Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/k8uOmZLDmTTLy-4ZEk43SDNPT2U.roa
File: k8uOmZLDmTTLy-4ZEk43SDNPT2U.roa (raw, json)
Hash identifier: XnliqZzLSitAyY5Y0444OhQs0+7ZKErHlGbelno8vGE=
Subject key identifier: 93:CB:8E:99:92:C3:99:34:CB:CB:EE:19:12:4E:37:48:33:4F:4F:65
Certificate issuer: /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial: 019EBC19DB06CD364157C848CDAAA5DFFD6C
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/k8uOmZLDmTTLy-4ZEk43SDNPT2U.roa
Signing time: Fri 12 Jun 2026 13:51:11 +0000
ROA not before: Fri 12 Jun 2026 13:51:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 65.87.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:19:db:06:cd:36:41:57:c8:48:cd:aa:a5:df:fd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
Validity
Not Before: Jun 12 13:51:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93cb8e9992c39934cbcbee19124e3748334f4f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:75:dd:89:38:9f:69:7a:b5:7e:69:c3:df:5b:
87:74:de:88:f8:b3:c6:0c:b7:72:27:b9:1f:a3:f9:
a4:66:c2:62:08:78:b2:1c:5f:ba:39:31:ff:86:93:
88:38:68:c1:c9:e6:c0:e5:0a:c1:e6:87:99:7e:ac:
4b:89:aa:7b:91:a1:8d:8d:64:ff:43:0e:59:2e:5e:
02:f7:7b:30:a5:26:22:03:6e:45:6c:91:a2:d6:84:
fb:75:98:13:6d:06:67:1c:56:cd:fa:94:fd:f6:ad:
92:b7:db:a1:04:15:6e:a0:c4:99:ef:d7:ad:29:44:
97:1f:8c:a5:6a:b3:96:47:12:39:69:57:3f:05:58:
79:2d:dd:c1:56:ed:43:21:f6:ae:3f:ce:be:c9:09:
3e:84:13:ba:1f:e2:a6:8a:2d:38:a5:ea:e1:df:2e:
34:45:07:8c:ca:2b:8b:5c:ff:bb:1f:f7:da:f8:99:
3e:a5:9d:95:59:8e:0a:cf:ab:eb:a2:85:48:28:26:
d0:f4:40:77:55:2c:ea:99:25:92:ca:05:05:bb:9d:
9f:dd:74:58:bb:1c:4d:0b:61:3d:2d:dc:3b:b5:73:
6b:d9:64:6e:53:e4:ba:7c:18:59:57:da:08:92:25:
1c:47:3e:a8:7a:0b:1e:07:17:d8:ef:b5:23:f5:04:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CB:8E:99:92:C3:99:34:CB:CB:EE:19:12:4E:37:48:33:4F:4F:65
X509v3 Authority Key Identifier:
keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/k8uOmZLDmTTLy-4ZEk43SDNPT2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.87.129.0/24
Signature Algorithm: sha256WithRSAEncryption
14:0d:13:35:95:93:7e:5f:30:db:f5:8b:c1:0e:32:ba:01:19:
30:b9:f3:90:c5:d8:36:1a:40:ba:b4:80:82:3c:72:10:cf:1d:
f8:09:25:22:2b:64:20:2a:6a:a7:3f:96:3e:ad:dd:b1:7b:c3:
01:b8:f2:a0:34:4f:cf:bc:c6:07:99:0c:b0:7a:fc:9c:86:02:
cb:0f:b3:d5:d7:af:02:31:d7:11:a2:5a:27:d2:6f:07:49:af:
ff:f7:3d:27:d9:65:44:00:34:4f:15:14:d7:a8:8f:6c:c2:b8:
f6:b9:51:b4:b2:c7:22:1f:56:23:8c:26:84:d6:ba:d0:3f:33:
7e:a1:ae:a4:5c:21:fb:40:36:be:f8:44:27:38:d9:28:72:ee:
8d:e9:95:b9:67:60:4d:cf:cd:5b:47:cd:8c:23:83:c6:6f:e8:
2f:e4:d9:3a:9c:44:f8:1b:e6:2c:1b:91:bc:a3:0b:77:ea:48:
74:21:95:49:f3:4c:81:34:88:ea:42:76:36:fb:d0:c4:b3:c5:
45:55:2a:2c:96:13:0a:bb:28:9b:e7:11:31:65:19:97:65:1d:
ec:0b:d9:97:23:a0:c2:86:a0:02:ce:c4:e8:3a:6a:c2:d2:c7:
02:4c:68:3b:db:3f:d1:ff:f7:50:ab:bd:10:63:77:88:2b:45:
f9:e8:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:37 2026 by rpki-client