Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-cZBtwABevDSVp_6aF1_ifz0jzA.roa
File: 1-cZBtwABevDSVp_6aF1_ifz0jzA.roa (raw, json)
Hash identifier: 5864DqSpnZa15OKKtL55JuDmAeoh45NfMCOlIrn1weQ=
Subject key identifier: F9:C6:41:B7:00:01:7A:F0:D2:56:9F:FA:68:5D:7F:89:FC:F4:8F:30
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019F89478C7F1A0F0F2774AD4E8A30A06B6E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-cZBtwABevDSVp_6aF1_ifz0jzA.roa
Signing time: Wed 22 Jul 2026 10:03:15 +0000
ROA not before: Wed 22 Jul 2026 10:03:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204720
IP address blocks: 31.148.242.0/24 maxlen: 24
93.171.230.0/24 maxlen: 24
195.178.4.0/24 maxlen: 24
195.178.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:47:8c:7f:1a:0f:0f:27:74:ad:4e:8a:30:a0:6b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 22 10:03:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9c641b700017af0d2569ffa685d7f89fcf48f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:48:f5:31:51:57:ad:a8:70:4a:a9:82:f9:
a8:fa:0e:4e:a4:d7:8d:a5:32:2d:b2:71:19:1e:8a:
ec:a7:0c:0d:72:cd:90:a2:82:26:e5:f0:ac:4d:25:
0e:fe:16:ab:df:bc:1e:98:2c:3b:92:fc:6d:3a:8a:
ec:91:fd:c8:13:20:4e:60:95:b0:c3:a2:b0:85:70:
60:fe:1d:19:46:ef:85:5e:a5:4a:fb:2e:25:e9:39:
8e:c4:9d:46:54:f5:66:54:b3:bb:1b:3a:18:1a:9f:
95:b1:d1:e4:fe:a1:c0:04:ac:34:4d:03:66:73:67:
06:af:62:80:e0:1f:89:c2:99:fb:c3:e3:c1:f2:51:
18:ab:73:07:6d:73:ed:3f:09:4d:44:eb:43:1e:4f:
78:a9:d0:e9:e7:f6:8a:81:04:9a:c9:01:b7:cb:5e:
80:7f:55:56:c6:59:62:b5:c7:5a:74:ac:02:25:e0:
2f:83:92:5a:5b:fd:a5:1f:f6:a2:a9:6f:d2:ff:29:
d6:cf:cf:ae:60:52:ce:b0:31:95:3e:22:00:13:a5:
49:d3:66:1f:1c:52:a3:5c:90:b0:e7:10:4b:1e:b9:
5a:8d:3c:88:f5:b8:4d:f4:dd:c7:ae:ab:ea:f2:51:
9f:f7:70:b4:7f:e3:97:91:d7:28:be:ef:04:4a:f1:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C6:41:B7:00:01:7A:F0:D2:56:9F:FA:68:5D:7F:89:FC:F4:8F:30
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-cZBtwABevDSVp_6aF1_ifz0jzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.242.0/24
93.171.230.0/24
195.178.4.0/23
Signature Algorithm: sha256WithRSAEncryption
56:f5:6d:5c:50:a0:8a:bf:0e:a5:84:0a:47:8f:1f:1c:0d:5b:
ab:69:aa:af:3e:aa:3c:c2:09:24:87:6b:05:c2:a3:e3:9b:26:
90:1f:dd:02:5b:e4:bb:79:4a:76:34:35:73:0f:eb:5e:43:3e:
98:6a:e9:21:bd:f7:41:69:0b:99:3d:f5:5d:1d:07:ed:5c:8f:
44:c3:a1:a0:12:22:65:c3:05:c1:34:5e:cf:9f:6b:17:48:3e:
4f:66:b2:77:f8:8c:b9:6f:25:5d:b8:92:f4:28:0e:38:ef:25:
47:05:13:b4:b1:9b:4f:c6:db:0f:e6:5e:90:50:9a:5f:64:2a:
c6:f2:63:51:75:93:52:80:af:3e:ed:74:ca:ae:01:85:51:2e:
ef:07:b1:17:aa:3a:f3:a3:ec:bb:88:24:66:97:00:2e:b7:c8:
e1:ca:de:15:b6:69:18:79:e7:03:87:a4:03:58:1c:ea:0e:2f:
69:a7:ae:49:75:86:6b:27:6c:49:cd:50:50:79:90:20:6f:8f:
d3:23:ad:d9:46:31:d0:47:c9:4f:40:74:c6:cc:47:79:a5:5d:
d2:63:c2:ab:16:4f:19:26:7f:95:dc:11:60:22:8e:d9:15:b3:
4f:a6:d8:9d:f1:d5:33:7c:1c:7e:81:ef:4e:5b:86:3d:48:f2:
5b:95:aa:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:38 2026 by rpki-client