Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/Py5-SfzgdBopcKEbr1S0y6HLpi0.roa
File: Py5-SfzgdBopcKEbr1S0y6HLpi0.roa (raw, json)
Hash identifier: UfuqXVAeefVJVDWI/7a6Zdo2dE/lpe7wMglvajxwHoY=
Subject key identifier: 3F:2E:7E:49:FC:E0:74:1A:29:70:A1:1B:AF:54:B4:CB:A1:CB:A6:2D
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368AB6CCD1DE7E1B5ABF079044AC3C1
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/Py5-SfzgdBopcKEbr1S0y6HLpi0.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28716
IP address blocks: 193.219.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ab:6c:cd:1d:e7:e1:b5:ab:f0:79:04:4a:c3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f2e7e49fce0741a2970a11baf54b4cba1cba62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:cc:54:65:77:af:c4:c0:fc:42:7f:7d:3b:
c3:fc:cb:a8:cf:36:2b:99:43:e7:f6:ac:18:10:d1:
59:59:b1:76:79:0b:cd:62:c8:0a:fb:e0:99:4b:e1:
a0:ff:02:a2:dc:62:68:25:39:2c:80:06:b4:1f:cc:
13:9c:8c:82:d9:80:6b:f1:c6:70:4e:55:b7:47:3b:
52:47:a1:18:23:f0:4f:70:37:b0:df:54:03:64:95:
a3:98:ac:ed:45:f6:4c:7b:57:47:c0:22:2b:42:18:
68:25:40:a4:1a:12:d2:e7:ef:4a:15:4c:04:3d:51:
b4:a7:ce:45:72:eb:c6:a0:7c:fe:0c:d2:5f:63:e4:
c6:1a:46:c9:2f:73:da:2b:e9:2a:f3:a3:60:4e:5f:
16:b4:cb:34:fc:e6:1c:79:97:3f:11:bd:2a:eb:c6:
19:12:1d:cc:d8:85:c4:d5:64:2a:6b:e4:a8:d9:5a:
a1:90:3f:74:ea:4a:21:57:a1:38:c2:e1:41:b5:3a:
89:5d:7e:33:d3:4d:93:af:a7:01:af:b0:84:3b:81:
4b:37:82:9b:e5:4e:a1:a7:f1:20:9a:84:00:e9:c4:
38:9b:3f:cf:38:be:fa:37:19:6b:49:1f:ff:bf:15:
4f:2b:b5:41:15:8d:9d:81:44:9e:a4:c5:ab:58:4e:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2E:7E:49:FC:E0:74:1A:29:70:A1:1B:AF:54:B4:CB:A1:CB:A6:2D
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/Py5-SfzgdBopcKEbr1S0y6HLpi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:18:39:18:95:30:56:83:8d:a7:77:d2:38:6c:9a:16:b8:6b:
13:33:80:95:ac:ea:18:fa:de:64:ec:01:47:8d:16:68:92:82:
a8:c8:a0:2b:c4:c4:e9:2b:cb:37:dd:a8:00:4f:02:19:80:fe:
5a:c4:97:12:de:c0:22:91:7e:c4:e6:62:4e:94:4d:74:85:60:
7b:fc:0b:ec:c3:33:0b:eb:8e:a9:df:fa:4b:e5:6c:be:90:a7:
6e:d1:6b:3f:77:96:22:a2:a9:9b:27:90:30:4a:01:8f:16:6a:
d3:9d:61:98:e1:79:91:6d:22:b7:0c:e9:11:14:be:32:19:7d:
a8:2d:7c:7d:d4:24:ef:dc:cf:0c:ba:80:d2:06:70:bd:d0:07:
66:ac:b0:0f:25:76:2f:87:14:69:f6:a1:ba:f5:e0:cd:86:af:
53:2b:34:2d:6b:2e:c6:dd:d8:d2:1f:e0:af:0c:02:47:d1:5e:
37:68:bf:c7:6b:e8:9c:aa:2e:a0:50:05:71:72:98:56:67:d0:
cb:b5:40:07:01:af:52:2e:45:e9:70:cd:0d:f9:3a:43:0a:b2:
e5:71:12:c9:4b:01:91:82:f1:68:3a:19:1a:c3:85:34:0d:cd:
46:da:6e:84:b5:73:59:55:20:38:9a:5b:3f:1d:40:12:06:37:
3a:62:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:27 2026 by rpki-client