Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/_IpDACBsZMbScuGMBl89ukS0we8.roa
File: _IpDACBsZMbScuGMBl89ukS0we8.roa (raw, json)
Hash identifier: XGdoR2Dqje9kO00dw3KBe8qTky3l0qaCLX0c+Z0GJ58=
Subject key identifier: FC:8A:43:00:20:6C:64:C6:D2:72:E1:8C:06:5F:3D:BA:44:B4:C1:EF
Certificate issuer: /CN=028b110f19b1fe54898e9589afc63f903749dff5
Certificate serial: 019FA29EF51E37C0A3181110FEA530505C3C
Authority key identifier: 02:8B:11:0F:19:B1:FE:54:89:8E:95:89:AF:C6:3F:90:37:49:DF:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/_IpDACBsZMbScuGMBl89ukS0we8.roa
Signing time: Mon 27 Jul 2026 08:09:14 +0000
ROA not before: Mon 27 Jul 2026 08:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 138.40.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:9e:f5:1e:37:c0:a3:18:11:10:fe:a5:30:50:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028b110f19b1fe54898e9589afc63f903749dff5
Validity
Not Before: Jul 27 08:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc8a4300206c64c6d272e18c065f3dba44b4c1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:e1:00:57:a9:d9:2e:bd:f0:2e:97:a8:75:
f6:7a:b2:23:25:58:cb:00:6f:b2:32:08:04:7d:54:
d6:ce:e2:d9:70:e1:4b:b4:4e:d1:6e:cb:62:ea:22:
c1:ca:bb:4e:36:3c:92:54:6e:af:fd:e9:fd:04:0c:
0d:bd:d7:08:1e:16:a1:cd:93:14:8a:7d:7d:14:c6:
29:40:15:d6:4d:de:98:27:ac:57:f8:dc:dd:cb:5b:
54:64:a2:d1:8d:1d:ff:6d:a3:8f:09:aa:c9:6f:36:
5c:e3:c6:dd:41:44:4a:03:42:04:f5:25:c3:f7:0f:
c6:83:5f:46:b2:5a:e0:ac:f9:cc:c4:d5:36:aa:9d:
4f:bb:56:e8:89:40:f7:9b:63:b2:61:73:b3:82:1b:
6f:f0:21:e6:36:e2:c4:cc:88:de:fa:1a:9a:19:d3:
33:a7:d7:57:79:db:32:b6:16:9b:2c:0e:50:54:c2:
87:c8:df:4b:33:70:6f:10:20:d6:49:56:39:e5:42:
b1:6c:67:95:9a:81:ac:ea:bf:3a:ce:bc:70:91:b9:
c9:17:24:fc:f5:d7:55:1b:ab:37:04:9c:23:f5:db:
11:58:1f:70:a6:3d:0a:71:81:96:01:f7:cf:79:27:
c5:42:a4:09:d6:52:ef:ad:d3:cb:4a:c7:f5:d8:c7:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8A:43:00:20:6C:64:C6:D2:72:E1:8C:06:5F:3D:BA:44:B4:C1:EF
X509v3 Authority Key Identifier:
keyid:02:8B:11:0F:19:B1:FE:54:89:8E:95:89:AF:C6:3F:90:37:49:DF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/_IpDACBsZMbScuGMBl89ukS0we8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.40.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:24:54:5e:d1:65:97:91:02:59:9b:3a:0a:ef:12:aa:b8:a8:
1d:ec:c1:3b:88:7f:47:50:75:0c:2d:66:c6:a7:da:86:ff:e3:
20:fa:9f:1c:0a:11:37:0b:bf:36:81:ce:15:85:d5:57:ad:20:
a2:9c:9b:bf:a9:f9:80:c4:88:1d:6b:c8:cc:7b:32:c6:0e:a2:
5d:e9:0d:5f:36:00:1c:1a:db:0b:76:40:ad:74:d8:11:ac:eb:
a0:02:a8:6f:26:fc:5b:de:14:6c:d4:45:2f:d9:c8:91:41:a6:
76:c6:e7:6e:c7:36:ac:d4:3c:2c:82:1a:53:30:e9:1a:a8:49:
26:44:b3:41:05:0e:d7:36:67:9d:d9:30:9f:4b:62:48:b0:ad:
a0:ad:e6:0b:dd:0b:64:66:af:e0:e2:7c:09:aa:1f:0d:a8:3d:
d5:b5:ba:b0:e3:9d:9a:64:88:43:b7:c7:29:fe:59:74:69:0a:
6e:31:ab:02:b6:ad:7f:7a:32:f4:9f:3d:24:29:5c:1d:1d:69:
fc:81:48:7e:e7:29:22:c5:f3:bd:85:a8:7c:a6:8b:aa:8f:e6:
67:b1:1b:da:43:93:0c:f0:ff:af:dc:1f:39:6f:c8:28:35:e4:
d7:6d:c0:16:c5:83:b1:ec:be:4e:6e:04:7d:e8:95:01:f8:fc:
4b:23:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:38:05 2026 by rpki-client