Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/fPxq3Rnthn9rgllCccsebneIsEY.roa
File: fPxq3Rnthn9rgllCccsebneIsEY.roa (raw, json)
Hash identifier: sOGcnnv7kw9rDNmrJkZHKgFMOL9XnFiQ5b2sRJoEIFc=
Subject key identifier: 7C:FC:6A:DD:19:ED:86:7F:6B:82:59:42:71:CB:1E:6E:77:88:B0:46
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019F4D506C70A9882A45E6A0A758AF6B3F73
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/fPxq3Rnthn9rgllCccsebneIsEY.roa
Signing time: Fri 10 Jul 2026 18:35:43 +0000
ROA not before: Fri 10 Jul 2026 18:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198473
IP address blocks: 185.20.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:50:6c:70:a9:88:2a:45:e6:a0:a7:58:af:6b:3f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Jul 10 18:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cfc6add19ed867f6b82594271cb1e6e7788b046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:a8:d9:b0:f4:8f:1a:e5:64:1e:15:f4:76:
4a:58:b3:94:ca:1a:12:90:b3:f0:d1:49:f9:fd:60:
5c:54:2c:ce:cd:fd:28:59:a0:36:0a:66:c8:96:a5:
2f:5a:00:33:1f:87:01:9e:52:85:d7:9c:2b:9d:72:
04:7a:4f:50:69:93:9f:06:14:a6:c5:9a:7f:1a:7d:
4c:0f:c6:52:65:a7:70:81:bc:3a:ef:c7:68:f9:99:
42:21:d3:4e:a1:83:ef:76:83:f6:e5:d8:e4:c8:2d:
b5:78:8f:59:1c:1e:80:26:5e:c7:fa:51:59:0b:d4:
ce:72:bf:3c:93:54:8e:12:e2:28:8b:17:f3:de:d0:
0e:53:e7:7e:81:72:73:d1:ea:48:21:5d:55:99:98:
d3:23:18:fd:1c:ed:ab:5e:51:40:82:b7:61:ca:7d:
48:2b:47:0c:cb:00:3a:30:c2:6f:b4:53:bd:39:0e:
ce:8b:84:e0:eb:2b:0c:d4:ac:45:37:45:d9:7a:32:
91:23:ab:b3:80:e6:a6:bd:3a:94:4b:af:ad:4d:18:
5e:e2:0d:38:37:73:e2:1a:43:fb:91:59:16:c2:f7:
07:2c:6f:c2:64:39:4e:8b:a7:68:95:b6:7d:24:42:
1a:aa:2a:80:d6:2a:cb:45:36:a3:d1:65:dc:e7:6b:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FC:6A:DD:19:ED:86:7F:6B:82:59:42:71:CB:1E:6E:77:88:B0:46
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/fPxq3Rnthn9rgllCccsebneIsEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:20:46:fb:04:74:5c:4f:9b:35:18:35:e9:3a:4a:ba:b8:62:
3d:2d:c5:7f:97:c4:0c:68:8e:f2:25:08:cb:1f:18:bb:58:cd:
d7:9f:73:be:4e:f4:83:bd:f9:09:55:25:c3:f5:59:1f:8e:56:
d5:09:ba:fd:78:43:46:d2:1b:03:2f:1c:b1:d5:46:59:4d:55:
6e:bc:d9:77:fc:87:34:5f:b9:6c:33:be:c1:2e:e8:c6:04:bd:
fd:25:87:21:76:3f:4d:54:9a:8f:ca:73:5a:b7:d9:ab:05:24:
b8:92:04:f7:35:ba:b7:21:7a:bc:54:c1:01:da:fd:9c:db:a6:
41:b1:99:c3:3d:4a:f7:42:66:0e:44:0d:a4:6f:12:41:64:6c:
3d:48:ca:17:13:f9:be:b4:94:bb:93:37:c7:02:8a:b6:51:9b:
8b:b3:03:15:a0:91:e2:00:76:13:77:b3:1a:6b:48:f1:50:d3:
a3:9c:b1:13:ff:e5:4f:53:c6:fc:7b:d8:9a:93:f6:96:d5:e4:
7c:ea:56:b9:a1:07:92:7f:de:bb:31:45:22:cd:a1:e6:fb:e9:
5c:eb:52:1f:46:62:bc:3a:f5:4a:0e:89:0b:cd:fe:1d:95:07:
ee:da:44:31:1e:34:98:47:da:fb:2c:96:67:17:a3:20:ef:ac:
a5:46:b3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:50 2026 by rpki-client