Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/8ICsk83y5UmFTjhlgwBvrZfolUg.roa
File: 8ICsk83y5UmFTjhlgwBvrZfolUg.roa (raw, json)
Hash identifier: 8TQtJ3eaKPgHcPQusdLJH7gh2vvJP5FHiKi2t+nV9II=
Subject key identifier: F0:80:AC:93:CD:F2:E5:49:85:4E:38:65:83:00:6F:AD:97:E8:95:48
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A0A97A6BE65A1F4DE8F59F84462EE41F01
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/8ICsk83y5UmFTjhlgwBvrZfolUg.roa
Signing time: Wed 16 Sep 2026 09:09:27 +0000
ROA not before: Wed 16 Sep 2026 09:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 213.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:7a:6b:e6:5a:1f:4d:e8:f5:9f:84:46:2e:e4:1f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Sep 16 09:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f080ac93cdf2e549854e386583006fad97e89548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:e1:58:73:be:a5:e8:77:78:dc:09:4b:3e:
0a:cf:e8:04:f7:f0:ef:48:7e:81:84:18:62:1a:89:
28:4e:61:6d:60:06:a2:05:be:33:76:d0:90:2e:bf:
e1:12:4a:71:f9:c7:c0:04:97:89:55:ad:6f:ef:97:
0a:20:16:a5:5f:e0:09:2d:c3:f7:a7:2c:e5:79:07:
12:24:a1:d0:d9:c8:43:36:18:43:01:41:bd:33:67:
7d:26:ae:16:ff:c3:ec:33:37:5a:8e:44:42:8b:02:
bb:34:87:77:fc:c2:2a:8f:66:ea:62:98:0c:48:b5:
99:1b:a1:34:e5:ee:82:ff:27:bf:56:8b:f5:57:ba:
68:00:81:3a:97:71:e9:2d:29:88:d2:6b:64:ec:8f:
c6:42:a9:e6:ab:1f:c6:0c:7f:50:16:7c:2e:df:ae:
f4:2b:2c:d4:ae:81:f8:5d:b5:9e:2d:36:f5:01:03:
5c:ca:19:c9:cb:95:03:37:21:6f:e2:24:e8:62:73:
c5:7f:87:56:9f:f9:18:ac:ef:7b:81:52:a5:12:58:
a1:12:64:c6:a8:ca:25:cd:e7:4d:3d:4c:57:81:a8:
25:da:15:2a:a8:ac:b4:69:49:c1:de:bb:2e:72:71:
58:06:09:f4:c3:26:0a:7f:b7:87:8f:29:6f:9c:4c:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:AC:93:CD:F2:E5:49:85:4E:38:65:83:00:6F:AD:97:E8:95:48
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/8ICsk83y5UmFTjhlgwBvrZfolUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3b:49:41:09:62:e4:b3:99:bd:dd:30:6c:10:df:bb:fd:da:
be:b8:bb:37:db:c6:3c:09:42:3a:2e:6a:c7:81:7b:07:9f:a0:
90:bd:f2:c3:81:86:62:7b:47:ef:2e:6c:36:2e:b6:62:61:cb:
98:db:46:82:cb:33:d6:4b:1e:99:98:ea:09:d1:d0:9f:30:84:
64:9b:5b:00:8e:c6:c8:44:0f:ff:95:27:5b:2c:e7:33:74:67:
06:99:72:18:25:0c:af:53:f9:65:66:32:6e:9e:0b:9e:49:c3:
3c:74:11:9e:b4:36:e6:48:c9:39:a6:2f:21:36:54:cc:42:76:
d6:3e:2a:16:d8:fc:9d:de:71:38:bc:09:7a:5a:d2:24:23:86:
4e:f0:c5:1a:65:b9:bc:4b:5f:f5:26:a0:93:28:94:77:ad:b5:
13:07:e1:a5:2d:a5:6b:c7:bd:4e:01:7e:7a:d4:9f:ed:0f:6d:
76:fb:7f:fa:66:43:16:d2:e1:54:80:15:74:88:62:8f:75:b9:
3d:56:6b:79:8e:be:dc:7c:fc:8e:ff:bf:b7:2c:e1:82:41:98:
82:da:4a:63:78:fe:b2:0d:9b:50:15:2b:54:f7:44:74:ff:29:
8c:62:aa:c0:64:9a:d4:93:db:e0:e8:83:bb:83:9b:e2:3f:be:
10:ac:00:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:14:20 2026 by rpki-client