Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/L1BjsFVtDwWiFjhEOplbUIVYViY.roa
File: L1BjsFVtDwWiFjhEOplbUIVYViY.roa (raw, json)
Hash identifier: MyqdfT6yjFhCQ3+iKsxmQZrjZm+GcMCgoHCNHRJjMFY=
Subject key identifier: 2F:50:63:B0:55:6D:0F:05:A2:16:38:44:3A:99:5B:50:85:58:56:26
Certificate issuer: /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial: 019F235160EEF213081BF3DAC6115ECD17F8
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/L1BjsFVtDwWiFjhEOplbUIVYViY.roa
Signing time: Thu 02 Jul 2026 14:52:43 +0000
ROA not before: Thu 02 Jul 2026 14:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212188
IP address blocks: 195.88.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:51:60:ee:f2:13:08:1b:f3:da:c6:11:5e:cd:17:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Validity
Not Before: Jul 2 14:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f5063b0556d0f05a21638443a995b5085585626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:14:c4:1b:46:93:98:9e:98:f7:67:45:9c:
ac:be:da:56:bb:b6:ce:d6:ad:27:21:a3:ef:c1:b6:
0e:fd:a7:59:c6:2b:d3:7a:f7:a8:66:50:d2:79:a5:
17:11:8a:85:6a:26:e0:90:0c:7d:e3:5c:7f:ac:37:
95:a1:1f:cd:0e:83:85:1f:8f:0f:8b:14:48:51:d2:
66:f5:8b:bc:ea:30:56:5c:fd:eb:a5:f5:f3:23:92:
19:e5:3e:20:a7:03:40:0b:4a:b3:15:81:b8:54:e1:
36:d5:61:db:71:78:44:b8:d6:07:2c:6b:87:b2:92:
46:e4:87:f3:af:fe:fd:56:da:5d:1f:be:33:3d:9a:
eb:b9:b7:aa:69:7a:f6:bf:9e:76:14:15:ee:3c:03:
c3:52:fa:dd:3f:21:2e:62:a8:dd:97:60:bb:b2:b6:
5e:fc:a8:52:a9:8e:74:e4:fc:a0:5c:27:95:dc:8b:
ce:81:7e:56:2e:39:ac:a9:9c:ac:88:ed:64:33:1a:
b6:2b:1d:3b:58:3a:d1:dc:ff:74:7b:dd:01:de:2f:
ad:dc:27:b3:23:c8:d5:42:7b:6a:3d:38:5b:0e:8d:
15:60:3a:de:61:f2:f9:b7:0f:73:c1:bf:53:6c:f0:
06:4a:6b:57:55:ce:6a:59:c1:75:41:44:7a:82:c6:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:50:63:B0:55:6D:0F:05:A2:16:38:44:3A:99:5B:50:85:58:56:26
X509v3 Authority Key Identifier:
keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/L1BjsFVtDwWiFjhEOplbUIVYViY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.188.0/24
Signature Algorithm: sha256WithRSAEncryption
28:18:25:ab:a4:c7:db:c7:98:75:60:11:2d:8f:b7:93:82:db:
90:94:9b:20:d3:ad:f3:00:35:b2:7a:27:52:5e:d0:21:90:43:
10:6f:ac:a6:97:17:a3:f5:14:44:47:be:2f:3e:42:8e:04:f5:
18:c4:9d:0e:d1:5b:8e:98:18:f9:ba:b3:df:e3:00:e3:d1:dc:
20:f3:59:6d:37:8a:02:d4:a2:ee:65:34:ed:1d:e9:c4:b3:5b:
48:d5:a1:d0:1e:61:30:6f:49:25:9c:2e:47:97:99:9c:81:8d:
6d:6c:42:31:df:8a:74:55:02:66:59:50:29:85:f4:3f:a1:b3:
67:39:92:62:e7:f8:01:b9:2d:4a:5d:13:ed:3a:98:7b:6f:ca:
74:20:ab:ef:e8:ff:c9:0f:0b:cb:af:e5:29:58:84:6e:bc:9b:
0c:ef:b2:60:dc:e5:bf:d8:d5:a8:68:73:50:f4:cc:9d:1a:11:
83:80:c8:93:c4:eb:aa:69:eb:b9:5a:6a:12:e8:89:04:93:cd:
8e:c1:08:ab:03:49:d4:9a:19:05:cd:af:d6:29:9f:05:12:6c:
a9:44:51:3e:6c:da:63:db:ea:70:2a:da:38:51:fe:e6:73:09:
8d:26:3c:c0:5f:3f:d9:7e:96:0c:3a:00:e5:a5:26:08:79:68:
63:93:c8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:48 2026 by rpki-client