Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0c8l_6pKl277KcDwCiIZIiwx2lw.roa
File: 0c8l_6pKl277KcDwCiIZIiwx2lw.roa (raw, json)
Hash identifier: lVNQ1v3pwByoOh5GDJEgUOw+1l5k4kyvnsrQ4aoGpVM=
Subject key identifier: D1:CF:25:FF:AA:4A:97:6E:FB:29:C0:F0:0A:22:19:22:2C:31:DA:5C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A176BD16A45E441053E0406CE221276244
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0c8l_6pKl277KcDwCiIZIiwx2lw.roa
Signing time: Mon 26 Oct 2026 05:44:25 +0000
ROA not before: Mon 26 Oct 2026 05:44:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 162.35.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:bd:16:a4:5e:44:10:53:e0:40:6c:e2:21:27:62:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 26 05:44:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1cf25ffaa4a976efb29c0f00a2219222c31da5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:80:96:1d:87:19:1d:51:3b:4a:df:ca:ec:
86:82:6a:8a:cc:83:f6:64:b2:84:6c:ef:fe:59:7f:
38:0f:34:9c:9d:3a:cd:09:a7:91:d1:eb:d3:4f:aa:
13:38:c4:61:f6:61:57:b3:a6:59:94:36:30:63:7b:
03:eb:5c:b1:e9:13:23:36:c6:89:3b:81:3e:c4:13:
46:64:7b:bc:ac:c6:57:5f:9a:1d:69:c1:3c:da:d7:
c3:86:8b:61:82:a1:84:29:c2:f4:23:7a:c3:ca:ec:
bb:92:2b:a0:ce:60:d5:85:ee:0d:02:6a:f6:ee:ea:
19:39:38:fd:bd:c8:fa:0a:24:cd:1f:b6:f7:30:d8:
25:99:0a:b2:d8:f6:3d:af:d7:2b:26:04:cf:71:fb:
1b:49:4f:40:a4:f3:52:bc:bc:18:26:bf:96:dc:e6:
e0:e6:3a:7a:12:6d:a2:95:3a:f7:9f:1c:bd:9d:ef:
94:05:ae:8f:a9:2b:37:5b:6b:34:0a:73:85:02:c2:
1e:37:d5:51:dd:7b:ea:69:a1:39:31:92:42:b6:1b:
8d:ff:92:d1:94:af:08:ec:68:0c:fe:0e:6b:3f:9f:
c3:6c:32:e9:13:90:1e:ad:cd:28:6c:53:64:8e:43:
48:45:cc:89:15:50:1f:79:40:c3:bb:6c:6e:52:27:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:25:FF:AA:4A:97:6E:FB:29:C0:F0:0A:22:19:22:2C:31:DA:5C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0c8l_6pKl277KcDwCiIZIiwx2lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.35.231.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3c:4d:da:d9:63:72:a4:0f:5e:4e:44:ff:9c:ee:d5:88:75:
c0:44:91:e9:79:1d:ab:a0:2f:7d:4d:27:86:e2:69:73:83:77:
0a:16:7b:3c:b9:dc:b6:db:5b:73:6f:c7:46:14:a8:f2:a0:58:
5a:b4:d9:54:f1:ef:87:51:29:64:6c:35:f9:b5:8c:9d:b4:01:
97:2a:41:d0:0a:69:35:05:37:91:ea:46:7a:37:42:c9:73:00:
c8:60:dc:84:87:5d:0d:79:e1:ce:75:6f:a6:79:ac:2e:c1:3a:
55:2c:b5:96:26:5b:76:e7:bf:8e:a1:4b:92:6f:ac:ed:ea:36:
23:30:aa:d8:6e:36:3c:0a:65:19:74:86:5c:17:de:04:70:30:
90:8e:0a:15:0c:9f:8c:12:58:1b:81:91:b7:7e:e2:55:2a:e2:
cc:7b:bb:57:40:9f:5a:59:b6:2b:67:5f:55:c7:3f:a9:04:61:
00:04:55:97:1d:fa:2c:11:3e:f0:a5:cd:ad:59:bf:a5:d4:4c:
93:d4:8a:aa:92:7c:97:af:bb:18:47:6c:a8:96:ce:af:bd:67:
bd:aa:2e:92:25:af:a3:81:1c:9b:6b:87:c3:10:57:a1:f8:40:
9d:6e:a3:34:d2:0a:e0:e4:60:a7:9b:3a:fb:ee:27:17:27:9c:
35:43:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:57:57 2026 by rpki-client