Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/_txbFSrzyCUJI1jZHfeL7dao9vc.roa
File: _txbFSrzyCUJI1jZHfeL7dao9vc.roa (raw, json)
Hash identifier: GA+XYdiNwNqkG/DOYzlsHoWRJ00DGH2U+sJnQ3YgffE=
Subject key identifier: FE:DC:5B:15:2A:F3:C8:25:09:23:58:D9:1D:F7:8B:ED:D6:A8:F6:F7
Certificate issuer: /CN=f25dbd1e38f3a7444d75252cdc5aa0ffd49bbb92
Certificate serial: 019F23688B46D8569995DB9C6FC73336F4B6
Authority key identifier: F2:5D:BD:1E:38:F3:A7:44:4D:75:25:2C:DC:5A:A0:FF:D4:9B:BB:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/_txbFSrzyCUJI1jZHfeL7dao9vc.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39756
IP address blocks: 46.102.248.0/24 maxlen: 24
89.33.207.0/24 maxlen: 24
89.36.24.0/21 maxlen: 24
89.36.30.0/24 maxlen: 24
89.41.60.0/23 maxlen: 24
89.47.247.0/24 maxlen: 24
176.223.192.0/19 maxlen: 24
176.223.224.0/20 maxlen: 24
176.223.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8b:46:d8:56:99:95:db:9c:6f:c7:33:36:f4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25dbd1e38f3a7444d75252cdc5aa0ffd49bbb92
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fedc5b152af3c825092358d91df78bedd6a8f6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:ac:9d:da:90:e5:cc:0a:48:69:4c:b2:33:
91:63:93:41:4f:e5:97:e0:60:83:91:7f:ea:33:d9:
d5:dd:66:e8:5d:0c:d7:b7:ab:c5:a8:d7:1f:20:31:
a6:7c:26:f6:bf:46:89:39:e3:d2:02:b9:e1:8e:d3:
12:f7:29:e9:65:11:c9:04:7c:da:f3:a0:8f:90:a8:
76:02:ae:99:4d:99:74:31:4c:a3:ff:f0:75:83:08:
d7:6c:05:8b:0d:2b:c0:4e:13:9a:ef:08:6a:74:09:
46:3d:1e:50:c4:a4:29:9a:a9:bf:b5:4e:2a:ec:af:
89:df:df:89:99:a7:54:e4:5a:d3:c5:6c:98:02:7c:
00:38:4f:95:23:b2:44:83:e0:fb:19:20:38:49:c4:
bb:25:60:cf:5d:0d:5f:09:03:34:5c:07:f7:25:94:
c0:9b:61:58:2f:84:a9:4b:ba:81:ca:ef:c9:f8:97:
c1:bf:30:dd:e3:d9:4b:21:6a:1b:b5:9f:0c:c1:c2:
af:06:60:e2:98:64:87:80:1f:6c:1b:23:40:04:f7:
0c:43:90:f3:e3:ef:0c:19:04:1b:14:ac:78:48:6c:
75:47:7c:9d:48:51:74:bb:b2:ad:ba:71:19:98:cb:
43:48:a1:67:bd:ed:30:b5:34:13:d4:00:b2:3b:fd:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:5B:15:2A:F3:C8:25:09:23:58:D9:1D:F7:8B:ED:D6:A8:F6:F7
X509v3 Authority Key Identifier:
keyid:F2:5D:BD:1E:38:F3:A7:44:4D:75:25:2C:DC:5A:A0:FF:D4:9B:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/_txbFSrzyCUJI1jZHfeL7dao9vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.248.0/24
89.33.207.0/24
89.36.24.0/21
89.41.60.0/23
89.47.247.0/24
176.223.192.0-176.223.247.255
Signature Algorithm: sha256WithRSAEncryption
a9:49:11:b4:84:a1:79:6a:d8:be:d3:75:fb:1e:6b:54:a9:a7:
d8:8b:b2:12:c7:ea:0c:ea:87:15:8b:23:3d:80:e6:67:7e:11:
73:97:e3:61:a1:b3:bd:88:ca:1b:e4:77:12:8c:f8:cb:f6:6c:
6e:94:7c:23:ed:43:7e:c3:bb:c8:c9:b1:d0:62:29:bd:65:c0:
f9:fa:de:19:b5:62:9c:0c:a0:70:45:75:3b:cd:ff:a4:b2:04:
34:0b:dd:83:cb:8d:e7:01:67:1f:95:14:af:7c:c5:ed:c6:5b:
c2:ae:de:04:64:35:ad:80:f3:0f:53:af:fa:55:6f:aa:29:41:
65:98:f1:9c:06:11:3b:99:a1:9b:00:b3:c7:56:ca:50:f3:21:
9f:28:58:9f:cb:43:64:25:21:8a:bc:f2:5b:30:7c:19:20:0e:
76:07:c4:56:6a:8d:26:29:46:7a:e0:55:e5:f5:ce:ae:8b:43:
3a:54:28:87:c6:a7:83:6e:71:42:78:5e:78:4b:ed:9b:0b:19:
28:95:85:ee:e2:a4:11:da:12:82:0b:e8:20:1f:ab:3e:8f:29:
0a:eb:c1:8c:2b:d7:76:23:3c:3c:c0:8b:90:bd:a0:e7:cf:68:
f4:d2:08:d7:bd:ac:84:ea:f7:df:42:a7:fd:fc:76:f6:a2:c7:
41:95:75:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:14 2026 by rpki-client