Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8BlkKKB-5cIH2a-Ex6QDhi2f4vc.roa
File: 8BlkKKB-5cIH2a-Ex6QDhi2f4vc.roa (raw, json)
Hash identifier: SFKgNIJ/HlSScqSJu1sp6B7DdWibnocmVckZK/zqLcA=
Subject key identifier: F0:19:64:28:A0:7E:E5:C2:07:D9:AF:84:C7:A4:03:86:2D:9F:E2:F7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CA0E9DFE9430D327524D041F835C62D9F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8BlkKKB-5cIH2a-Ex6QDhi2f4vc.roa
Signing time: Fri 27 Feb 2026 21:03:27 +0000
ROA not before: Fri 27 Feb 2026 21:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199458
IP address blocks: 45.142.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:e9:df:e9:43:0d:32:75:24:d0:41:f8:35:c6:2d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 27 21:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0196428a07ee5c207d9af84c7a403862d9fe2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:0a:eb:97:6f:9e:9b:4a:80:1b:9e:f3:ae:
2e:30:f1:0c:d8:08:49:8a:6d:41:33:ec:39:48:5d:
c6:a8:19:22:33:90:66:8f:20:c5:d6:14:bb:26:86:
f6:08:fe:1a:45:b3:85:95:eb:f3:79:2a:26:64:e0:
03:74:e4:b6:81:db:7c:0d:20:fb:b2:40:5b:44:14:
48:a1:8b:2d:3a:fc:cc:53:19:d9:e2:9c:16:33:ee:
e8:e4:8e:af:db:49:b8:0a:c1:42:45:d6:87:ee:ab:
7c:2e:da:ef:6c:4a:8c:0e:a2:72:a9:dd:82:08:28:
99:fa:f5:64:d6:1e:17:27:ef:84:28:5b:04:4a:a9:
df:0d:a6:83:98:53:19:e6:db:a2:b1:37:37:91:72:
6f:19:6e:0b:07:64:54:ac:13:44:66:80:1a:f3:12:
f0:fe:b5:2f:fd:6e:de:b8:c8:be:5b:42:30:ce:f0:
7e:e5:81:92:db:3c:30:af:19:71:a6:e5:ea:f1:6b:
92:26:95:5d:28:64:1a:8d:d7:ab:fa:f9:d6:f4:1c:
6a:25:74:a4:5c:fd:0a:8f:3c:46:a0:0f:98:ce:f3:
fc:9f:1a:76:ec:15:53:87:d8:20:01:17:16:7f:66:
e9:25:aa:0b:33:67:9a:5a:ab:42:f7:24:c0:e2:6b:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:19:64:28:A0:7E:E5:C2:07:D9:AF:84:C7:A4:03:86:2D:9F:E2:F7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8BlkKKB-5cIH2a-Ex6QDhi2f4vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.31.0/24
Signature Algorithm: sha256WithRSAEncryption
be:2e:7d:f8:5f:38:5d:87:d4:3e:19:a3:81:68:1c:b6:ef:9f:
0f:50:ae:2a:0c:eb:af:45:d6:4b:31:26:20:e2:66:46:9a:cf:
d7:93:9f:df:ea:1e:29:73:a9:df:b5:6c:43:7b:a2:6d:c5:cd:
12:e2:7b:f4:3d:45:04:51:cf:e3:bb:ed:5e:68:4f:dc:10:32:
8f:60:0d:bd:22:06:78:0d:7d:de:02:ff:d1:9f:4b:63:91:92:
d2:f5:93:91:0f:3d:13:b6:d5:d8:24:ec:bb:ea:67:c0:6d:5f:
b5:30:6c:8c:bd:3c:d4:56:63:e8:5c:65:f0:0a:8a:25:0b:0c:
23:11:51:f4:e9:52:82:e2:3f:40:da:c6:a4:7a:3c:c4:4e:82:
f7:55:7c:b3:4a:d0:60:54:a1:e7:35:78:76:0d:3f:78:86:02:
41:29:6a:84:a8:b0:bd:1a:54:da:a7:17:6a:4b:78:71:eb:01:
b4:23:4f:8c:52:35:4b:05:80:0a:56:f4:09:b1:fc:ef:5c:63:
36:4d:28:28:d6:3f:c0:df:90:de:b3:4e:77:69:63:df:c2:b5:
03:14:fc:51:5d:68:4b:4c:6c:28:0d:9d:71:8e:e6:7c:31:81:
18:fa:c2:2f:9a:01:3d:68:a5:5c:53:a3:3e:23:ac:0d:cd:be:
10:55:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:36 2026 by rpki-client