Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/V8qIhpXdZxJGz0OWGyQg8p_ezWM.roa
File: V8qIhpXdZxJGz0OWGyQg8p_ezWM.roa (raw, json)
Hash identifier: qbt0XoIUIGmTpXeLSAtggT8OM9weWSdYMLurKyj8ASg=
Subject key identifier: 57:CA:88:86:95:DD:67:12:46:CF:43:96:1B:24:20:F2:9F:DE:CD:63
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019D6E10121C2E99D1735B38501C972B4060
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/V8qIhpXdZxJGz0OWGyQg8p_ezWM.roa
Signing time: Wed 08 Apr 2026 17:07:20 +0000
ROA not before: Wed 08 Apr 2026 17:07:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 2a11:c940::/29 maxlen: 29
2a11:c940::/32 maxlen: 32
2a11:c941::/32 maxlen: 32
2a11:c942::/32 maxlen: 32
2a11:c943::/32 maxlen: 32
2a11:c944::/32 maxlen: 32
2a11:c945::/32 maxlen: 32
2a11:c946::/32 maxlen: 32
2a11:c947::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:10:12:1c:2e:99:d1:73:5b:38:50:1c:97:2b:40:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Apr 8 17:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57ca888695dd671246cf43961b2420f29fdecd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:39:81:ef:5a:a1:25:46:f4:6f:33:9d:5e:
37:ba:e0:01:0d:0d:3d:f5:53:cc:f9:cd:03:f4:ca:
e2:6f:1d:f1:f8:6b:28:bf:37:3e:59:b7:7b:41:c7:
5e:75:66:dd:8b:bd:88:54:f0:34:34:8f:57:78:21:
b7:46:5a:5d:9e:e6:dd:1f:a5:22:49:b2:90:fe:7c:
9e:f8:2b:98:8a:da:4f:e7:07:54:64:dc:50:d5:a5:
37:66:a3:79:f1:f1:d9:2c:05:ac:cf:23:45:8f:e4:
6d:c4:70:dd:2f:e9:e0:c3:1f:1e:a2:74:a9:5d:b9:
25:7f:70:d2:e8:d5:a4:13:e5:17:51:e9:f2:75:a7:
97:ce:0a:ef:e6:8a:72:fc:b8:e3:8d:b8:5d:34:99:
17:c3:a8:25:2a:38:fd:6b:0f:a1:12:77:44:b7:d8:
6f:9c:3f:02:9b:99:a8:f6:7b:ae:f5:00:07:1e:49:
69:1f:4d:94:42:f9:47:7a:17:4f:20:b5:a1:d7:38:
34:f4:d9:ec:9d:c8:8d:e3:45:52:f2:12:3a:d7:e7:
9a:d0:cd:c2:d2:77:5f:ce:c7:d7:1a:a7:46:19:2c:
6c:2d:9b:b3:b3:fd:11:bd:85:49:60:e3:d2:8e:2f:
1a:45:8c:cf:cf:0e:71:f6:92:e2:ed:73:98:2c:aa:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CA:88:86:95:DD:67:12:46:CF:43:96:1B:24:20:F2:9F:DE:CD:63
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/V8qIhpXdZxJGz0OWGyQg8p_ezWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c940::/29
Signature Algorithm: sha256WithRSAEncryption
08:b6:a8:9c:5b:96:6f:84:4f:da:e7:80:80:be:eb:e2:8c:fc:
db:eb:70:ee:82:fa:8d:e5:b1:c1:13:b6:19:ac:04:b8:1c:80:
b4:c8:43:c8:b7:25:9b:60:32:ee:a2:d0:2d:97:93:60:5c:55:
e6:6a:80:cf:17:51:a8:c1:48:62:88:63:4d:df:6e:f0:71:f7:
21:e1:47:14:e2:25:04:08:dc:65:34:d1:0c:90:d4:3a:45:c1:
58:49:22:a0:5f:2d:97:a1:ad:57:f9:dd:9b:ee:a6:0c:68:93:
04:a0:64:f1:1c:b6:cb:82:b9:52:be:ca:ff:bd:0e:28:a5:90:
88:7f:d5:2c:2e:56:a9:f6:31:71:0d:ee:9d:f1:48:c7:97:1f:
0a:12:c3:6a:99:cd:8a:ee:4f:01:bc:84:96:5e:c9:a5:60:5a:
5a:97:14:c2:4f:ec:5e:ed:15:36:64:0f:21:21:37:35:ad:75:
ff:ed:e4:e8:5f:2a:7f:ff:22:bd:6f:4d:9a:2e:65:95:31:28:
c5:58:4e:ab:63:ba:e4:9c:51:5e:ec:4f:3f:30:7a:73:d0:f0:
db:e3:0f:c7:11:ad:21:26:f0:0c:52:22:29:ea:f9:aa:1a:ec:
6a:b9:d5:1a:36:06:d0:8c:80:33:08:0e:69:39:70:c6:dd:ff:
f4:a2:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:13:19 2026 by rpki-client