798cbfa5a9b5e099c4e
Certificate serial: 01A0A429073577FDBB2A8B371341B48B6F0B
Authority key identifier: 64:71:20:3D:CB:ED:6A:EB:62:DB:B7:98:CB:FA:5A:9B:5E:09:9C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHEgPcvtauti27eYy_pam14JnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/8sWq3iBM9wYecX3JTdNG7Ia3bJE.roa
Signing time: Tue 15 Sep 2026 08:22:27 +0000
ROA not before: Tue 15 Sep 2026 08:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213972
IP address blocks: 2a01:fac0::/48 maxlen: 48
2a01:fac0:1::/48 maxlen: 48
2a01:fac4::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHEgPcvtauti27eYy_pam14JnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:29:07:35:77:fd:bb:2a:8b:37:13:41:b4:8b:6f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6471203dcbed6aeb62dbb798cbfa5a9b5e099c4e
Validity
Not Before: Sep 15 08:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2c5aade204cf7061e717dc94dd346ec86b76c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:a0:85:a7:c1:9a:fe:72:f8:0d:56:c3:93:
a4:ab:d6:3b:c9:50:ad:0c:d3:8e:a7:3e:35:e8:bd:
34:7f:2c:b6:cf:04:25:08:cb:d4:2a:78:31:86:f6:
36:52:05:f5:5c:ed:91:50:f4:62:42:c3:34:2f:27:
bd:ca:e4:08:a9:a9:0c:8d:ac:db:0f:cd:f0:e1:6c:
db:52:8e:26:dc:0e:eb:ab:a0:cc:c5:4a:1c:6a:b7:
5e:0b:e0:43:68:b6:4c:af:65:40:5f:80:9f:ec:fa:
90:a6:db:d8:20:a4:b7:85:45:5d:b3:38:94:e1:32:
c6:4f:a4:63:7f:73:1f:7a:80:0c:90:28:72:ec:0c:
79:39:b9:ac:47:95:f5:0b:24:9a:d7:f1:2d:be:55:
7f:0e:05:70:4c:c3:53:71:c0:b2:6c:03:83:60:e7:
6c:ae:a8:14:9d:20:31:6c:65:b4:14:c8:87:fe:ef:
a5:3d:f0:6c:73:9c:b0:a3:59:65:3a:cf:64:64:2b:
35:e2:96:9e:ef:91:a5:54:93:cb:c4:73:73:db:29:
48:aa:1f:20:70:b3:aa:4f:98:52:ff:cd:8d:f8:fe:
b2:83:8b:32:53:63:c8:02:38:0b:07:c2:1a:c0:f9:
da:66:6a:c4:1c:91:5d:06:30:67:bb:7a:c4:2e:58:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C5:AA:DE:20:4C:F7:06:1E:71:7D:C9:4D:D3:46:EC:86:B7:6C:91
X509v3 Authority Key Identifier:
keyid:64:71:20:3D:CB:ED:6A:EB:62:DB:B7:98:CB:FA:5A:9B:5E:09:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHEgPcvtauti27eYy_pam14JnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/8sWq3iBM9wYecX3JTdNG7Ia3bJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/79c86f-89b4-432b-9543-ff1ee3030fcd/1/ZHEgPcvtauti27eYy_pam14JnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:fac0::/47
2a01:fac4::/44
Signature Algorithm: sha256WithRSAEncryption
65:bc:e9:c6:12:11:46:90:ae:d6:e5:d8:9b:45:68:2e:0e:ba:
1d:4f:60:bb:50:5e:54:11:62:e1:d0:b4:8e:b1:5a:05:c7:8d:
92:e6:d6:40:70:de:5b:03:92:46:68:94:f1:7d:ee:ee:38:77:
a5:07:73:d5:5b:db:a4:93:68:e8:9e:12:9a:36:4f:f6:35:f5:
7e:2d:64:2e:b0:e0:eb:d4:dd:c1:70:c0:15:04:dd:94:c2:77:
20:c9:78:86:1a:b3:aa:b8:dc:c7:32:73:c8:54:61:a0:ca:3e:
1b:94:e7:00:11:3d:b8:6a:8f:c1:14:86:63:3c:1d:1c:92:77:
6d:7c:4b:e7:bf:76:13:68:c7:c0:1e:1f:e6:e6:6d:b3:12:f1:
b8:ff:4a:04:af:f1:97:e7:a7:41:4c:16:0f:18:c9:7f:cc:9f:
d9:e8:0f:58:09:f2:e0:9e:29:70:d9:24:0c:0e:70:c3:3d:fe:
89:3c:51:66:36:ee:8a:47:27:c1:26:8b:55:de:fa:79:94:6c:
fe:87:6d:8e:c9:40:e2:b9:ec:b9:ce:77:c6:ad:b1:6d:c7:aa:
f7:77:9f:3d:fd:b8:81:5c:64:03:7e:77:d8:31:c3:60:db:f7:
25:fb:07:c4:23:7b:19:cc:fb:5f:ad:e2:dd:f6:84:07:20:55:
67:32:fb:c5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaCkKQc1d/27Kos3E0G0i28LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzEyMDNkY2JlZDZhZWI2MmRiYjc5OGNiZmE1YTliNWUw
OTljNGUwHhcNMjYwOTE1MDgyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmM1YWFkZTIwNGNmNzA2MWU3MTdkYzk0ZGQzNDZlYzg2Yjc2YzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMeghafBmv5y+A1Ww5Okq9Y7yVCt
DNOOpz416L00fyy2zwQlCMvUKngxhvY2UgX1XO2RUPRiQsM0Lye9yuQIqakMjazb
D83w4WzbUo4m3A7rq6DMxUocardeC+BDaLZMr2VAX4Cf7PqQptvYIKS3hUVdsziU
4TLGT6Rjf3MfeoAMkChy7Ax5ObmsR5X1CySa1/EtvlV/DgVwTMNTccCybAODYOds
rqgUnSAxbGW0FMiH/u+lPfBsc5ywo1llOs9kZCs14pae75GlVJPLxHNz2ylIqh8g
cLOqT5hS/82N+P6yg4syU2PIAjgLB8IawPnaZmrEHJFdBjBnu3rELlgWqQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPLFqt4gTPcGHnF9yU3TRuyGt2yRMB8GA1UdIwQY
MBaAFGRxID3L7WrrYtu3mMv6WpteCZxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhFZ1BjdnRhdXRpMjdlWXlfcGFtMTRKbkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83OWM4NmYtODliNC00MzJiLTk1NDMt
ZmYxZWUzMDMwZmNkLzEvOHNXcTNpQk05d1llY1gzSlRkTkc3SWEzYkpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83OWM4NmYtODliNC00MzJiLTk1NDMtZmYxZWUzMDMwZmNk
LzEvWkhFZ1BjdnRhdXRpMjdlWXlfcGFtMTRKbkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKgH6wAAA
AwcEKgH6xAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBlvOnGEhFGkK7W5dibRWguDrod
T2C7UF5UEWLh0LSOsVoFx42S5tZAcN5bA5JGaJTxfe7uOHelB3PVW9ukk2jonhKa
Nk/2NfV+LWQusODr1N3BcMAVBN2UwncgyXiGGrOquNzHMnPIVGGgyj4blOcAET24
ao/BFIZjPB0ckndtfEvnv3YTaMfAHh/m5m2zEvG4/0oEr/GX56dBTBYPGMl/zJ/Z
6A9YCfLgnilw2SQMDnDDPf6JPFFmNu6KRyfBJotV3vp5lGz+h22OyUDiuey5znfG
rbFtx6r3d589/biBXGQDfnfYMcNg2/cl+wfEI3sZzPtfreLd9oQHIFVnMvvF
-----END CERTIFICATE-----
Generated at Thu Oct 29 08:38:08 2026 by rpki-client