Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/fjRTthrznnEGPQGfyNXJuqtdk74.roa
File: fjRTthrznnEGPQGfyNXJuqtdk74.roa (raw, json)
Hash identifier: t647JvL7SRl89ys3oXs5sNdLTxxTw2XH1zzLSYKCd24=
Subject key identifier: 7E:34:53:B6:1A:F3:9E:71:06:3D:01:9F:C8:D5:C9:BA:AB:5D:93:BE
Certificate issuer: /CN=ea146a79f737efff756d48e35a8a05b97022214f
Certificate serial: 019F236916AB619DC387A466B760EEBA49E5
Authority key identifier: EA:14:6A:79:F7:37:EF:FF:75:6D:48:E3:5A:8A:05:B9:70:22:21:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/fjRTthrznnEGPQGfyNXJuqtdk74.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205734
IP address blocks: 88.205.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:16:ab:61:9d:c3:87:a4:66:b7:60:ee:ba:49:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea146a79f737efff756d48e35a8a05b97022214f
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e3453b61af39e71063d019fc8d5c9baab5d93be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:58:03:22:9c:05:db:9c:0e:0d:43:38:53:
48:01:47:5a:63:08:d0:14:3b:c1:5c:f7:b1:8a:9d:
43:12:b8:96:d6:5c:f8:d3:54:32:04:af:95:c3:0f:
98:f4:f6:aa:68:27:72:82:53:26:0f:8a:71:1c:b3:
8a:87:a5:fe:49:f4:7b:92:cc:c3:cd:c5:bf:30:95:
ba:b4:a8:88:fc:84:99:0a:4b:2b:bd:69:12:54:11:
2d:0b:f3:da:0d:ae:a7:13:93:44:33:dc:65:a0:ba:
a0:d7:bf:f3:5b:46:c1:2d:92:d2:7e:92:e8:ee:ec:
17:88:2e:35:02:a8:1e:b0:53:02:2d:ab:35:4a:2c:
bb:c7:ce:79:dc:c7:df:b7:cf:bc:f4:13:5e:5e:f4:
f5:30:f4:19:33:c5:d4:56:ff:91:9e:fd:50:25:c2:
78:5f:96:d0:5e:ea:ea:65:89:ce:0e:e4:c5:19:42:
f7:ae:e7:ff:97:0d:ab:32:89:b1:85:2e:39:1c:cf:
28:dd:14:e5:9f:29:4c:14:0d:e1:8e:ac:bc:7b:69:
0f:1b:7c:c1:31:31:08:16:ea:7e:6a:dc:6a:39:c7:
4a:a3:d3:17:d7:74:c5:b4:1e:f9:a8:2c:58:72:ec:
73:8e:e1:8b:5f:48:5b:46:c7:50:b8:b8:d8:f5:40:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:34:53:B6:1A:F3:9E:71:06:3D:01:9F:C8:D5:C9:BA:AB:5D:93:BE
X509v3 Authority Key Identifier:
keyid:EA:14:6A:79:F7:37:EF:FF:75:6D:48:E3:5A:8A:05:B9:70:22:21:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/fjRTthrznnEGPQGfyNXJuqtdk74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.205.16.0/23
Signature Algorithm: sha256WithRSAEncryption
28:58:02:36:2b:5a:69:05:fe:28:d2:a1:ee:29:4f:62:05:be:
bb:8e:f3:01:b0:ea:17:91:87:74:ce:79:49:0e:92:79:be:f5:
e7:61:57:06:8a:5b:8d:89:56:59:a1:1f:7a:3b:47:1f:ba:0a:
66:47:6d:00:a9:88:a5:ed:76:06:5a:79:0f:05:c4:41:69:25:
8b:0c:3d:fd:b3:f7:37:d4:90:8d:16:89:b0:0a:01:5b:35:9f:
b0:b5:58:e2:ac:50:02:80:f4:45:a7:40:40:06:93:f5:ce:25:
7a:a1:0b:56:99:90:95:87:dc:f9:50:c3:d6:0a:6f:a6:b1:47:
3e:18:aa:3d:53:51:d0:db:ac:9d:46:39:e4:7a:d7:df:cf:2b:
40:21:86:5e:4c:98:15:65:79:75:7b:1c:68:d6:76:15:7e:bc:
c8:40:ae:63:b4:3c:67:fe:8d:a2:5c:ad:50:cb:d3:c1:63:0b:
37:f5:c1:92:a7:4b:ce:88:1e:a8:7e:cb:85:36:86:31:d4:6c:
aa:66:96:55:0c:e0:f1:19:71:41:0b:df:05:09:79:75:50:8c:
3a:a0:56:35:b8:ed:2f:97:de:4a:34:c7:88:a0:57:e3:1b:6a:
6c:6e:86:dc:79:01:2a:fa:ba:fd:89:ec:25:e7:56:47:20:a1:
05:1d:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:01 2026 by rpki-client