Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/V40XeqVh6l4DbCmS7UQsikJ2-iM.roa
File: V40XeqVh6l4DbCmS7UQsikJ2-iM.roa (raw, json)
Hash identifier: 5u4CbQ5JG4yrJVoWscvPthJuNktPYvJ7kXfZHFgxd10=
Subject key identifier: 57:8D:17:7A:A5:61:EA:5E:03:6C:29:92:ED:44:2C:8A:42:76:FA:23
Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial: 019F801A492E2F05B4528C6308A8D3AA962A
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/V40XeqVh6l4DbCmS7UQsikJ2-iM.roa
Signing time: Mon 20 Jul 2026 15:17:14 +0000
ROA not before: Mon 20 Jul 2026 15:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210979
IP address blocks: 85.8.198.0/24 maxlen: 24
91.231.47.0/24 maxlen: 24
139.100.98.0/24 maxlen: 24
2a14:df80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:1a:49:2e:2f:05:b4:52:8c:63:08:a8:d3:aa:96:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Validity
Not Before: Jul 20 15:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=578d177aa561ea5e036c2992ed442c8a4276fa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:4a:75:68:66:59:68:5a:7d:56:6f:01:ad:
df:d6:25:4d:bc:f7:45:31:d5:a3:25:6c:9b:cb:52:
20:e4:26:de:1b:b7:6f:29:0a:7c:7a:9a:72:97:ce:
59:52:2f:2f:7a:d5:85:04:60:14:71:4c:cb:a7:4c:
02:21:2e:5a:e1:77:03:21:9f:90:7f:3c:b9:da:34:
48:72:b4:f5:f4:80:c0:36:30:9a:03:50:72:c4:ee:
1f:e8:78:e0:91:e6:00:8e:ef:7c:e2:cf:56:b9:cc:
61:bc:67:d4:00:d5:2a:aa:86:b8:30:32:ce:2e:90:
d8:64:17:24:b4:fa:84:8f:ef:89:d4:71:61:4d:4a:
7c:e6:e3:d6:6b:98:41:7a:67:0f:4c:d8:a5:68:10:
d6:0e:d3:77:dd:06:f6:d1:98:9a:d6:13:50:a6:a3:
2c:41:e0:36:3e:47:95:0f:4b:e7:0b:fb:f3:fe:7d:
6e:25:e5:de:a6:10:b4:ec:3f:aa:62:78:25:a1:a1:
4c:f3:a9:50:c2:00:bf:26:8b:7e:d6:61:ab:bf:39:
31:3b:21:dc:ca:4c:dc:e6:5d:c2:f3:19:e1:83:a0:
e8:c3:49:ba:7b:87:e0:5c:8a:c3:3d:93:0f:74:bc:
9d:28:f6:aa:48:2a:72:51:fa:81:0a:68:b7:57:6b:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:17:7A:A5:61:EA:5E:03:6C:29:92:ED:44:2C:8A:42:76:FA:23
X509v3 Authority Key Identifier:
keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/V40XeqVh6l4DbCmS7UQsikJ2-iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.198.0/24
91.231.47.0/24
139.100.98.0/24
IPv6:
2a14:df80::/29
Signature Algorithm: sha256WithRSAEncryption
9c:22:07:30:e3:8d:bc:cd:84:97:a8:c1:d4:d5:bf:e9:01:d1:
69:2c:eb:5f:12:0f:02:23:bc:b4:c2:ff:1d:db:84:b5:ab:2a:
c1:96:4b:69:6a:6f:71:14:9f:85:d0:05:e7:d0:a7:4a:19:a5:
f0:f7:fe:c3:8e:b4:5a:60:f0:38:3c:40:07:3a:a4:b3:b8:b1:
08:bc:ec:53:3a:3e:76:c5:11:ea:ba:b3:95:58:e1:12:f8:e0:
55:3e:ef:e6:8d:5a:71:1b:5a:b5:f5:a9:77:77:91:b7:f7:e1:
b3:64:5a:d2:27:26:f9:bb:2d:78:9f:a8:03:b2:f6:36:33:4b:
7d:14:15:47:86:bd:5e:fc:d2:f5:06:e0:52:c5:8c:c7:2c:23:
df:e7:44:e3:99:75:e6:57:94:ee:93:a4:39:98:81:57:71:78:
da:5f:37:b1:c5:01:f6:04:46:21:20:ef:ce:5e:11:ab:95:07:
dc:bc:9c:be:46:37:b2:aa:ba:78:75:f9:7c:30:b8:5a:a9:f2:
8d:a2:b2:66:92:20:e0:d5:06:9f:bc:0f:ce:07:d8:73:ac:7d:
e8:4d:d5:30:96:6d:f6:45:bf:90:63:0a:aa:be:23:d6:98:60:
fa:48:b8:ff:61:ce:10:66:1a:d7:b6:98:1c:3b:d6:b9:bd:c6:
1b:58:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:38 2026 by rpki-client