Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/1Fk04mxHWiQyArs1LutFgzh8wJI.roa
File: 1Fk04mxHWiQyArs1LutFgzh8wJI.roa (raw, json)
Hash identifier: fEoTYA52qtwHCVar7eg2OPgHFtSf1SmbEKWBVALe3L0=
Subject key identifier: D4:59:34:E2:6C:47:5A:24:32:02:BB:35:2E:EB:45:83:38:7C:C0:92
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 019DFD4BC7D74BD75FF3E691948419C15837
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/1Fk04mxHWiQyArs1LutFgzh8wJI.roa
Signing time: Wed 06 May 2026 12:38:15 +0000
ROA not before: Wed 06 May 2026 12:38:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198926
IP address blocks: 176.117.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:4b:c7:d7:4b:d7:5f:f3:e6:91:94:84:19:c1:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: May 6 12:38:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d45934e26c475a243202bb352eeb4583387cc092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:f8:9f:95:4e:44:81:cf:ae:d2:a6:63:a4:
11:56:94:db:e6:3b:93:37:35:a6:c4:e4:31:8a:e4:
2a:df:de:23:d0:1a:07:da:fc:21:2d:c6:91:72:e5:
5f:a7:56:f2:8f:aa:67:e1:d2:ce:7d:94:aa:43:be:
00:99:2a:91:10:05:c5:b9:e0:68:53:d4:87:e1:a8:
b4:cc:27:ce:bb:e6:ae:60:06:4c:4f:35:15:c7:9c:
76:98:07:5b:bd:9a:c5:fd:0d:e2:35:5c:23:cb:d6:
da:ca:d9:5b:74:7b:d1:6c:4d:a5:85:1a:23:fb:b3:
fb:f3:f3:00:52:0c:04:ea:44:db:82:ee:30:1d:06:
95:3a:19:24:35:88:4a:13:40:cd:5a:6d:39:41:ff:
df:4a:2e:c6:b4:ed:34:9d:e4:1e:19:b7:9b:a2:64:
d6:4b:1b:a6:2f:1e:4d:4f:c3:a8:33:a7:b3:e9:3b:
e9:8f:79:f4:97:9e:15:9c:67:4e:58:b8:3b:ca:ec:
cc:6d:df:1b:e0:a2:5c:93:d9:60:0b:8c:1e:e3:27:
9c:d6:a8:1f:fa:5f:45:31:89:98:7d:ea:3d:eb:7a:
f1:93:ff:a7:4e:03:0f:8b:25:50:e6:4d:f3:f5:74:
f1:ec:86:e3:4c:1b:bb:29:98:d1:ab:52:b0:ea:16:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:34:E2:6C:47:5A:24:32:02:BB:35:2E:EB:45:83:38:7C:C0:92
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/1Fk04mxHWiQyArs1LutFgzh8wJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.107.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d5:2c:e5:ef:c4:00:00:c4:79:4e:86:2c:49:4b:7a:89:24:
dc:19:ed:d1:fa:85:af:f6:57:b0:22:70:52:3f:5b:ea:35:66:
0b:f6:8e:ab:93:55:58:fe:50:2e:8b:dc:87:ff:70:b9:68:fb:
48:7d:70:e4:05:c5:08:15:52:d8:ed:ec:35:89:74:c8:5d:42:
86:50:75:4c:24:c1:40:23:66:a6:12:ce:fc:7f:d5:c5:10:73:
31:15:7a:e9:10:6e:08:b5:08:5f:d3:0e:65:c9:8a:33:28:0b:
5e:3a:bc:ff:2f:96:1c:11:2e:65:e9:68:fe:fb:72:b9:10:55:
c1:57:2b:df:b8:ef:20:15:79:29:31:38:e5:91:6d:81:7d:6c:
1a:06:19:47:95:00:c8:51:3a:48:bf:b2:eb:0a:fa:f1:d6:95:
48:2d:db:07:74:e3:03:79:1e:ea:b3:1f:86:7f:53:1a:a9:db:
bc:1f:ca:35:e0:02:56:54:1b:be:31:59:78:9d:c6:43:ce:f8:
43:d5:5d:c6:3a:04:da:85:11:81:67:b3:36:e4:2b:8c:86:ef:
b8:8f:d7:96:7b:50:a9:0f:8e:35:3d:14:17:e7:6a:46:2c:ac:
01:3c:4c:13:21:d1:9f:b5:4e:65:f8:1f:45:1b:c7:1e:db:6a:
ff:e8:5e:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ39S8fXS9df8+aRlIQZwVg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjE0NzhlNGQ2NTliZWNlODIwM2M1ZThiYThlOGY4MmYw
NDcwZDcwHhcNMjYwNTA2MTIzODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDU5MzRlMjZjNDc1YTI0MzIwMmJiMzUyZWViNDU4MzM4N2NjMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE34n5VORIHPrtKmY6QRVpTb5juT
NzWmxOQxiuQq394j0BoH2vwhLcaRcuVfp1byj6pn4dLOfZSqQ74AmSqREAXFueBo
U9SH4ai0zCfOu+auYAZMTzUVx5x2mAdbvZrF/Q3iNVwjy9baytlbdHvRbE2lhRoj
+7P78/MAUgwE6kTbgu4wHQaVOhkkNYhKE0DNWm05Qf/fSi7GtO00neQeGbebomTW
SxumLx5NT8OoM6ez6Tvpj3n0l54VnGdOWLg7yuzMbd8b4KJck9lgC4we4yec1qgf
+l9FMYmYfeo963rxk/+nTgMPiyVQ5k3z9XTx7IbjTBu7KZjRq1Kw6hb0cQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNRZNOJsR1okMgK7NS7rRYM4fMCSMB8GA1UdIwQY
MBaAFMphR45NZZvs6CA8Xouo6PgvBHDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTIt
OTQ2ZGE1ZjVlZmJiLzEvMUZrMDRteEhXaVF5QXJzMUx1dEZnemg4d0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTItOTQ2ZGE1ZjVlZmJi
LzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHVrMA0G
CSqGSIb3DQEBCwUAA4IBAQAj1Szl78QAAMR5ToYsSUt6iSTcGe3R+oWv9lewInBS
P1vqNWYL9o6rk1VY/lAui9yH/3C5aPtIfXDkBcUIFVLY7ew1iXTIXUKGUHVMJMFA
I2amEs78f9XFEHMxFXrpEG4ItQhf0w5lyYozKAteOrz/L5YcES5l6Wj++3K5EFXB
VyvfuO8gFXkpMTjlkW2BfWwaBhlHlQDIUTpIv7LrCvrx1pVILdsHdOMDeR7qsx+G
f1Maqdu8H8o14AJWVBu+MVl4ncZDzvhD1V3GOgTahRGBZ7M25CuMhu+4j9eWe1Cp
D441PRQX52pGLKwBPEwTIdGftU5l+B9FG8ce22r/6F7/
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:58 2026 by rpki-client