Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/do8SMPVN-I5eKa3z4hb0RWIrZnU.roa
File: do8SMPVN-I5eKa3z4hb0RWIrZnU.roa (raw, json)
Hash identifier: 8N9dbT4lXhMxE8bbJl9BV/EwbUrQvzC5VxKxeiGzv4g=
Subject key identifier: 76:8F:12:30:F5:4D:F8:8E:5E:29:AD:F3:E2:16:F4:45:62:2B:66:75
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C6ACBE5BBDE4E5B22213A38CFEB20BC42
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/do8SMPVN-I5eKa3z4hb0RWIrZnU.roa
Signing time: Tue 17 Feb 2026 08:51:13 +0000
ROA not before: Tue 17 Feb 2026 08:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206921
IP address blocks: 2a0b:64c0:ff00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6a:cb:e5:bb:de:4e:5b:22:21:3a:38:cf:eb:20:bc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 17 08:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=768f1230f54df88e5e29adf3e216f445622b6675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:26:02:f6:e8:df:89:82:aa:eb:09:6c:8d:
61:d1:42:08:8a:ac:5a:79:31:ee:a0:9a:a5:0e:f9:
45:7d:08:dd:e3:ae:d1:92:17:ce:61:02:95:bb:3a:
01:47:c6:ff:62:ac:6e:0a:28:dc:8c:a1:39:a0:eb:
d8:4f:c8:4f:1f:2a:d0:08:94:31:d9:5f:c0:c5:a0:
a6:7b:b2:54:42:c4:4d:a1:ce:a1:e7:ab:73:c2:ee:
b6:9e:1b:07:4b:f8:84:b7:4f:68:89:e2:64:e1:44:
b6:92:6a:8f:f3:35:97:ec:25:a6:d3:74:d5:26:e2:
49:2f:65:ef:b0:1a:68:13:1b:f4:b7:84:4d:b8:3f:
d0:84:27:5a:c8:08:42:b7:ca:97:bf:4e:ef:9f:9e:
7f:dd:b8:7d:18:79:03:e3:01:3c:ef:bb:bb:0f:b5:
d4:d4:04:df:79:96:0e:8c:d6:98:7b:98:d2:e8:65:
ca:45:cd:e0:9b:90:e8:80:d7:ea:18:c7:88:77:7f:
20:43:27:00:96:58:40:97:69:6d:19:bf:13:84:74:
3a:ed:5c:da:0e:9e:15:69:8d:06:cd:91:85:0a:89:
7c:99:93:39:8b:7d:c2:03:e3:68:ee:6d:8c:2a:1f:
d2:a0:54:af:c7:38:d8:cf:24:2d:ef:69:9d:03:4f:
07:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8F:12:30:F5:4D:F8:8E:5E:29:AD:F3:E2:16:F4:45:62:2B:66:75
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/do8SMPVN-I5eKa3z4hb0RWIrZnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:64c0:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
4d:32:75:30:e9:9a:c7:17:59:18:ca:05:8e:78:a3:22:32:9e:
95:15:66:f6:a4:b1:06:68:96:e8:db:10:94:d6:13:c5:5e:9c:
c6:82:e3:85:06:00:05:12:11:4c:f4:75:70:89:0b:51:21:59:
f9:33:8c:66:56:83:61:b5:28:5e:1a:4a:82:bd:5b:eb:33:0b:
57:53:9f:3b:81:4e:2f:4c:60:77:0c:09:a0:64:fa:4f:d0:37:
a2:63:b6:cd:e5:60:1d:7f:28:c7:31:da:33:48:8d:55:f1:61:
83:3a:33:a2:06:2c:ed:0b:56:9e:bb:83:01:3a:d1:fa:79:9e:
7a:00:3b:2e:4a:ef:dd:89:e1:ff:53:0e:60:f2:fe:0e:45:d2:
9b:e2:bc:42:05:80:df:b9:76:43:fc:57:6b:7c:91:b9:f1:a1:
24:ee:5d:b7:47:f2:11:fa:a8:05:d8:4c:32:63:90:e8:f8:8a:
81:90:a4:96:ce:83:e9:40:32:c1:09:4c:a3:43:0f:c0:63:33:
d5:1c:66:ea:c8:17:a4:ad:9f:a3:fb:59:a6:c1:4a:0f:e8:df:
16:52:3d:95:f9:de:2f:60:f1:b0:af:63:ea:73:19:9b:a4:1b:
1a:9a:91:92:6c:bf:20:30:8c:9c:36:42:02:70:87:f2:d1:ab:
13:12:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:35 2026 by rpki-client