Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8hRctCHFpJD9cc73hd3wxMhQiqE.roa
File: 8hRctCHFpJD9cc73hd3wxMhQiqE.roa (raw, json)
Hash identifier: +g47VxPujIcCgQFH6R6LUIeYEOYfptvrRXsOBckaJAw=
Subject key identifier: F2:14:5C:B4:21:C5:A4:90:FD:71:CE:F7:85:DD:F0:C4:C8:50:8A:A1
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F47AE796276C9E855749C2679F87B2530
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8hRctCHFpJD9cc73hd3wxMhQiqE.roa
Signing time: Thu 09 Jul 2026 16:20:44 +0000
ROA not before: Thu 09 Jul 2026 16:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213124
IP address blocks: 2a06:9801:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:ae:79:62:76:c9:e8:55:74:9c:26:79:f8:7b:25:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 9 16:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2145cb421c5a490fd71cef785ddf0c4c8508aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:13:da:08:41:ac:01:65:50:6e:27:a1:7c:
bb:d8:13:d2:28:c4:ac:40:c1:cb:cc:2e:64:25:8e:
e7:a0:be:0e:76:4e:1c:6c:e8:db:06:5b:b3:88:33:
ba:5a:f0:ce:33:a5:52:6c:90:02:17:e7:b2:e9:02:
ec:eb:1d:34:27:da:1f:ec:56:c3:33:f0:c6:d2:9c:
d4:51:fd:52:e3:59:14:5a:31:93:69:18:88:09:71:
b3:2c:b5:8e:84:fe:80:4e:85:8a:89:e8:00:59:e2:
cf:03:c3:bd:d2:fa:11:7a:8d:08:e6:07:a1:59:95:
68:9d:d6:09:66:0f:5f:fe:30:11:05:77:f3:6b:fe:
bb:72:f9:c8:1d:f5:98:c0:26:3d:a2:8f:ad:aa:ca:
6c:59:55:93:2b:55:7d:ae:1a:a2:d5:0d:5f:85:48:
d8:41:89:b6:db:66:28:81:db:c5:bd:29:23:6e:e9:
1a:27:25:2d:c6:f7:43:a6:e0:60:bb:8b:54:7e:3b:
3f:79:55:35:5d:e6:4b:06:69:49:f1:aa:06:06:dd:
84:92:f0:0d:03:7e:53:44:c5:53:02:ea:f8:7a:ba:
ef:3a:e8:a0:8d:bc:7a:c7:c8:37:31:05:e2:1e:68:
fb:73:86:5d:4e:73:ee:9c:cf:63:28:61:b6:20:fd:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:5C:B4:21:C5:A4:90:FD:71:CE:F7:85:DD:F0:C4:C8:50:8A:A1
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8hRctCHFpJD9cc73hd3wxMhQiqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:18::/48
Signature Algorithm: sha256WithRSAEncryption
11:06:7d:64:ea:81:d7:bd:31:9c:3f:91:72:63:1c:04:88:e6:
f2:89:51:6f:6a:31:2b:f9:0e:4d:3e:5b:66:97:70:28:77:eb:
04:8c:bb:09:96:6b:66:02:05:05:5b:a9:ad:8a:a6:74:11:14:
b2:85:56:99:5a:bb:16:f0:5a:5a:ae:02:8b:f8:b7:8d:26:3a:
5c:d6:d7:ce:90:e9:21:c5:81:cc:10:da:5c:15:53:4e:40:29:
f3:fc:f5:e0:db:d7:5b:d5:c7:fb:12:51:15:d2:b3:f5:b2:f3:
da:b8:b7:b6:54:4c:37:24:b8:11:ed:65:d2:ed:ae:a9:c7:c6:
e4:29:3e:49:b6:29:fa:6f:82:54:70:06:46:75:e8:ee:b5:fd:
21:77:dd:74:79:fc:30:c5:b6:20:b6:6b:8c:29:ee:03:f2:2c:
16:83:e7:92:8c:10:a2:4a:67:31:ab:a8:13:d9:37:83:d8:fd:
3d:3e:77:f6:a4:eb:82:83:17:63:95:6e:11:6b:e8:58:be:19:
60:d8:37:86:4a:32:c7:2e:c6:21:ca:2c:7d:c6:12:e5:3a:11:
ed:84:98:74:72:66:f5:cf:e4:bf:74:ec:b6:47:a4:c9:95:09:
c7:cf:68:8f:28:62:f8:3d:61:87:b1:3d:23:59:78:9c:78:78:
8c:84:f9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:10 2026 by rpki-client