Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/R_vcKb1Y3OVUOhgcnTj9SSJfqww.roa
File: R_vcKb1Y3OVUOhgcnTj9SSJfqww.roa (raw, json)
Hash identifier: XO05SKBMj3JiSbINglJIVoADEMMaDqJEw7rnY2nqPeQ=
Subject key identifier: 47:FB:DC:29:BD:58:DC:E5:54:3A:18:1C:9D:38:FD:49:22:5F:AB:0C
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 019F8DBBA5B5ED10D0DD51FE5573C0BDBC4C
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/R_vcKb1Y3OVUOhgcnTj9SSJfqww.roa
Signing time: Thu 23 Jul 2026 06:48:32 +0000
ROA not before: Thu 23 Jul 2026 06:48:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 84.54.14.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:bb:a5:b5:ed:10:d0:dd:51:fe:55:73:c0:bd:bc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jul 23 06:48:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47fbdc29bd58dce5543a181c9d38fd49225fab0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:05:c4:e1:51:6a:ef:5a:b1:47:25:7d:e4:
ef:fa:30:7c:ac:2f:66:e5:f9:57:e5:74:07:ae:81:
94:cf:7c:83:6b:4c:41:41:de:cc:f2:97:a7:c1:1e:
51:75:80:6c:d5:b6:f2:c4:48:bb:90:8d:0d:69:e0:
97:6c:98:c8:38:c4:2d:19:87:53:88:08:d2:7d:e7:
e0:16:90:46:16:c8:b5:98:de:4a:36:55:3d:d3:2b:
57:65:e3:84:0e:b0:29:e2:10:9f:fe:ca:85:7b:f3:
41:96:92:80:e5:14:8e:40:24:30:c5:6a:1d:93:b7:
45:5c:b0:a6:9f:23:b7:98:08:b1:5e:bd:c6:13:e0:
7c:b3:d7:df:8d:01:13:2c:81:d5:be:e7:d3:90:ed:
a5:5d:5e:f3:1b:f7:0e:21:d6:d0:d9:8c:21:f9:68:
0f:04:03:4a:e5:72:ad:8e:fe:27:39:8a:51:7e:f9:
38:56:db:b2:bd:6a:99:ae:15:54:37:88:c4:47:c7:
74:74:ef:e8:27:c9:64:a5:8f:77:c0:d1:f7:86:30:
b5:57:28:44:90:90:99:6f:2c:15:88:c0:09:81:9a:
78:d3:35:bb:a3:cc:80:c5:29:7b:2c:12:76:fb:aa:
50:af:1f:2a:f5:a1:b0:7e:23:ac:dc:21:c6:8b:11:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FB:DC:29:BD:58:DC:E5:54:3A:18:1C:9D:38:FD:49:22:5F:AB:0C
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/R_vcKb1Y3OVUOhgcnTj9SSJfqww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
176.98.42.0/23
185.81.152.0/23
185.81.155.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f3:32:36:72:06:d8:63:3c:73:21:49:10:40:7d:e3:fc:7d:
6f:01:ef:ad:fc:78:64:79:26:ee:2f:67:5e:c0:35:7b:d4:40:
c1:ad:9b:f3:fd:a7:f4:b7:54:ab:74:87:3e:bc:0a:83:77:38:
38:87:0f:8f:4c:0f:9c:32:f4:f5:91:04:de:ab:df:b3:58:bf:
f8:6e:53:57:54:9c:d2:03:d9:4f:83:e5:7b:fb:51:a1:66:98:
9e:dd:2a:8a:ce:af:66:94:c7:7c:f1:94:a1:60:f0:77:c9:e1:
b5:e4:66:b7:fb:66:a8:95:8a:81:66:d5:78:bb:9b:61:10:72:
47:58:20:d0:30:5a:f0:b6:51:fb:74:05:e6:6d:45:6c:10:ab:
ca:3c:8f:73:d5:bf:9b:ca:c9:45:a7:7d:c7:e5:4c:b2:7c:05:
db:9f:af:60:0e:0f:07:b2:54:7d:d0:16:0f:e4:a0:c1:4a:b4:
49:b1:bf:90:f1:0f:e4:c6:c5:27:1b:bc:93:a3:6f:a9:eb:12:
27:3c:a6:44:00:94:2e:14:b7:e9:cf:7a:0c:8e:9f:7d:08:d6:
33:2f:b8:b2:4d:c8:a4:56:5a:1f:67:1a:d1:2f:ae:71:c2:b4:
aa:79:c9:b4:1d:ee:3b:64:74:cb:5e:8d:cc:86:ef:87:b7:43:
b5:ce:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:00 2026 by rpki-client