Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/8w5O_aWA-iC3XSFytQzyWAwkxBU.roa
File: 8w5O_aWA-iC3XSFytQzyWAwkxBU.roa (raw, json)
Hash identifier: Q/iVM9hXeiPLXmIvOeOkM8vWEHG4S+hzrZyqZ+mibGo=
Subject key identifier: F3:0E:4E:FD:A5:80:FA:20:B7:5D:21:72:B5:0C:F2:58:0C:24:C4:15
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 019C9F0B0D12ACE6751505F85211776F521C
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/8w5O_aWA-iC3XSFytQzyWAwkxBU.roa
Signing time: Fri 27 Feb 2026 12:20:27 +0000
ROA not before: Fri 27 Feb 2026 12:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39287
IP address blocks: 2a0e:d9c0::/29 maxlen: 29
2a0f:5e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:0b:0d:12:ac:e6:75:15:05:f8:52:11:77:6f:52:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Feb 27 12:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f30e4efda580fa20b75d2172b50cf2580c24c415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3e:5d:6c:84:87:89:77:93:f4:0f:4d:6c:59:
b8:42:17:11:96:a6:36:03:cd:76:d2:15:22:18:3b:
72:31:51:34:e4:6d:29:ba:f2:36:27:12:af:f4:e0:
fa:be:fa:b2:23:bb:1e:9e:96:50:4e:52:92:fa:65:
cf:b1:b4:8b:7b:14:e6:45:82:6c:e7:f2:5f:9d:90:
00:9d:ec:60:36:ce:ff:59:c2:53:4d:94:f1:58:d8:
1e:4f:e8:ef:5d:b6:41:09:b4:19:15:07:b9:2e:6d:
97:8a:c5:60:64:4a:6b:b8:da:1b:85:63:82:20:be:
d7:69:8d:64:c7:4d:8f:06:91:d4:e3:b0:9e:44:ad:
fd:8b:59:66:de:44:71:de:73:71:d1:37:27:3d:f2:
f6:3f:54:41:ec:be:b5:7f:2e:c5:6c:a8:a1:c9:8e:
6b:8f:3d:f9:80:30:46:f1:a8:70:bf:9b:ed:f4:99:
d2:c5:a4:c9:63:41:f4:02:40:52:71:a9:d5:53:cb:
fe:e4:c6:1c:71:fe:26:73:5e:ca:8c:94:f9:07:d2:
27:3e:95:8f:36:43:ae:2d:88:e5:e5:30:9a:4c:ac:
26:92:6d:6a:68:c0:e4:91:85:9e:62:49:2a:b3:10:
df:67:af:5f:4c:bf:79:a8:9c:78:37:2d:c4:4d:54:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0E:4E:FD:A5:80:FA:20:B7:5D:21:72:B5:0C:F2:58:0C:24:C4:15
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/8w5O_aWA-iC3XSFytQzyWAwkxBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d9c0::/29
2a0f:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
1c:ba:c5:50:cf:83:da:cd:f6:6e:ae:89:3f:6d:9e:30:a8:d2:
dd:96:90:4b:44:86:13:fe:99:ee:90:32:d6:18:87:db:b9:46:
d7:e9:80:08:58:8a:68:9d:d9:26:4d:17:14:89:52:ca:47:3c:
01:70:5a:6f:99:0d:fe:b4:db:4d:a9:7d:73:8b:bc:99:01:29:
3b:40:7b:db:7c:62:f5:b2:5a:fa:b2:57:ad:9b:b5:de:64:04:
a9:75:3a:5e:8c:a3:77:ae:ce:4c:a0:d0:12:10:0c:28:d4:de:
0b:fb:7c:81:0f:03:a6:dc:02:1e:9a:e0:c7:76:6f:df:bb:e9:
c9:41:f7:0a:57:3a:21:44:aa:99:7d:ca:f6:76:a6:cb:62:ef:
3a:9a:5b:00:1c:c1:14:59:50:92:91:4d:1a:16:6e:2b:32:81:
99:56:46:3f:81:cc:3d:ec:10:b6:7c:c2:38:b6:1a:e2:92:2c:
26:f4:ab:a8:25:a4:0e:d9:b6:86:7d:8e:a7:9f:ea:76:92:a1:
1d:1b:33:83:3b:a1:9e:d8:3f:f4:ce:e9:3c:f0:2a:eb:6e:3b:
93:8c:0d:a9:bb:5c:5b:66:e6:e9:1b:19:79:1e:40:1e:ba:6c:
c9:3f:8f:c8:dd:b4:23:7d:7d:e0:d8:91:0b:6c:05:9a:83:e9:
e5:fc:24:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:38:17 2026 by rpki-client