Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/fU7vAx88I2t9pBLysLmJvv9YNY8.roa
File: fU7vAx88I2t9pBLysLmJvv9YNY8.roa (raw, json)
Hash identifier: TqwghLMTcemORehBLI5oD0AWOOUybzh1PnqJKdrkY2A=
Subject key identifier: 7D:4E:EF:03:1F:3C:23:6B:7D:A4:12:F2:B0:B9:89:BE:FF:58:35:8F
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019F6F5C47C96B9FCBE1104C04BBF9C688D0
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/fU7vAx88I2t9pBLysLmJvv9YNY8.roa
Signing time: Fri 17 Jul 2026 09:15:46 +0000
ROA not before: Fri 17 Jul 2026 09:15:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44097
IP address blocks: 193.27.0.0/24 maxlen: 24
193.43.214.0/24 maxlen: 24
193.222.128.0/24 maxlen: 24
2001:67c:ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:5c:47:c9:6b:9f:cb:e1:10:4c:04:bb:f9:c6:88:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jul 17 09:15:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d4eef031f3c236b7da412f2b0b989beff58358f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:f4:b3:ec:1b:3c:23:36:35:6f:c2:95:56:
aa:e9:7b:44:fb:01:4d:70:ed:07:2c:98:a0:da:20:
d9:ae:4b:b8:ce:c8:ac:cd:d3:72:b5:b2:7b:74:6a:
1e:d0:85:7a:02:c7:c1:1f:e4:67:36:6f:64:cd:e8:
6c:2f:12:5f:34:87:7c:3d:d8:ce:c8:27:c0:ec:f3:
bb:c2:dd:e7:69:21:18:81:31:b3:49:3c:da:8d:66:
c9:c1:15:12:b7:95:aa:76:1c:81:bd:72:32:20:c1:
5d:dd:6b:bd:31:da:6f:f1:ec:ee:30:dc:af:68:df:
be:f5:8d:36:de:7f:e9:33:74:b4:48:84:ca:23:e6:
b5:9f:41:84:76:19:4d:bb:49:dd:00:7c:2d:b1:0c:
2c:e5:dc:da:f4:d4:02:20:91:c4:5a:03:62:c4:dd:
88:8a:30:01:92:e6:ff:2d:4a:9c:3d:ea:d1:6c:3e:
3a:d9:44:0c:2d:19:e4:52:af:02:66:84:12:8f:82:
55:6e:b4:80:22:a3:b2:36:46:20:ad:57:00:50:c3:
86:7c:92:ac:7b:35:4c:6d:85:fd:df:af:2c:76:fd:
a2:ec:97:a3:ca:9a:fa:17:c8:2e:89:13:a4:05:8c:
ae:04:4b:0a:e2:de:7f:d6:d6:e5:e1:01:26:43:7e:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4E:EF:03:1F:3C:23:6B:7D:A4:12:F2:B0:B9:89:BE:FF:58:35:8F
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/fU7vAx88I2t9pBLysLmJvv9YNY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.0.0/24
193.43.214.0/24
193.222.128.0/24
IPv6:
2001:67c:ec::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c2:2c:80:3b:17:26:5a:fc:82:c3:8a:1d:95:dc:a1:fd:21:
d3:ab:a9:ec:b0:66:8c:97:8f:83:33:95:9d:73:f5:25:65:ea:
75:1e:ed:48:a7:a0:db:98:63:32:77:ff:64:9d:d3:ad:de:7c:
8c:58:df:8f:48:db:f4:e3:17:8e:86:00:f4:01:ae:10:68:80:
d3:a6:3e:d9:af:a8:58:03:16:4c:7f:8f:85:59:08:6b:80:46:
e5:1c:46:c1:b8:e7:47:29:90:a8:2b:63:ee:f9:dc:7d:c2:b8:
fd:00:9c:09:4b:5e:b1:8a:6c:98:c1:8d:48:64:16:19:eb:66:
76:ad:7e:cc:8a:c6:cc:80:7f:29:80:8e:a4:00:29:c0:85:87:
ef:a0:73:28:83:b7:30:21:8e:3d:1e:a5:68:ef:7d:1e:39:c1:
38:fc:b6:1a:43:ea:c2:b5:47:a0:b5:93:ff:4f:57:34:85:a5:
b9:c8:03:fb:f6:33:a8:f7:d3:54:2e:56:fb:fe:1b:f6:17:62:
60:fe:4c:75:d9:3b:78:f1:f6:8f:54:27:ef:50:c3:08:55:05:
45:eb:98:5f:54:cb:fb:68:46:96:e9:62:8f:1a:8b:32:00:01:
91:34:41:0d:33:e9:81:15:77:5d:5d:5a:6a:30:39:d6:1b:5b:
f2:b1:2f:37
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ9vXEfJa5/L4RBMBLv5xojQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx
NTQ0NGQwHhcNMjYwNzE3MDkxNTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDRlZWYwMzFmM2MyMzZiN2RhNDEyZjJiMGI5ODliZWZmNTgzNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlr0s+wbPCM2NW/ClVaq6XtE+wFN
cO0HLJig2iDZrku4zsiszdNytbJ7dGoe0IV6AsfBH+RnNm9kzehsLxJfNId8PdjO
yCfA7PO7wt3naSEYgTGzSTzajWbJwRUSt5WqdhyBvXIyIMFd3Wu9Mdpv8ezuMNyv
aN++9Y023n/pM3S0SITKI+a1n0GEdhlNu0ndAHwtsQws5dza9NQCIJHEWgNixN2I
ijABkub/LUqcPerRbD462UQMLRnkUq8CZoQSj4JVbrSAIqOyNkYgrVcAUMOGfJKs
ezVMbYX9368sdv2i7Jejypr6F8guiROkBYyuBEsK4t5/1tbl4QEmQ36rtwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFH1O7wMfPCNrfaQS8rC5ib7/WDWPMB8GA1UdIwQY
MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt
ZjBkMmI5NDNjYjUzLzEvZlU3dkF4ODhJMnQ5cEJMeXNMbUp2djlZTlk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz
LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAwRsAAwQA
wSvWAwQAwd6AMA8EAgACMAkDBwAgAQZ8AOwwDQYJKoZIhvcNAQELBQADggEBAG3C
LIA7FyZa/ILDih2V3KH9IdOrqeywZoyXj4MzlZ1z9SVl6nUe7UinoNuYYzJ3/2Sd
063efIxY349I2/TjF46GAPQBrhBogNOmPtmvqFgDFkx/j4VZCGuARuUcRsG450cp
kKgrY+753H3CuP0AnAlLXrGKbJjBjUhkFhnrZnatfsyKxsyAfymAjqQAKcCFh++g
cyiDtzAhjj0epWjvfR45wTj8thpD6sK1R6C1k/9PVzSFpbnIA/v2M6j301QuVvv+
G/YXYmD+THXZO3jx9o9UJ+9QwwhVBUXrmF9Uy/toRpbpYo8aizIAAZE0QQ0z6YEV
d11dWmowOdYbW/KxLzc=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:08 2026 by rpki-client