Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/8lo2QCwTEyDX1lcik71pKddzCW8.roa
File: 8lo2QCwTEyDX1lcik71pKddzCW8.roa (raw, json)
Hash identifier: ymAo8Z5EkFz2JKt49VhMFeL8VZNeRka/b91ESL0FVv4=
Subject key identifier: F2:5A:36:40:2C:13:13:20:D7:D6:57:22:93:BD:69:29:D7:73:09:6F
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 019B76EACE7479A4212E0532FC3EEDDDB2E6
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/8lo2QCwTEyDX1lcik71pKddzCW8.roa
Signing time: Thu 01 Jan 2026 00:17:38 +0000
ROA not before: Thu 01 Jan 2026 00:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216412
IP address blocks: 2a01:f100:1f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:ce:74:79:a4:21:2e:05:32:fc:3e:ed:dd:b2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Jan 1 00:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f25a36402c131320d7d6572293bd6929d773096f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:fd:f7:63:55:82:ed:4b:1a:4c:d7:f1:04:
07:d3:cb:86:b8:b6:c0:79:11:b2:84:fb:57:00:85:
34:c4:e0:0f:4e:6b:09:2c:70:fb:68:13:51:08:10:
9e:f4:57:94:cf:59:b3:c2:54:ae:6b:c6:e6:7b:15:
09:47:90:24:df:f8:d0:a8:12:2c:3b:5f:d0:ea:66:
47:da:87:30:c2:11:b7:67:57:06:14:c0:3e:ba:04:
56:fd:ee:4b:f4:78:e8:fe:c9:26:23:a8:b4:0d:7c:
cf:32:07:08:22:47:4f:88:90:e9:67:76:37:43:5a:
b5:53:cf:52:de:c8:e0:48:2f:d8:41:eb:d8:ad:fc:
97:83:ef:08:c4:93:f2:28:f2:58:29:f9:c9:19:3a:
8e:cf:95:91:ad:10:fc:0e:81:ab:03:b5:08:b4:5b:
02:2f:7d:6f:b6:65:5e:24:0e:0a:94:10:ab:58:53:
9c:80:3b:3b:31:87:fb:97:a8:cf:63:1b:d9:b1:56:
14:de:7a:b5:c3:f8:41:00:75:ec:df:f3:cb:e9:78:
48:6a:31:c5:11:73:54:09:78:76:bf:a4:f2:82:6d:
05:36:e9:e5:c4:59:72:fc:89:bd:47:98:35:14:19:
b8:b3:68:af:b3:5d:40:03:1a:af:8f:94:ea:77:46:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:36:40:2C:13:13:20:D7:D6:57:22:93:BD:69:29:D7:73:09:6F
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/8lo2QCwTEyDX1lcik71pKddzCW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f100:1f8::/48
Signature Algorithm: sha256WithRSAEncryption
9b:2a:fc:c6:4c:81:1f:ed:a2:b5:c9:76:a8:48:02:65:27:25:
94:5d:9c:bc:b6:cd:eb:31:c2:95:0d:e3:48:2d:64:68:02:9d:
bd:f0:b5:2d:5e:33:1e:9f:0b:01:7f:38:1c:2b:74:a5:e1:e4:
ef:34:6a:de:01:16:4b:61:4d:04:e3:30:20:07:c3:c2:8f:ce:
da:f0:8d:a9:55:4f:37:1e:94:b6:b0:c9:4d:0a:5d:b9:83:0f:
9d:2f:38:69:b9:bb:dd:61:71:5a:9d:74:b3:c3:b4:d8:35:c0:
77:9a:c7:4f:83:c5:34:f1:e9:2b:20:77:ab:27:0b:a1:51:13:
2d:cb:d2:22:52:b9:89:ea:4d:70:17:29:61:7a:bd:e4:ba:a0:
e8:e0:c0:a5:eb:f0:41:cd:a3:9d:cd:77:d6:b2:fc:f9:68:69:
63:fe:66:e5:2d:e5:48:03:37:1a:56:1a:86:04:5e:03:60:ca:
06:fa:2a:14:1b:ea:8b:e2:ae:ab:70:8c:60:19:5a:08:f6:46:
1b:f5:79:e1:90:63:bf:b0:b3:10:65:91:d5:b0:64:aa:56:d2:
b0:27:3a:b4:ff:4e:c7:dc:e3:ca:40:99:1c:3a:d7:59:de:00:
b3:9d:48:ec:6d:6c:d1:e7:ae:d3:24:e0:4d:b1:74:04:a5:73:
da:d8:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:19:11 2026 by rpki-client