Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/1fFVsYcVAFE1N-aOz9LEMseJXuY.roa
File: 1fFVsYcVAFE1N-aOz9LEMseJXuY.roa (raw, json)
Hash identifier: HOFFlz4KmOgHVJgVvTynlqcaj5gxbBYnLRmD8llTlRw=
Subject key identifier: D5:F1:55:B1:87:15:00:51:35:37:E6:8E:CF:D2:C4:32:C7:89:5E:E6
Certificate issuer: /CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Certificate serial: 019F23692E3A04969F845724E4AA7C6F2D65
Authority key identifier: 86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/1fFVsYcVAFE1N-aOz9LEMseJXuY.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47554
IP address blocks: 185.170.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2e:3a:04:96:9f:84:57:24:e4:aa:7c:6f:2d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5f155b1871500513537e68ecfd2c432c7895ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:20:15:bb:ea:42:c7:71:27:4a:b2:73:f1:
57:ce:29:69:26:34:25:48:c1:48:ce:c0:8b:32:41:
6d:2e:cf:44:bb:ee:ac:77:25:b5:2b:95:4a:91:e1:
5b:90:38:e9:b3:27:48:e8:ba:d8:71:a7:e3:63:d4:
57:45:56:46:e2:14:31:a4:c8:56:aa:e3:91:cf:34:
e9:1a:7b:fe:75:51:6c:0d:a7:71:58:30:de:56:68:
75:ec:f1:86:03:4b:8a:56:cf:26:cb:ef:49:0d:99:
89:f6:07:58:07:83:e2:d9:c0:2f:9f:15:43:d4:47:
76:51:fa:c8:25:04:e3:d8:a7:f7:df:55:fc:f0:85:
1e:59:74:8c:0d:ec:f4:26:ff:c4:c2:45:8f:20:56:
d4:f8:84:97:c8:e3:03:7e:40:ab:26:33:24:d3:b7:
42:52:77:6b:c9:56:03:e3:41:53:c0:fb:e4:b2:5e:
4e:97:be:b6:a8:47:82:a8:d0:6e:04:22:c0:f6:19:
fd:09:d4:92:b8:9d:a3:0f:fc:b8:ef:bd:58:5c:2d:
f9:66:76:6b:fe:fd:a9:bb:68:8e:a1:00:d6:63:01:
d0:26:9f:e5:29:c8:c1:4a:38:f8:20:ef:65:7b:e5:
d6:b3:78:8b:7c:e2:10:02:85:f5:82:aa:a9:0e:91:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:55:B1:87:15:00:51:35:37:E6:8E:CF:D2:C4:32:C7:89:5E:E6
X509v3 Authority Key Identifier:
keyid:86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/1fFVsYcVAFE1N-aOz9LEMseJXuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.236.0/22
Signature Algorithm: sha256WithRSAEncryption
18:b3:51:03:66:63:db:0e:d4:30:1f:aa:e1:73:a8:13:88:7b:
db:a3:d2:01:44:0a:03:67:83:54:81:ea:8c:04:a1:ba:35:5e:
1d:b8:8e:a2:5b:74:c3:c9:f0:53:ae:35:eb:03:a4:71:b9:be:
10:77:86:d1:6c:74:da:7b:f8:32:1b:df:5d:70:4c:f2:ce:00:
2a:8d:57:1d:3b:7f:8f:be:f0:87:39:59:c3:5d:6e:e6:76:fb:
33:6c:c4:54:89:ad:e8:9e:fc:4a:9a:57:c0:eb:a6:dc:2c:4b:
53:b3:96:0a:d2:02:4a:70:3a:bf:a6:c5:b6:af:91:b8:e6:d1:
ba:0d:49:cb:18:69:59:0d:26:1a:ef:b0:27:dc:19:4c:ba:69:
af:59:12:ba:c0:bb:8f:1e:07:b6:69:7a:b9:70:78:d7:65:cc:
2f:0c:1a:38:aa:54:27:88:cd:10:88:07:94:eb:a1:1a:ec:fc:
e1:f9:1d:45:3c:d7:62:c9:50:cd:10:7a:db:85:0a:a7:e3:08:
c7:89:fc:6e:ab:c5:6b:cb:eb:9b:c0:25:53:98:53:81:64:1e:
03:45:82:55:3d:8d:4b:a1:a1:56:aa:48:42:ee:d2:65:ee:3b:
0e:3f:5a:39:c2:d9:8d:7e:51:08:54:0b:75:4c:e4:73:b9:73:
9b:2c:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:01 2026 by rpki-client