Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa
File: 8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa (raw, json)
Hash identifier: ALf2f0JzISd3UyPZWmsk9XvraX01Mwn8kdYoc4TunL8=
Subject key identifier: F0:7A:F5:B9:36:27:F7:E8:8B:BC:9B:07:76:DB:0B:E4:97:F7:85:98
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019CA0A8DD7DDF1AAF9E05B10070DB620735
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa
Signing time: Fri 27 Feb 2026 19:52:27 +0000
ROA not before: Fri 27 Feb 2026 19:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212369
IP address blocks: 185.65.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:a8:dd:7d:df:1a:af:9e:05:b1:00:70:db:62:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Feb 27 19:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f07af5b93627f7e88bbc9b0776db0be497f78598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:10:fa:95:18:f4:e3:c6:5a:7d:d2:b3:e0:
1a:2a:b0:7e:2a:45:44:ba:17:44:32:b8:73:c0:60:
a0:77:be:b4:14:ba:f3:e8:36:92:ed:f1:92:5c:1d:
1f:d3:81:fe:d2:8b:b6:1c:ce:04:75:57:5f:68:b4:
e0:ca:aa:90:a9:27:03:d7:3f:0f:13:7a:fb:94:e4:
87:b7:0b:ea:4b:90:08:e3:4f:1b:92:5f:0e:2f:07:
99:0e:b6:16:3a:ad:d7:b5:60:c2:4b:54:8d:c6:2e:
2e:a8:0c:b0:b1:d9:db:e6:9d:fd:ed:00:89:a9:98:
2c:0b:78:ce:19:cb:ca:54:8f:aa:09:16:6f:f5:80:
59:6f:b3:e4:ff:8c:cc:83:96:fc:4a:a0:a3:6e:da:
21:76:82:46:3a:f8:c9:35:68:2f:c3:43:05:2f:20:
25:ce:6a:5d:b8:03:bf:ec:9f:33:a4:49:9c:97:dc:
6f:34:8e:bc:8b:38:e6:a1:2c:ff:df:d3:27:c4:84:
cb:86:0f:26:4d:4b:07:26:2f:b1:be:96:61:00:62:
85:68:d4:cd:4e:0a:1e:15:e8:f7:e1:83:90:9b:2d:
c8:8d:f6:d8:21:d0:37:0f:7c:e5:57:70:1f:69:6f:
7e:73:65:bb:b3:8e:56:f2:d0:4f:02:e7:f7:63:e1:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7A:F5:B9:36:27:F7:E8:8B:BC:9B:07:76:DB:0B:E4:97:F7:85:98
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a1:8a:89:50:b5:72:bd:01:d9:20:84:92:7f:bb:e9:f8:b0:
59:79:c2:ec:84:d1:ac:90:94:87:57:f6:e3:75:93:03:11:ae:
3f:38:11:d9:5f:dd:27:66:47:57:7a:c6:2c:41:2a:f4:90:6a:
01:90:63:be:a8:8f:26:9a:92:55:f4:c3:66:b1:90:0f:2b:dd:
21:84:e3:16:7b:35:86:f5:72:cc:ea:12:bd:11:ec:43:36:cd:
57:44:f2:6c:b6:e9:81:a0:be:62:4d:2e:47:32:fc:3d:4d:2f:
8c:05:15:86:48:c5:28:59:63:91:9c:fd:3b:a2:56:01:6d:42:
88:28:de:49:d6:25:85:ea:b8:99:b8:18:22:be:df:65:79:7b:
e5:5c:97:4b:9e:33:dc:4f:78:18:dc:dd:27:a9:b1:50:cc:b2:
a7:08:60:9e:07:3c:b3:4c:14:a6:22:05:ad:8e:4e:da:1e:eb:
94:6a:09:ae:49:14:ac:7d:39:5c:d4:06:2a:56:1a:68:f5:5e:
36:46:81:dc:4a:38:af:93:2c:f9:c6:30:e6:30:70:b1:13:d3:
e0:3c:16:26:59:e9:c9:70:02:47:9f:13:ff:19:6a:4d:45:4d:
c8:5d:d0:08:9b:cd:4a:af:db:b2:7e:77:af:30:5f:01:56:97:
01:9b:84:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:23 2026 by rpki-client