Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/008aaJ7C0NI-B76Oz-DgwXoqQGA.roa
File: 008aaJ7C0NI-B76Oz-DgwXoqQGA.roa (raw, json)
Hash identifier: Wl56s0djkIFMtZEcBorh/gchNgdhdVWtVVwku8y2YNI=
Subject key identifier: D3:4F:1A:68:9E:C2:D0:D2:3E:07:BE:8E:CF:E0:E0:C1:7A:2A:40:60
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A079E0F2773D8F6927F4ABF618E25BD32C
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/008aaJ7C0NI-B76Oz-DgwXoqQGA.roa
Signing time: Mon 07 Sep 2026 03:19:40 +0000
ROA not before: Mon 07 Sep 2026 03:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402310
IP address blocks: 216.236.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:79:e0:f2:77:3d:8f:69:27:f4:ab:f6:18:e2:5b:d3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 7 03:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d34f1a689ec2d0d23e07be8ecfe0e0c17a2a4060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:74:ba:11:9b:0d:82:48:2d:7d:e5:e3:c5:
30:58:59:4d:95:ec:5e:d9:c0:55:24:6b:0b:65:3c:
d6:9e:b3:cc:2d:de:f3:74:26:28:be:1c:30:4f:cd:
e1:0f:b6:9d:3b:00:10:5e:f7:54:0e:e8:72:f0:42:
fd:2b:b7:56:b6:ef:a1:ca:e0:18:4d:bc:b4:fa:39:
72:e2:20:e8:50:e3:e0:84:16:1f:d0:b1:64:3a:0f:
18:a6:05:8a:b9:95:d4:a0:03:77:ba:0d:8b:e9:33:
ca:c4:6c:7e:07:1e:3d:25:be:70:1b:36:c1:24:66:
a0:aa:f9:c7:0f:c8:df:29:22:45:d2:88:32:96:89:
ea:57:fb:70:34:43:af:9f:61:50:03:cf:1c:e2:c6:
4f:bf:ef:46:58:23:95:59:66:b3:ee:07:1b:0f:5f:
11:02:00:26:1a:83:45:5d:33:82:e5:20:ff:55:70:
65:e2:91:34:e6:4a:19:8e:f9:7f:51:3c:19:c6:ad:
f2:de:36:63:3e:28:d9:1f:c0:b4:a3:5f:0a:8d:bf:
61:41:da:e2:eb:ef:b0:6f:7c:a7:79:b3:4c:84:9d:
ab:ce:ea:4a:a0:42:4c:91:eb:d7:3f:90:36:c8:f1:
36:aa:b6:07:5a:62:24:16:3a:cb:54:42:d3:8a:b2:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:1A:68:9E:C2:D0:D2:3E:07:BE:8E:CF:E0:E0:C1:7A:2A:40:60
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/008aaJ7C0NI-B76Oz-DgwXoqQGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.8.0/22
Signature Algorithm: sha256WithRSAEncryption
53:24:c2:4c:d5:04:30:d5:1e:12:84:d6:ba:6c:6f:2a:a7:ba:
21:43:94:df:30:d2:d3:94:4f:79:ad:f1:a2:3a:28:97:37:5b:
2c:98:a0:84:42:34:a5:0e:f3:a7:73:a4:a0:71:1a:b1:b9:84:
15:cd:52:2e:9e:59:8b:c0:bd:7b:7b:31:6d:7e:96:12:ed:6f:
c6:63:65:2e:99:81:75:3c:bb:96:3e:5a:4d:34:17:08:2c:e5:
c0:27:59:18:d7:2c:95:54:0f:cb:04:c3:53:38:7a:fc:68:88:
81:cf:33:d9:35:49:cc:85:ec:27:36:11:0e:fe:5f:84:db:36:
da:2c:9d:6b:7f:a2:ca:87:7c:30:e6:4a:0b:d5:c7:a4:ad:df:
76:cd:25:53:56:2d:f6:32:4b:7e:64:28:76:92:fe:ad:13:1b:
31:b9:1f:6d:27:2b:95:a9:94:7b:f7:be:03:ee:24:98:44:f0:
0a:45:fa:8c:41:13:34:4a:6d:76:09:e9:9c:55:e2:ec:6a:15:
04:12:65:96:dc:51:c0:22:fb:fe:6d:b2:d5:c2:b0:f4:9d:13:
03:a2:a4:ea:0f:df:76:b2:b8:40:0a:15:2a:50:b7:ee:7f:27:
a4:ef:8c:dc:53:16:c9:c2:f8:07:15:96:b8:96:83:78:1e:27:
31:d3:1a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:42 2026 by rpki-client