Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/fuY0eZiF4-D_oLwAbv6Pt7dkgQ4.roa
File: fuY0eZiF4-D_oLwAbv6Pt7dkgQ4.roa (raw, json)
Hash identifier: WEfF3aWq5wfrlLHXB6G+0nEFtQGvIp+E7rPqEt3iqlU=
Subject key identifier: 7E:E6:34:79:98:85:E3:E0:FF:A0:BC:00:6E:FE:8F:B7:B7:64:81:0E
Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial: 019F8836B4087919F2992DD1A5925ABAB448
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/fuY0eZiF4-D_oLwAbv6Pt7dkgQ4.roa
Signing time: Wed 22 Jul 2026 05:05:14 +0000
ROA not before: Wed 22 Jul 2026 05:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.30.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:36:b4:08:79:19:f2:99:2d:d1:a5:92:5a:ba:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Validity
Not Before: Jul 22 05:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ee634799885e3e0ffa0bc006efe8fb7b764810e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:50:e5:ba:b5:b5:64:0a:e9:8c:97:5c:19:
5d:bc:da:f5:59:66:26:ad:52:f5:7b:22:11:c9:a4:
5e:59:ee:fe:61:ea:34:f6:ec:c5:01:4f:13:d4:16:
19:f4:24:a7:3a:e7:26:74:87:46:3b:de:59:34:78:
41:4f:77:38:f5:5e:2f:af:ef:8e:e6:19:56:0c:77:
03:98:38:ca:ad:6d:21:5f:15:4d:0e:c6:f0:3d:8a:
b7:8e:1f:2d:35:75:f8:19:5d:a1:11:8d:ce:9c:22:
7d:7f:4a:f6:4e:29:76:74:eb:cc:8b:6c:80:0f:f9:
14:44:e2:1c:2a:46:ab:c8:09:08:8e:3b:44:58:0d:
d9:cc:ea:7f:79:0e:07:11:3e:bd:95:6f:34:ea:00:
7f:89:f1:80:af:2e:e9:95:6c:e8:7a:85:1c:c3:e2:
35:ce:e8:53:70:de:1e:50:0e:af:21:6f:51:ad:30:
b7:18:ef:72:ee:e8:35:a2:8b:1b:42:3b:bd:37:5e:
26:f4:39:13:74:e4:60:2b:22:69:28:80:9a:8d:a8:
0a:be:88:c4:52:8b:e7:28:86:c4:9d:2b:53:cc:54:
5e:19:48:b1:72:d2:88:6a:93:22:bf:c4:86:76:54:
82:03:5f:31:97:ec:07:4b:df:08:c7:7e:65:a4:c2:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:34:79:98:85:E3:E0:FF:A0:BC:00:6E:FE:8F:B7:B7:64:81:0E
X509v3 Authority Key Identifier:
keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/fuY0eZiF4-D_oLwAbv6Pt7dkgQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.23.0/24
Signature Algorithm: sha256WithRSAEncryption
23:56:2a:e6:95:bb:bf:a2:69:b5:7c:33:e5:42:bd:9b:4d:d7:
9b:e8:2b:da:64:b0:ed:a0:50:9a:18:79:92:f8:6d:cd:5c:3b:
a7:98:69:87:19:41:71:70:b1:b9:1e:45:1d:ed:a8:88:5e:b5:
68:df:46:3d:18:31:c7:76:fa:93:1c:68:ee:0b:76:6a:63:41:
3f:97:97:93:b7:78:38:cc:9e:29:1e:97:6a:c5:1d:9d:48:28:
86:08:08:4a:6f:47:dd:32:2b:70:bf:7a:44:1f:0d:34:27:4d:
c6:ff:80:de:83:81:d2:29:a7:e9:60:5e:e9:6e:c3:18:be:b2:
e1:e9:83:62:94:2c:21:24:bb:8c:18:6a:fa:85:98:d1:9e:e1:
66:d8:34:31:bb:39:98:c2:b1:0f:35:46:37:0b:18:63:07:16:
c8:d1:88:e7:26:c9:ec:58:87:70:e5:8a:5c:8d:37:64:14:f5:
2c:97:25:ae:ca:bd:f1:a5:83:9e:35:56:9c:44:88:86:5b:db:
e9:b2:58:ac:d2:6d:c8:2a:e0:37:43:b9:2b:df:ad:02:9d:89:
7a:cd:75:5e:f5:2d:42:94:ad:f0:bf:ce:2d:c2:b0:54:d3:f2:
b4:24:3e:b5:f1:7b:16:7e:05:c9:c4:9a:13:bb:6a:de:1c:64:
d1:80:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:04 2026 by rpki-client