Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/D7FIPfz-CzdgoxC2ZfO03Afc5XA.roa
File: D7FIPfz-CzdgoxC2ZfO03Afc5XA.roa (raw, json)
Hash identifier: ez1YIU6Tx3muI0r5J6f9+6WO/D4t4YugqUqFYhktxYk=
Subject key identifier: 0F:B1:48:3D:FC:FE:0B:37:60:A3:10:B6:65:F3:B4:DC:07:DC:E5:70
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 019F703030BE7FCF5459520653BA8F63CD4B
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/D7FIPfz-CzdgoxC2ZfO03Afc5XA.roa
Signing time: Fri 17 Jul 2026 13:07:14 +0000
ROA not before: Fri 17 Jul 2026 13:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58154
IP address blocks: 185.80.31.0/24 maxlen: 24
2a0e:6340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:30:30:be:7f:cf:54:59:52:06:53:ba:8f:63:cd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Jul 17 13:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fb1483dfcfe0b3760a310b665f3b4dc07dce570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:c4:05:43:33:93:eb:94:53:e8:fd:cf:18:
60:6b:33:2a:ac:0a:7f:5c:24:da:99:58:92:4e:02:
be:89:b3:fc:c2:e1:fe:ac:6a:71:f6:21:a6:44:83:
e7:f8:3d:3a:a2:cf:39:e1:cb:61:cd:cd:c0:5f:a9:
ed:3f:27:65:2a:69:26:a3:db:75:5d:17:ac:8a:e5:
7d:73:78:0a:8b:7e:9b:38:04:8a:70:00:12:1e:a6:
0b:68:a9:69:39:ca:4e:2c:ce:00:7c:b1:2f:d8:67:
a8:4d:8f:f7:22:a4:5e:c0:0f:0e:a2:cf:0b:bd:f7:
86:6c:fe:3b:54:34:88:dc:fb:c9:bc:fe:53:96:cd:
c4:37:30:f9:71:1b:26:2a:97:b9:54:e2:4b:39:35:
87:e3:ae:40:d3:4f:32:f4:b4:c4:cc:85:d9:62:b4:
b8:4f:d5:df:81:44:08:cf:3f:27:9f:8c:a2:e4:89:
46:ca:37:b8:3c:99:9b:8b:98:6e:08:3c:18:7f:41:
14:74:ee:c4:9a:86:f0:b3:a7:35:e6:f6:b8:92:2f:
1d:61:97:81:e2:3a:37:c1:4c:d6:97:18:a4:c4:47:
e6:da:bc:00:74:3b:4e:6d:54:9c:8a:43:1f:21:b3:
50:3f:cb:44:30:0c:ca:81:3b:61:ad:2a:a9:8a:8e:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B1:48:3D:FC:FE:0B:37:60:A3:10:B6:65:F3:B4:DC:07:DC:E5:70
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/D7FIPfz-CzdgoxC2ZfO03Afc5XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.31.0/24
IPv6:
2a0e:6340::/29
Signature Algorithm: sha256WithRSAEncryption
09:fe:a6:93:e5:7c:04:f9:fe:6f:67:9b:a6:ec:9d:61:bb:4b:
5a:f4:6a:4d:e0:de:5e:86:a0:23:12:3b:0e:2b:ce:a6:ff:e1:
d0:bb:9d:99:d2:c2:97:61:a6:67:22:ee:95:76:5b:f6:47:72:
08:97:ee:74:76:c5:85:c0:94:ba:2c:a9:d7:84:cb:5b:9c:10:
55:13:56:a9:d8:d4:fa:67:aa:56:f8:07:2d:ed:a2:a3:14:2b:
47:b2:30:37:db:38:9f:65:fe:df:2b:e8:5e:0a:ef:57:c9:b9:
8a:e4:f7:b3:83:ef:24:b6:08:b3:0d:d9:3b:2c:16:b6:d4:2d:
42:1c:32:26:55:18:db:10:09:d4:e8:35:24:92:12:2f:c1:1c:
a6:26:04:6a:77:63:1e:b8:5e:e2:c3:d8:6d:14:82:dd:7c:78:
fb:fe:9d:ad:93:ac:89:6d:7c:39:ee:e1:92:c3:55:a3:88:90:
51:68:8e:5f:f2:9c:01:78:77:0d:e4:fb:2f:f3:4b:56:ec:d2:
00:1d:da:f0:ad:37:bb:bd:8b:e0:f1:5b:da:2b:cd:d2:b1:ad:
88:24:3a:8c:c2:3a:86:d0:2b:df:fa:a8:92:11:b4:b0:56:ac:
70:6f:d6:b8:eb:0d:11:cd:c1:2b:2a:d8:83:0a:a0:5b:90:0c:
ac:d2:a8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:55 2026 by rpki-client