Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/8ZZTeJpDBcDE73u8m41H0-lGPPY.roa
File: 8ZZTeJpDBcDE73u8m41H0-lGPPY.roa (raw, json)
Hash identifier: 8m61DCUJ11WDE8bG7zcJxhYtu4vlHHTEEUTPQVhJRkE=
Subject key identifier: F1:96:53:78:9A:43:05:C0:C4:EF:7B:BC:9B:8D:47:D3:E9:46:3C:F6
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 01A0E82B20A2F12AA5AA861A890BF0A31C93
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/8ZZTeJpDBcDE73u8m41H0-lGPPY.roa
Signing time: Mon 28 Sep 2026 13:18:55 +0000
ROA not before: Mon 28 Sep 2026 13:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59828
IP address blocks: 185.70.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:2b:20:a2:f1:2a:a5:aa:86:1a:89:0b:f0:a3:1c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Sep 28 13:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f19653789a4305c0c4ef7bbc9b8d47d3e9463cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:57:af:bb:5f:9d:dc:9d:48:d0:3d:d0:4b:
dc:a6:6f:bc:5f:d9:61:62:ff:46:f0:bf:52:66:f2:
8d:18:ef:16:d6:1a:cf:f3:f7:cd:31:8e:5f:60:e1:
b5:fc:5f:71:f0:42:0b:18:35:22:8d:f9:3a:66:3d:
b1:f0:a4:03:f4:25:09:14:99:60:c7:85:24:51:97:
44:17:a9:dd:0d:c5:64:9e:70:35:72:18:7e:d7:9d:
e1:60:f9:30:16:35:b1:bf:ac:76:d0:c6:f6:30:b4:
24:d0:09:d6:b6:a9:13:4f:8c:1b:52:ce:54:1a:4b:
42:73:bb:61:4e:b4:1a:a2:ff:e6:a5:f6:07:9a:1b:
5d:c9:e1:4e:d1:d1:60:86:70:77:f5:2e:ae:07:f3:
57:57:0a:48:4b:84:fd:59:60:1f:eb:d5:79:49:a2:
54:c5:f3:56:32:2f:42:45:e1:20:bb:88:57:c0:2d:
47:0c:75:35:66:68:64:31:13:9e:67:96:e6:74:8b:
c2:e7:90:66:b7:3c:24:2a:7c:a7:8c:4e:f2:a7:e6:
c9:c8:15:ae:65:d1:b5:12:f3:18:ab:0c:1c:78:95:
57:cb:77:d8:14:e7:10:9c:7a:15:c5:a5:1b:a3:cc:
2c:e0:e6:b2:05:f4:c6:21:f4:a3:a5:78:0f:e8:04:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:96:53:78:9A:43:05:C0:C4:EF:7B:BC:9B:8D:47:D3:E9:46:3C:F6
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/8ZZTeJpDBcDE73u8m41H0-lGPPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.36.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:b0:3d:75:9b:0c:0d:d5:9b:13:0f:46:e3:f1:4a:56:87:8b:
c8:3c:1a:ed:f6:26:38:b4:6e:c1:2b:35:21:48:bd:71:14:52:
09:08:f4:90:9a:c7:55:67:1f:aa:16:7c:ed:67:c3:4d:b3:ab:
c1:b1:20:05:d5:ba:ad:a0:33:4b:44:8f:11:4a:90:fa:77:cb:
6f:b0:26:69:8e:85:3c:2e:84:bc:21:b5:4d:f7:67:40:bf:36:
3c:1d:aa:aa:0a:27:72:c0:2e:4e:b9:c0:a0:6c:b3:32:b7:3f:
6e:27:4a:01:e5:ae:f4:5b:cc:3c:86:6e:e9:f3:a8:03:04:ff:
36:4d:e0:25:ef:6d:c5:b7:1a:22:a7:8e:ed:b0:7a:38:29:3a:
a1:30:1d:ec:90:81:14:14:e2:31:33:97:20:17:6f:4e:de:2a:
89:87:9c:38:f5:8b:b9:f9:7e:44:a4:19:48:67:ef:7d:19:bf:
7f:bc:5a:57:ce:7e:d4:f9:21:b3:d3:33:a9:7e:36:f3:52:fa:
a1:32:5c:05:e5:a3:51:04:cd:4c:f0:19:80:6b:13:5c:c1:6d:
87:85:42:8f:ec:49:30:53:4a:3c:fa:b8:d1:f1:cf:2d:29:15:
88:fd:fd:bf:97:e8:44:0d:06:f9:9b:1f:07:84:6a:f2:fe:12:
85:0d:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:33:29 2026 by rpki-client