Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/H8dMsf8QtugmggF2iMoFflOsZM8.roa
File: H8dMsf8QtugmggF2iMoFflOsZM8.roa (raw, json)
Hash identifier: PZPW581Oe5q4Dva6P0wu0eLhLStSSj+Ttl8NhZ/xkvU=
Subject key identifier: 1F:C7:4C:B1:FF:10:B6:E8:26:82:01:76:88:CA:05:7E:53:AC:64:CF
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 019B7F15AA91A9F5CDB99C232F02BA1036E1
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/H8dMsf8QtugmggF2iMoFflOsZM8.roa
Signing time: Fri 02 Jan 2026 14:21:24 +0000
ROA not before: Fri 02 Jan 2026 14:21:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57052
IP address blocks: 2a00:ad40:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:aa:91:a9:f5:cd:b9:9c:23:2f:02:ba:10:36:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 2 14:21:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fc74cb1ff10b6e82682017688ca057e53ac64cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:35:c6:ef:43:6a:d9:64:74:70:3a:05:e0:
3b:4b:a1:a9:a4:e7:0f:c5:40:c6:2e:3f:ef:f5:43:
a3:af:cd:08:fa:51:fd:a9:54:78:41:6a:92:7d:8d:
80:6b:3c:57:da:50:d5:d5:da:7e:fb:ce:f4:40:29:
c1:96:2d:3c:07:37:48:a0:3c:5b:73:24:66:73:84:
48:f9:77:64:cb:9a:7a:1f:34:e0:a0:8d:fc:61:e7:
66:d3:86:07:22:df:3d:7e:a6:79:96:c5:66:4e:9e:
e8:bb:1d:59:46:3b:ff:15:68:37:56:34:0e:68:53:
1d:e4:78:6b:26:74:a8:db:43:65:68:50:c8:d0:8e:
58:54:4c:61:9e:67:b3:3d:e5:a4:c6:5a:a7:12:8d:
fe:e5:ce:f4:05:bb:95:53:44:b0:ae:5c:2b:c2:2c:
16:c0:b1:1c:00:af:48:ce:52:b3:02:34:01:85:f8:
ed:93:7d:df:b5:5b:7c:09:71:71:10:ee:20:9a:87:
36:e0:dd:3b:5d:c5:76:9b:46:74:ea:2b:0d:76:be:
3d:a0:3a:99:e7:3b:66:39:66:b5:62:4d:52:66:59:
40:38:2a:3a:71:de:64:c0:a6:29:6a:cd:e7:c9:94:
7f:ec:ea:f3:56:d6:ae:f1:68:3e:5a:64:7d:5a:c9:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C7:4C:B1:FF:10:B6:E8:26:82:01:76:88:CA:05:7E:53:AC:64:CF
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/H8dMsf8QtugmggF2iMoFflOsZM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad40:10::/44
Signature Algorithm: sha256WithRSAEncryption
71:ff:b7:8b:6c:5b:fa:49:96:93:46:ea:78:cc:8e:39:84:e5:
17:bd:ee:c6:8e:cf:3f:0b:63:dc:a4:c6:09:c4:a9:57:4c:72:
ba:0a:23:79:37:5f:56:e9:02:67:dc:89:2e:2f:a8:ba:ac:c6:
ba:66:11:fd:43:3e:dd:1b:9d:5e:a1:a0:d4:7f:72:b3:ca:4f:
67:1f:22:8b:d6:02:4d:14:73:31:49:89:2b:7e:8b:08:3e:20:
ca:ca:29:24:00:5c:59:a4:fe:2c:06:f3:80:c3:f3:40:4d:c8:
4b:3f:80:be:c7:dd:76:e3:8f:30:5d:73:b8:a8:a3:37:ac:a7:
68:f0:11:94:7e:9d:90:1d:2c:fa:19:15:fc:4d:e9:73:5c:c3:
8c:bf:3d:27:d2:b1:70:ef:a2:9a:45:62:68:35:dc:41:46:99:
58:22:76:fa:20:21:f7:ab:91:96:bd:3f:80:13:8d:5f:f1:61:
05:1a:94:c3:4f:76:e3:b7:1e:a8:ca:42:1b:44:68:74:01:1d:
dd:e1:1b:f9:74:21:d0:93:7b:b1:a7:f9:c1:29:7a:cd:78:d6:
94:05:3a:87:7d:0b:0d:8e:e4:4a:5c:6e:f0:bf:71:4e:2f:4f:
8f:af:c7:16:6d:8c:a3:e9:5d:58:7c:af:83:11:83:f2:56:14:
ce:8e:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:32 2026 by rpki-client