Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/V7RlhBqRdFHnFoFKubNeYK3a_5M.roa
File: V7RlhBqRdFHnFoFKubNeYK3a_5M.roa (raw, json)
Hash identifier: YvfqxwL6yWgifq6rmEH5uPSg0BfD7f+oaBIAHta6WNA=
Subject key identifier: 57:B4:65:84:1A:91:74:51:E7:16:81:4A:B9:B3:5E:60:AD:DA:FF:93
Certificate issuer: /CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Certificate serial: 019F23689AB0ADE2C07116421B8E95839A0A
Authority key identifier: A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/V7RlhBqRdFHnFoFKubNeYK3a_5M.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216333
IP address blocks: 194.8.133.0/24 maxlen: 24
2a13:d6c0:1::/48 maxlen: 48
2a13:d6c0:20::/48 maxlen: 48
2a13:d6c0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9a:b0:ad:e2:c0:71:16:42:1b:8e:95:83:9a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57b465841a917451e716814ab9b35e60addaff93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:31:7c:6e:3a:a1:fe:40:88:13:a6:e0:cd:
6b:49:08:07:9d:e0:5f:aa:bc:c2:e3:0b:74:3f:73:
39:7c:93:1d:6d:38:00:de:04:3b:50:a0:df:f5:2d:
b9:d8:4a:c3:45:0d:fb:76:5b:f1:36:8b:ad:a8:ec:
57:84:ff:26:ab:1e:95:57:81:c9:8d:f0:3f:de:ae:
30:0a:a7:93:ac:bc:67:9a:49:0b:94:b4:94:b6:ea:
e6:a9:e6:8b:9a:74:24:3b:c4:57:d2:66:bc:e8:2d:
44:17:0b:60:a4:9d:3c:0b:f1:78:07:ef:86:52:78:
eb:cf:73:52:e6:cd:ad:72:8d:e5:63:e5:61:b6:b8:
26:07:16:3e:d2:32:41:91:be:b1:07:40:f8:60:b4:
75:2f:80:f8:60:04:01:a2:69:63:46:3d:7f:46:f9:
b9:22:90:8f:14:b9:f5:92:dd:bf:b0:05:d5:a8:aa:
98:54:d6:05:f3:06:9e:4c:36:c9:1c:1f:d8:fd:a7:
79:4d:31:c0:13:f4:6e:27:12:af:bb:ae:67:a2:a6:
8f:da:c7:41:c2:cd:12:0a:09:54:af:88:e3:63:9a:
4b:3e:73:54:48:69:0c:a6:a3:5b:e0:28:14:9d:ac:
27:66:bd:c4:0e:4b:18:4f:2d:25:6b:b5:39:4d:87:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:65:84:1A:91:74:51:E7:16:81:4A:B9:B3:5E:60:AD:DA:FF:93
X509v3 Authority Key Identifier:
keyid:A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/V7RlhBqRdFHnFoFKubNeYK3a_5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.133.0/24
IPv6:
2a13:d6c0:1::/48
2a13:d6c0:20::/48
2a13:d6c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
27:9d:94:e7:d7:9a:f5:7c:2a:c3:6b:5d:ba:e8:b3:51:29:97:
c3:f8:84:7d:78:47:07:04:d2:76:ca:6e:b6:7f:82:67:71:69:
30:79:c6:df:3e:63:4b:f0:9b:35:ee:1e:8b:83:1b:32:6f:04:
ab:09:fe:1e:e6:34:fc:26:0c:11:31:e0:3b:3f:d1:3a:62:10:
5a:01:08:dc:fa:33:af:63:7e:b1:dd:83:cb:9d:c9:79:30:98:
ae:cd:ae:cc:a1:0c:21:1e:a1:35:38:9e:20:be:73:42:ee:23:
b3:1d:42:a1:02:de:c6:7b:4f:9c:0c:e8:1f:86:48:23:f2:66:
17:b3:d0:8c:74:c3:b1:3a:88:95:b9:f0:73:84:99:11:91:1b:
a0:2f:ef:49:ca:30:e0:d6:8f:b7:19:84:9c:c5:b8:a6:f6:a8:
77:17:5f:45:d9:c7:ae:25:fc:ae:12:ef:a3:e9:ff:ce:00:e8:
69:fa:0e:56:36:e3:a5:be:6d:0b:93:81:15:d5:02:f1:e6:9d:
3a:f9:2e:b9:ae:ee:02:16:f3:dd:c9:41:aa:18:a8:1a:39:6c:
e1:3c:09:5c:e6:7c:7d:8c:f9:15:d5:23:e3:53:78:0b:cf:e6:
bd:a4:c6:3c:e3:45:d0:a1:55:c6:33:19:3d:80:de:7e:af:98:
c7:77:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:37 2026 by rpki-client