Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/azWb9JPwuV8BBJ0hM8QpVH7dvrs.roa
File: azWb9JPwuV8BBJ0hM8QpVH7dvrs.roa (raw, json)
Hash identifier: GsZDNGrzv1wCUOqe6qmpdxVjuqbSZwbNy/oHgsO38D0=
Subject key identifier: 6B:35:9B:F4:93:F0:B9:5F:01:04:9D:21:33:C4:29:54:7E:DD:BE:BB
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019F89D8304F0C71B154C2B3B3FCCA4E2977
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/azWb9JPwuV8BBJ0hM8QpVH7dvrs.roa
Signing time: Wed 22 Jul 2026 12:41:14 +0000
ROA not before: Wed 22 Jul 2026 12:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 85.204.125.0/24 maxlen: 24
89.43.41.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
188.215.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:d8:30:4f:0c:71:b1:54:c2:b3:b3:fc:ca:4e:29:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 22 12:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b359bf493f0b95f01049d2133c429547eddbebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:c8:5d:d6:67:65:95:20:2b:c9:f7:0d:b7:
29:55:f1:78:a7:21:14:28:dc:d5:8a:e0:e9:f5:e9:
37:d1:ee:8d:9d:3a:6b:a1:69:3a:73:53:00:df:20:
ad:28:7e:3b:80:2a:0e:15:b6:c2:a0:d4:d9:02:7c:
ca:05:2b:5b:23:84:cf:12:f1:ce:85:4b:0d:92:43:
b8:50:bd:8e:e0:6d:ea:b7:80:88:fe:c2:6a:57:23:
1c:e2:b0:ef:ee:52:f0:da:46:ed:12:c4:08:6e:fd:
67:ca:1d:0b:b4:19:46:ce:42:81:a6:92:28:c0:18:
b8:31:3e:58:3b:5c:8a:14:e5:66:64:e0:14:99:88:
9a:79:3f:14:43:9d:1a:8a:c7:f9:a0:5f:b2:49:84:
e0:ba:78:9f:e5:f8:a5:2b:6b:6e:71:0f:b8:67:0b:
eb:1b:5b:bf:20:ac:bc:2e:6f:30:b8:21:0a:8b:8d:
57:83:33:fa:fb:f2:36:3e:30:38:5e:66:50:7d:4f:
39:b3:87:7e:69:42:a3:ec:1f:19:47:41:71:63:f0:
df:bb:7b:c3:e2:52:bb:d6:72:a7:45:3f:e3:f1:eb:
41:1f:96:97:18:f3:4d:cd:ad:6e:7b:42:eb:b9:84:
e8:32:fd:47:71:4f:d9:98:04:b8:c6:f9:79:32:e8:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:35:9B:F4:93:F0:B9:5F:01:04:9D:21:33:C4:29:54:7E:DD:BE:BB
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/azWb9JPwuV8BBJ0hM8QpVH7dvrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
89.43.41.0/24
188.215.72.0/23
Signature Algorithm: sha256WithRSAEncryption
65:ba:fe:c2:e1:56:cb:57:2d:9c:f9:f4:7f:44:d7:28:03:28:
b0:b6:8a:94:01:2d:10:65:07:55:6d:9c:4e:c1:5e:da:e2:6c:
51:3c:0e:93:73:ae:f4:05:49:c8:28:a2:b2:01:5b:75:73:4b:
41:0d:e8:91:b7:70:0c:5e:b7:2f:c2:d5:26:5d:2e:b3:c3:39:
a7:fa:31:ab:1a:50:52:15:28:4c:7e:ac:f0:7b:85:77:89:c8:
3c:83:1c:69:50:07:6a:a8:bc:fa:b0:e1:d1:2a:ba:a3:ae:73:
2e:3d:dd:65:ca:c9:01:2a:e6:de:93:28:e5:7a:5f:93:2f:f6:
43:2d:ba:bc:65:2c:de:79:8d:a7:5d:31:6d:42:78:88:1f:95:
16:b2:c9:94:a5:3c:e4:74:10:e3:02:1c:26:0d:9e:5c:da:87:
b3:14:7a:a4:01:36:92:3c:88:1f:d2:83:5d:ad:03:fd:9e:43:
5f:d2:f7:4c:e2:b6:d8:00:c5:8a:1d:75:5b:c8:9f:b0:43:1b:
07:4c:85:3b:50:3b:71:47:ef:fe:ed:8e:83:e9:af:e4:8b:7c:
d5:eb:e8:1c:3a:e2:84:41:d7:ee:73:32:9c:59:87:60:5a:7b:
60:2d:82:5e:ff:39:20:0d:3e:54:2c:bc:1a:3d:02:03:0b:bc:
5b:7e:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:11 2026 by rpki-client