Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/8IaNzILRluMfhJGh9Sp2iK5EyEM.roa
File: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (raw, json)
Hash identifier: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=
Subject key identifier: F0:86:8D:CC:82:D1:96:E3:1F:84:91:A1:F5:2A:76:88:AE:44:C8:43
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019C9E914817618A0748CE5135A3F5AF199D
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/8IaNzILRluMfhJGh9Sp2iK5EyEM.roa
Signing time: Fri 27 Feb 2026 10:07:27 +0000
ROA not before: Fri 27 Feb 2026 10:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152913
IP address blocks: 2a0a:c7c7::/32 maxlen: 48
2a0a:c7c7:200::/40 maxlen: 48
2a0a:c7c7:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:91:48:17:61:8a:07:48:ce:51:35:a3:f5:af:19:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Feb 27 10:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0868dcc82d196e31f8491a1f52a7688ae44c843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:50:b5:96:97:8d:f8:14:c2:95:f1:d0:26:
52:f8:15:a5:31:d8:cb:58:67:47:e6:a2:5a:84:a8:
dd:91:c4:49:14:ea:18:35:08:01:d9:5f:f9:75:f0:
ca:f7:02:6f:07:ca:9f:1c:18:ce:6e:f8:7d:9c:0f:
45:bd:89:f2:cb:96:15:33:c6:3e:eb:4a:0a:e1:f8:
09:0f:e5:fb:4f:72:1c:8f:58:fd:ca:cb:a3:4b:c1:
2e:eb:68:a1:c6:ca:94:f8:da:10:7b:ae:0a:1a:63:
fe:01:20:a7:43:3e:e0:a7:d4:e7:e6:e9:5d:c6:fe:
15:76:50:c3:31:78:6c:16:74:d1:e8:47:60:46:e2:
58:53:cb:c4:17:54:ac:f3:5c:cf:7f:41:26:b4:42:
b9:b9:de:e9:57:94:8c:2e:0a:5b:06:cb:51:ec:ff:
0a:0c:8f:57:5e:e7:4a:7a:93:6a:0c:ac:e3:bb:e3:
73:db:87:c3:be:31:6a:13:d9:31:ca:97:c8:64:9b:
76:1f:23:77:f6:49:72:d2:68:6e:0f:42:21:5c:07:
bc:2c:af:3f:b1:76:be:8a:f9:86:f5:4d:9d:74:17:
f1:8a:ac:9e:c0:2a:3c:ea:ca:a4:3e:df:84:1c:2e:
a8:97:09:02:8a:70:10:a0:19:b8:3a:56:23:32:54:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:8D:CC:82:D1:96:E3:1F:84:91:A1:F5:2A:76:88:AE:44:C8:43
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/8IaNzILRluMfhJGh9Sp2iK5EyEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c7c7::/32
Signature Algorithm: sha256WithRSAEncryption
32:60:52:77:81:bf:3d:7e:26:18:0d:05:01:e0:b1:78:03:03:
15:4e:65:e4:69:a8:45:28:4a:fa:86:83:a7:51:15:8c:6f:8c:
a8:64:ee:d8:4f:de:a4:74:45:74:c8:80:d0:31:42:7b:5a:f0:
5b:40:ab:1d:78:c8:77:90:64:dc:65:ee:04:2b:09:01:f8:3e:
4b:6e:c4:a0:9a:20:cc:40:d2:79:31:ef:76:36:dc:2a:95:f2:
6c:e8:75:98:53:ef:91:3b:09:23:ae:de:24:97:a7:fe:7b:b4:
d3:41:c6:c3:dd:d8:0e:b9:7c:ee:ea:b1:11:dc:fc:c7:bf:e3:
51:08:44:2c:d5:34:c5:5d:04:dd:f9:04:59:7c:cb:05:78:f0:
ae:93:10:03:ce:6b:aa:69:0a:63:53:99:8a:81:b4:fc:b9:5f:
f7:21:32:fd:ba:c7:bb:70:e6:f4:e3:f1:6d:e0:b7:73:50:75:
08:e5:9a:e9:bb:ac:15:e1:c9:f8:6a:68:90:60:fc:90:b6:87:
a7:88:6c:2d:79:a2:9f:fe:e5:6b:e7:ec:e6:0b:92:a2:61:d6:
76:46:2c:2d:98:bf:dc:55:91:55:f7:92:0a:a6:23:85:97:62:
ec:5e:44:f6:22:64:c9:d8:29:fe:be:8a:f0:7f:6c:c4:da:46:
14:d3:46:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:34:18 2026 by rpki-client