Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/1-he4zY3567sT-ir6gGOuSLJUrag.roa
File: 1-he4zY3567sT-ir6gGOuSLJUrag.roa (raw, json)
Hash identifier: i7BZJdjCKGAhwVaWzHHchSwEiyPMMhU7WoOvC1KUVtA=
Subject key identifier: FA:17:B8:CD:8D:F9:EB:BB:13:FA:2A:FA:80:63:AE:48:B2:54:AD:A8
Certificate issuer: /CN=c09419322f670cd99d42dff4ac54248d90955583
Certificate serial: 019F2368588678D50BB177C7AE02EDE7332F
Authority key identifier: C0:94:19:32:2F:67:0C:D9:9D:42:DF:F4:AC:54:24:8D:90:95:55:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJQZMi9nDNmdQt_0rFQkjZCVVYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/1-he4zY3567sT-ir6gGOuSLJUrag.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 194.5.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJQZMi9nDNmdQt_0rFQkjZCVVYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:58:86:78:d5:0b:b1:77:c7:ae:02:ed:e7:33:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09419322f670cd99d42dff4ac54248d90955583
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa17b8cd8df9ebbb13fa2afa8063ae48b254ada8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:a6:ce:fe:15:50:f1:69:e6:77:e7:6b:5a:
31:e2:c0:4b:10:b4:89:18:c8:fa:ce:b0:cc:e7:1b:
39:f2:72:0e:63:b9:b8:16:06:b0:6e:a6:2a:1d:8d:
34:02:67:77:43:d1:48:91:48:ce:5f:f2:43:1c:ed:
e8:67:38:eb:89:8a:52:91:88:9a:ed:c7:38:1d:d7:
e0:09:6b:ab:97:28:5b:0b:a7:2a:0d:dd:40:84:ac:
7f:69:26:6a:23:21:f6:e2:b7:5d:21:a4:f1:6b:0f:
e8:52:d7:fe:30:bf:cc:18:b4:0f:fb:a9:b0:86:12:
4e:09:43:a4:15:bc:a6:3e:5b:f3:54:0e:56:91:63:
52:ca:c2:21:16:9a:04:e5:8d:88:46:f3:69:57:09:
90:a7:3e:c5:6f:ba:69:9f:7b:cf:5b:16:2c:43:41:
8c:4b:ee:b2:31:d8:f3:15:02:35:aa:0d:65:d4:de:
79:62:28:24:3d:6f:51:fa:4b:18:28:cd:7f:bf:08:
f2:ab:41:2c:80:30:52:de:e1:2c:5b:e6:43:72:1f:
88:27:27:1f:37:b2:fe:ef:95:b2:41:e9:02:28:70:
97:69:14:1c:f7:0e:2a:c5:78:72:d5:3e:77:09:a8:
2c:e4:2b:8c:bf:9b:1d:86:0b:71:06:c3:bc:43:a4:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:B8:CD:8D:F9:EB:BB:13:FA:2A:FA:80:63:AE:48:B2:54:AD:A8
X509v3 Authority Key Identifier:
keyid:C0:94:19:32:2F:67:0C:D9:9D:42:DF:F4:AC:54:24:8D:90:95:55:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJQZMi9nDNmdQt_0rFQkjZCVVYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/1-he4zY3567sT-ir6gGOuSLJUrag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/wJQZMi9nDNmdQt_0rFQkjZCVVYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.50.0/24
Signature Algorithm: sha256WithRSAEncryption
18:51:c0:48:75:65:90:94:f5:39:2a:0d:bc:f2:b5:68:6b:26:
c2:35:34:17:21:06:d7:f1:d0:15:2f:82:97:81:cd:3d:bb:8b:
d4:2b:3c:35:22:58:be:fd:b5:de:f9:8a:40:3d:92:96:c9:d0:
4f:65:c2:a1:7a:1f:df:1f:b1:ff:c8:9e:74:dc:b0:1b:56:e2:
d8:e2:cb:c7:cf:bf:38:c9:17:08:35:64:8f:c5:10:ae:9a:7f:
44:05:58:be:79:c9:a7:95:f8:20:14:c4:89:29:25:99:d1:f1:
10:e0:ea:2b:1c:3b:a7:81:2e:48:d1:c5:d0:d0:1a:2c:45:4c:
4a:e4:58:e4:a3:09:58:54:bd:7a:88:3e:e7:4d:a0:42:59:b4:
36:86:b9:24:77:b5:72:4e:39:92:2a:10:db:33:f6:b0:95:ae:
74:0b:2e:3e:65:87:48:27:7f:c1:71:06:59:e6:d5:df:e7:62:
a8:fa:2a:21:a7:8e:94:4b:5b:56:41:df:08:e4:68:05:66:e5:
52:8a:2e:17:32:ed:db:8e:e0:fb:a0:7a:dd:f8:e7:d3:f0:e2:
78:da:a2:04:da:61:c9:61:55:b7:c5:1d:7f:8e:d1:3d:4d:a4:
d4:e1:6c:11:7a:80:f1:2f:04:5f:18:1d:6a:2d:4a:ab:47:a6:
4b:91:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:29 2026 by rpki-client