Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/z8NnESnMm31CkiNiQFk0utGBdX0.roa
File: z8NnESnMm31CkiNiQFk0utGBdX0.roa (raw, json)
Hash identifier: arwsZJiyIecZlyuebzhSrVKYoD98u/qSY1idgg5RXrA=
Subject key identifier: CF:C3:67:11:29:CC:9B:7D:42:92:23:62:40:59:34:BA:D1:81:75:7D
Certificate issuer: /CN=2e262d76596975589c34e6086cee9faf29ce752e
Certificate serial: 01A029E7BB4BFBC4BDD463F61098E3648FB8
Authority key identifier: 2E:26:2D:76:59:69:75:58:9C:34:E6:08:6C:EE:9F:AF:29:CE:75:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/z8NnESnMm31CkiNiQFk0utGBdX0.roa
Signing time: Sat 22 Aug 2026 14:37:27 +0000
ROA not before: Sat 22 Aug 2026 14:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 159.200.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:e7:bb:4b:fb:c4:bd:d4:63:f6:10:98:e3:64:8f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e262d76596975589c34e6086cee9faf29ce752e
Validity
Not Before: Aug 22 14:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfc3671129cc9b7d42922362405934bad181757d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:8f:ea:d2:1a:a5:03:c3:ab:b8:db:47:0f:
c9:0c:03:c0:de:aa:ad:36:fd:4d:4f:80:45:80:ee:
07:e3:0c:c8:b8:8f:84:3b:06:91:f0:f7:26:db:b2:
93:87:15:ce:02:c2:e0:05:5d:82:13:38:21:12:2a:
14:32:19:9d:3b:72:e2:fe:ca:57:2e:c9:6f:52:8e:
28:97:a2:19:80:f9:ce:73:0b:61:63:12:de:a8:64:
57:ef:4d:57:06:30:61:c8:59:2d:51:03:ef:b1:d7:
49:ed:ae:2e:9f:eb:02:da:dd:85:3b:6c:24:28:40:
77:d8:d2:a7:92:4e:0e:5a:a7:ce:1e:e9:8b:7e:2f:
14:c4:08:21:83:a7:cf:8e:0a:83:95:25:d6:db:d6:
dc:b5:fd:9e:6c:3a:a6:b4:db:7c:07:48:fc:d2:61:
d2:f1:f6:c4:21:b7:ab:e2:c7:8a:de:8e:ad:b5:f2:
05:09:d9:10:11:df:a1:bd:a2:6f:c6:16:9e:8c:e5:
4f:95:87:e3:22:27:06:81:83:24:c5:b3:a4:07:65:
3b:14:c0:60:93:7d:75:39:01:7d:aa:ec:eb:77:06:
42:51:f0:1b:3a:84:b0:6e:a6:66:a4:38:43:0e:c4:
32:2b:d2:b1:0a:c9:fc:c5:c1:45:ea:30:36:23:00:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:67:11:29:CC:9B:7D:42:92:23:62:40:59:34:BA:D1:81:75:7D
X509v3 Authority Key Identifier:
keyid:2E:26:2D:76:59:69:75:58:9C:34:E6:08:6C:EE:9F:AF:29:CE:75:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/z8NnESnMm31CkiNiQFk0utGBdX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.200.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:67:6a:e5:0c:3a:f8:e5:fa:e4:43:3f:51:25:95:38:0d:b6:
47:12:26:6f:6a:7f:f7:0d:9e:9d:28:ae:17:b1:f3:ea:15:c1:
0e:5e:dc:55:36:dc:f1:35:bc:63:35:9c:f9:f6:e6:a2:df:0e:
9e:83:1d:6c:30:f7:90:1c:ad:1c:fa:36:f4:e8:b8:d5:72:66:
fc:f2:30:e6:98:df:4d:b7:46:6a:2b:c3:43:64:33:1d:8f:84:
b4:92:cf:a8:41:ad:01:b3:62:3f:6c:13:b9:fb:db:c2:8b:49:
56:5f:4d:6a:e7:34:cf:27:ca:d9:11:dc:49:40:64:a3:26:d8:
5d:58:0c:02:81:e0:7d:c1:b4:c9:c1:4f:71:03:81:4a:92:b5:
7e:c1:4b:cf:b3:14:5a:66:e4:e6:3c:da:d5:dd:6f:19:86:17:
23:fd:90:1d:d5:5c:0b:cd:2a:57:52:e2:9f:ff:06:60:76:a5:
d2:ef:68:cd:1c:f8:45:b3:7d:c6:1a:d9:2f:a3:14:d3:59:c6:
54:4b:f6:d1:fa:44:1b:7c:33:d8:ca:e8:4d:b8:73:24:8c:0f:
9a:51:99:97:90:99:f7:79:22:a5:4d:bc:d2:19:aa:59:2f:ae:
e5:18:bc:a9:01:ec:0d:c7:a4:37:64:d6:79:81:20:14:d4:ef:
25:07:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:37:19 2026 by rpki-client