Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/1-iqRWTEyF4ajtF5LcGXfc70ss5M.roa
File: 1-iqRWTEyF4ajtF5LcGXfc70ss5M.roa (raw, json)
Hash identifier: Dz6lLNPsk+ndbehBfxapa+ksrphrNfbcDIDf943cyGI=
Subject key identifier: FA:2A:91:59:31:32:17:86:A3:B4:5E:4B:70:65:DF:73:BD:2C:B3:93
Certificate issuer: /CN=9bb672a7414643fde42fd5d7d964426ccfbe0ff6
Certificate serial: 019F5CB5C42C6564F07926DF69B13488D5E7
Authority key identifier: 9B:B6:72:A7:41:46:43:FD:E4:2F:D5:D7:D9:64:42:6C:CF:BE:0F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/1-iqRWTEyF4ajtF5LcGXfc70ss5M.roa
Signing time: Mon 13 Jul 2026 18:20:43 +0000
ROA not before: Mon 13 Jul 2026 18:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 195.140.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:b5:c4:2c:65:64:f0:79:26:df:69:b1:34:88:d5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb672a7414643fde42fd5d7d964426ccfbe0ff6
Validity
Not Before: Jul 13 18:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa2a915931321786a3b45e4b7065df73bd2cb393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:48:56:f2:78:3c:f8:ab:b6:43:b6:3e:d1:
fc:16:cd:d9:13:b9:f3:6e:78:29:7f:26:70:49:0d:
41:14:15:fa:a2:4f:95:8e:88:a7:d4:21:db:a7:6f:
23:17:c4:76:80:5b:48:b3:5c:60:50:c8:3d:0e:00:
4f:24:81:ea:50:3d:58:07:f9:b0:58:12:70:39:66:
e7:15:b8:65:19:7e:31:08:e6:f9:22:31:8c:36:a0:
38:16:ab:b3:ea:6a:a1:a1:5a:ca:eb:64:61:15:91:
4c:3d:71:f7:66:2c:4c:8c:03:a1:59:04:21:13:df:
bf:d8:78:01:88:89:19:59:72:9c:80:f4:d2:ff:5d:
c8:75:fd:82:a5:ed:c4:1b:11:1f:33:22:fe:3e:5e:
33:56:cf:f0:66:8f:a7:3e:33:e7:32:50:23:9f:31:
d2:4a:1e:d5:d7:a4:97:25:46:d3:a4:6f:41:34:43:
57:cf:40:e0:ad:fd:49:3c:eb:9a:e1:e1:50:fb:5e:
da:68:9f:19:23:82:1b:6a:57:0e:18:f2:71:76:f7:
8b:2d:37:f9:2c:d0:06:82:71:35:a4:71:c3:71:db:
88:af:dc:c3:f9:fb:fd:28:fb:76:c8:88:c0:ea:29:
ef:d0:07:dc:54:1f:df:d0:17:94:81:d6:45:29:bd:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:91:59:31:32:17:86:A3:B4:5E:4B:70:65:DF:73:BD:2C:B3:93
X509v3 Authority Key Identifier:
keyid:9B:B6:72:A7:41:46:43:FD:E4:2F:D5:D7:D9:64:42:6C:CF:BE:0F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/1-iqRWTEyF4ajtF5LcGXfc70ss5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.218.0/24
Signature Algorithm: sha256WithRSAEncryption
18:fc:76:0f:63:1d:fe:a6:a3:5f:23:e4:a4:a9:69:4b:98:af:
00:4d:55:78:7e:cf:1c:8c:72:77:56:96:5a:6b:6d:8c:a0:4d:
b4:e3:8c:55:d3:5a:1e:7a:be:d0:e2:ee:c4:49:2a:c9:bd:ee:
62:70:8b:cd:21:7c:c2:11:27:78:6c:4c:6f:a6:30:ea:8d:82:
b1:ff:a0:d2:72:1d:73:62:57:23:0b:1b:0e:c4:e5:e2:3c:e0:
54:c1:7c:e9:bb:4a:7a:01:23:35:1a:8d:c2:74:44:cc:a3:5a:
41:da:dd:82:47:ec:ef:75:b2:71:ee:fd:82:03:7a:b8:54:14:
0e:c9:f8:90:66:69:56:81:3f:97:3c:15:96:ce:42:44:2c:c1:
bf:a0:fc:80:43:50:f9:0f:a3:a7:9f:94:e6:35:47:f9:5a:f4:
61:fe:16:10:30:c1:2b:c4:30:95:24:0c:25:2e:b4:48:24:05:
40:59:18:8a:a7:9b:77:f2:8b:86:d0:61:4e:ee:83:27:ea:62:
10:cf:7b:80:f7:c0:47:f5:0d:be:e1:b2:66:3b:8b:b2:e9:88:
95:97:a5:a9:30:1a:62:31:99:24:6d:99:a7:ce:40:98:c9:e1:
4a:56:2c:d9:87:2d:0d:49:0b:ce:26:b2:a3:4d:dc:54:bd:55:
93:41:7d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:06 2026 by rpki-client