Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/Bwg79WzNGXuNDZQSD0VsKUr5blo.roa
File: Bwg79WzNGXuNDZQSD0VsKUr5blo.roa (raw, json)
Hash identifier: /xVUo9naU8W1C7rWgQlkJRPv0Xsrg14Z0K50RIANuQ8=
Subject key identifier: 07:08:3B:F5:6C:CD:19:7B:8D:0D:94:12:0F:45:6C:29:4A:F9:6E:5A
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 01A0681E70C1EACF19DAF617AD825A12ACE0
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/Bwg79WzNGXuNDZQSD0VsKUr5blo.roa
Signing time: Thu 03 Sep 2026 16:33:40 +0000
ROA not before: Thu 03 Sep 2026 16:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214017
IP address blocks: 2001:678:f78::/48 maxlen: 48
2001:67c:f3c::/48 maxlen: 48
2001:67c:f3c:c333::1/128 maxlen: 128
2001:67c:1870::/48 maxlen: 48
2001:67c:26e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:1e:70:c1:ea:cf:19:da:f6:17:ad:82:5a:12:ac:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Sep 3 16:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07083bf56ccd197b8d0d94120f456c294af96e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:47:46:39:b1:ac:5e:8d:1d:af:09:28:54:
c7:90:b4:9c:8d:37:46:f1:e7:cb:5e:ac:7f:07:a3:
55:6b:a5:63:82:69:42:71:77:16:76:c6:7f:b4:c8:
cf:1d:5e:28:82:b9:51:3e:93:8b:14:84:05:54:c1:
b3:b3:7e:be:f1:18:a0:45:d1:fa:63:7a:6c:d5:bb:
cf:c1:61:0c:c6:c4:ef:11:5f:ae:4e:3e:a7:54:b3:
de:48:35:02:99:96:b3:c9:27:f5:7d:4c:ac:d6:75:
3b:e8:c0:50:bc:99:b8:b9:63:20:e0:ad:9f:5b:53:
19:17:04:24:9c:1c:be:1f:aa:ef:ea:a4:34:25:76:
58:77:2d:01:74:e8:b7:24:47:fe:83:73:19:db:cf:
ca:13:5a:6b:14:25:7d:64:3a:8b:de:a3:fc:e0:92:
ee:78:b6:c8:3a:7c:a6:37:db:6c:ca:ae:6c:a5:89:
47:69:3e:ef:21:1a:50:c8:8b:7b:22:c4:5c:f9:d3:
94:30:14:1a:f8:fb:69:07:96:03:8c:3f:be:28:03:
62:dd:ac:8d:f2:7d:94:0e:ec:0b:5c:73:94:52:d5:
1b:5c:06:04:60:e2:d1:22:cc:8c:49:79:40:39:25:
14:d1:25:be:7f:58:00:a7:2e:6c:a2:c6:2e:73:30:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:3B:F5:6C:CD:19:7B:8D:0D:94:12:0F:45:6C:29:4A:F9:6E:5A
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/Bwg79WzNGXuNDZQSD0VsKUr5blo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f78::/48
2001:67c:f3c::/48
2001:67c:1870::/48
2001:67c:26e8::/48
Signature Algorithm: sha256WithRSAEncryption
92:66:9f:d1:60:7f:7b:36:52:4f:9c:1e:98:8f:2d:9f:24:60:
76:f8:c0:4b:f1:03:14:69:fc:27:7f:a2:59:75:f9:d3:9e:d3:
8b:a5:61:16:0f:0e:03:93:38:c2:f6:46:53:6f:34:c6:c2:94:
56:a5:1e:dc:44:09:4d:6a:12:de:01:71:52:b6:69:49:aa:ed:
40:dd:f6:c8:1d:01:5e:c5:b4:db:04:3e:f4:7e:d4:ec:65:f6:
2f:1b:1f:57:ce:61:f0:c4:b9:59:c4:26:d5:82:4f:27:43:18:
50:1a:00:01:68:84:1b:49:11:8b:3d:da:7a:71:a0:a6:8b:e0:
e4:ac:db:55:b0:82:dc:22:57:36:e1:2a:54:e7:b7:91:dc:68:
de:dd:4b:02:a6:15:52:57:75:fb:76:53:15:71:1c:e5:cb:64:
df:17:62:0b:7d:b9:28:1c:8e:da:7a:38:ed:0d:2c:36:94:e4:
21:0a:0d:c0:c6:98:ea:19:7e:3d:3d:72:ec:fc:a8:ba:c2:40:
83:1d:4a:3f:92:af:68:8a:12:07:78:c8:ac:e3:00:6e:ee:cc:
ca:d8:f7:b1:8c:35:4a:b9:88:fd:a4:fa:9e:45:82:e3:75:bf:
49:0d:2d:49:9b:18:05:4e:45:0e:62:cb:10:32:3c:a2:de:26:
cc:dc:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:15 2026 by rpki-client