Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Fivb1SW9lsFVwsJwjqgMykWEEdE.roa
File: Fivb1SW9lsFVwsJwjqgMykWEEdE.roa (raw, json)
Hash identifier: zmxRgLvMepPFPNUFI1TWdNAxXvFRCxr5eHeyVhjm+aw=
Subject key identifier: 16:2B:DB:D5:25:BD:96:C1:55:C2:C2:70:8E:A8:0C:CA:45:84:11:D1
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019F8DF7C9E1FEBA4B740DB73B73085B2852
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Fivb1SW9lsFVwsJwjqgMykWEEdE.roa
Signing time: Thu 23 Jul 2026 07:54:14 +0000
ROA not before: Thu 23 Jul 2026 07:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 188.191.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:f7:c9:e1:fe:ba:4b:74:0d:b7:3b:73:08:5b:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jul 23 07:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=162bdbd525bd96c155c2c2708ea80cca458411d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:ce:87:7e:19:2e:0a:fa:23:f0:64:03:51:
c3:5f:bb:7e:ba:69:a8:54:49:58:5c:52:01:03:ac:
8d:8b:75:b0:bd:bc:8e:67:f2:6b:6f:cf:07:0a:b8:
c6:9b:d0:61:4f:34:b9:7f:20:42:49:6c:61:a8:b1:
8d:30:6a:f2:0e:44:4c:be:06:ce:0e:64:33:2e:a6:
5d:8d:54:6f:af:0c:fd:05:a8:e9:31:0e:58:90:39:
ec:bb:eb:af:29:ec:28:f9:0e:ef:ea:1d:8b:da:ff:
0b:ad:d0:2f:f5:06:7e:e1:a2:72:f7:f0:6b:ce:35:
07:40:da:56:28:be:e4:9b:fd:9f:9e:6b:9c:e7:99:
48:47:ae:3d:9c:4c:46:ff:ce:77:67:51:c0:b3:03:
36:11:9e:06:d6:f1:51:bc:3f:08:23:49:e3:6f:7a:
94:89:52:1a:d3:f1:6a:cf:24:80:4b:95:73:16:e2:
d5:99:47:d8:27:e5:9f:57:8c:da:88:15:61:d8:ef:
c6:32:96:da:b5:ff:da:22:34:06:da:f6:d0:f3:fd:
12:2d:b8:b4:35:f6:95:01:ef:9e:a8:af:fc:15:8f:
42:1c:ce:34:6b:7e:e9:80:bf:a4:20:61:d2:50:58:
eb:a9:1c:b1:cf:25:73:a2:0b:48:5f:3e:6b:d3:e8:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:DB:D5:25:BD:96:C1:55:C2:C2:70:8E:A8:0C:CA:45:84:11:D1
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Fivb1SW9lsFVwsJwjqgMykWEEdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.111.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cf:94:7b:c4:08:e1:b6:78:9b:4d:f4:cf:93:ae:36:da:25:
fa:ad:24:44:2c:22:56:05:df:44:fb:50:5b:ae:46:cf:5c:6b:
8e:a8:2d:fa:96:59:d0:a2:4f:ab:1a:88:5e:d4:6d:22:97:13:
c9:81:ce:af:91:70:d4:3a:25:be:01:d0:74:42:64:3b:47:6a:
cd:52:f4:61:e5:1f:b5:6b:50:31:58:96:d1:56:7a:ec:c3:73:
94:ef:ce:29:0a:df:dc:b6:a6:a6:48:8f:f8:27:a0:0e:c7:b3:
96:8c:91:b0:4d:06:78:04:87:a9:c7:8a:eb:fa:f9:d8:5b:08:
02:ba:b8:92:35:f5:6d:c7:e2:96:8b:1d:a4:72:d0:07:6c:97:
c3:74:66:05:7e:d1:9d:88:1b:9d:5a:48:e4:6c:b0:81:e2:80:
cc:4f:19:e7:31:77:41:fd:22:8f:c1:25:8e:d7:04:10:a6:bd:
65:59:67:62:ab:d2:c2:53:d9:4b:f8:e3:04:60:b4:77:33:25:
66:c9:a1:21:48:98:e2:67:95:55:5a:99:67:72:ed:a8:cd:f1:
76:24:dc:c0:cb:c9:14:97:ff:85:04:e4:5d:2b:f0:b5:3f:37:
f9:3f:d7:93:85:78:2f:92:f3:06:b6:52:e0:55:55:13:84:05:
bb:30:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:01 2026 by rpki-client