Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/sPWn08MQJZ22vzs12vgxn17DIWY.roa
File: sPWn08MQJZ22vzs12vgxn17DIWY.roa (raw, json)
Hash identifier: I88K4AGyQQMkpNhJ+h0qf9Jotr49T8XHvqwoQ6xts2Q=
Subject key identifier: B0:F5:A7:D3:C3:10:25:9D:B6:BF:3B:35:DA:F8:31:9F:5E:C3:21:66
Certificate issuer: /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Certificate serial: 019F5B04B86429E2914E9EBEBA241E5B3B91
Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/sPWn08MQJZ22vzs12vgxn17DIWY.roa
Signing time: Mon 13 Jul 2026 10:27:43 +0000
ROA not before: Mon 13 Jul 2026 10:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51377
IP address blocks: 185.210.176.0/22 maxlen: 24
193.193.161.0/24 maxlen: 24
193.221.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:04:b8:64:29:e2:91:4e:9e:be:ba:24:1e:5b:3b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Validity
Not Before: Jul 13 10:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0f5a7d3c310259db6bf3b35daf8319f5ec32166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:42:b8:f5:9c:e8:36:9c:07:57:f8:88:24:94:
64:3e:7d:0d:eb:7e:12:18:83:ff:1f:ad:3d:5e:bf:
f6:a5:29:ce:55:58:f1:1e:90:2b:91:69:e5:0f:2f:
5c:fe:46:61:e8:29:f9:40:09:44:b8:3a:eb:9d:75:
4a:db:d8:cf:30:2a:0b:5b:8b:d9:c7:9a:04:b0:65:
4d:cb:0d:fa:c6:2c:f9:3e:e3:54:f6:b6:81:f4:4f:
50:7d:79:cb:23:30:8d:2d:57:1b:75:82:94:e2:20:
84:23:d2:38:8d:bd:f5:e3:39:e3:88:df:24:5b:c9:
1c:63:a2:28:d7:08:0e:39:dc:b2:5c:1f:dc:26:93:
34:f6:b6:0c:95:c3:79:e1:56:fd:19:50:7f:fa:15:
fe:cf:ee:2d:ee:3a:24:2c:b7:fc:ef:96:61:81:b8:
b8:4f:6c:c6:0f:77:9c:7f:8b:5b:fa:49:59:bd:41:
15:9a:30:6d:09:0f:c5:7d:ea:cd:9e:bc:b9:11:a7:
fa:38:e6:a6:b2:b5:fc:f7:9d:43:d0:9c:51:b0:7c:
aa:35:d6:9b:e6:46:ee:6b:e8:f6:0a:cd:73:0f:b9:
52:48:42:78:1d:b2:d7:63:51:37:1b:68:5e:bb:d0:
82:86:ac:66:04:87:e3:4a:bc:fe:02:d6:3f:88:61:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F5:A7:D3:C3:10:25:9D:B6:BF:3B:35:DA:F8:31:9F:5E:C3:21:66
X509v3 Authority Key Identifier:
keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/sPWn08MQJZ22vzs12vgxn17DIWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.176.0/22
193.193.161.0/24
193.221.124.0/24
Signature Algorithm: sha256WithRSAEncryption
74:95:fe:db:23:0d:a3:05:5a:e6:41:c6:22:6d:88:c2:db:65:
01:f3:76:d3:33:e3:59:61:55:21:d1:65:8d:cf:f1:89:6c:bd:
37:6e:a9:b6:3b:66:02:9f:88:e9:d3:d3:ac:c0:8d:30:59:2f:
b2:d7:14:a5:05:ec:87:e0:85:96:b1:3d:69:5b:f8:50:19:de:
4f:10:91:f2:2a:20:48:5e:cf:5a:f6:3d:bf:15:89:4c:75:01:
f3:7f:de:ae:9a:28:7a:22:32:e9:fe:1f:18:0a:28:29:18:11:
e0:99:15:fc:42:5d:cd:21:db:4c:f6:59:98:d6:75:1b:7e:2f:
eb:35:08:b8:e7:5e:96:37:57:d5:c4:b5:35:18:6d:97:71:e1:
c6:84:40:fe:75:fb:a9:a6:42:a9:b8:ae:40:ee:d3:29:4e:fb:
73:ab:67:d3:0a:38:41:27:1c:a0:15:c9:12:46:7e:7b:71:49:
93:70:a2:37:1b:2e:96:ac:bf:47:33:67:d4:41:f0:bd:dd:4e:
09:12:7b:30:f1:a0:ea:f8:46:a7:42:b1:54:96:60:be:01:7b:
5d:6d:6c:36:63:3c:ea:d0:53:bd:25:0b:64:58:94:50:fb:8a:
a6:e4:cb:10:0c:51:6b:f6:f9:3b:f5:64:5e:01:fd:10:f0:62:
22:c6:d4:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:05 2026 by rpki-client