Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/fpWqB6GHlXOWcBg30kWtguLx_NY.roa
File: fpWqB6GHlXOWcBg30kWtguLx_NY.roa (raw, json)
Hash identifier: fXvgv1LhXoBErsUNrvQ4zZ5bYi/IxJJ6Qaj/JGmSwZU=
Subject key identifier: 7E:95:AA:07:A1:87:95:73:96:70:18:37:D2:45:AD:82:E2:F1:FC:D6
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 019F2230FD56D72F92ED4040A4E5FA8E228E
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/fpWqB6GHlXOWcBg30kWtguLx_NY.roa
Signing time: Thu 02 Jul 2026 09:37:43 +0000
ROA not before: Thu 02 Jul 2026 09:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49097
IP address blocks: 31.3.144.0/22 maxlen: 24
80.70.166.0/23 maxlen: 24
80.70.167.0/24 maxlen: 24
185.55.232.0/22 maxlen: 24
185.170.24.0/22 maxlen: 24
188.95.0.0/21 maxlen: 24
193.28.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:30:fd:56:d7:2f:92:ed:40:40:a4:e5:fa:8e:22:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Jul 2 09:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e95aa07a187957396701837d245ad82e2f1fcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:76:74:88:5d:a8:34:80:11:e6:c7:91:a4:
ce:bb:65:40:b8:e1:ec:49:b6:c1:88:a2:4c:7d:68:
4c:0b:6e:66:72:66:19:8b:35:75:41:15:af:ae:32:
c3:b4:85:de:39:7b:19:98:0d:5e:59:50:62:95:3f:
ca:0b:ad:18:78:e2:82:cc:71:66:56:5c:11:40:03:
d6:f8:9a:11:95:33:ff:a2:60:53:f8:89:12:f9:3e:
82:27:4f:45:17:12:94:d8:b4:08:af:7c:8d:af:4b:
ac:b5:49:af:90:3b:d2:25:99:83:ef:ec:fb:8d:c9:
53:59:c5:f7:2f:55:ae:a5:3d:29:8d:bb:85:8c:aa:
60:b6:44:f3:65:f5:63:3f:8c:4c:35:cd:c9:a3:d3:
18:09:49:34:10:c4:bd:87:8a:7e:56:c6:43:46:4f:
8d:be:1b:88:d2:d6:60:ac:64:82:84:80:57:a6:ad:
ec:d8:bc:bc:71:6a:25:98:a5:e5:3f:d2:3a:40:57:
f7:40:ed:46:2c:67:2a:00:b6:18:3c:fc:f1:a9:ae:
ab:b1:52:a6:eb:32:80:c1:7f:e6:ea:b9:00:d4:fb:
10:1b:44:1a:f5:a5:4d:fc:1b:dc:21:6f:fe:8f:bc:
87:99:1e:ef:06:c5:15:79:12:57:8f:66:92:7b:fc:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:AA:07:A1:87:95:73:96:70:18:37:D2:45:AD:82:E2:F1:FC:D6
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/fpWqB6GHlXOWcBg30kWtguLx_NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.144.0/22
80.70.166.0/23
185.55.232.0/22
185.170.24.0/22
188.95.0.0/21
193.28.96.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:5a:91:d2:d8:3a:9a:3c:33:4c:bf:24:96:86:9a:75:e5:13:
25:b7:9d:35:a8:21:66:bc:f8:de:52:f1:62:2b:73:cf:1b:15:
d1:8e:58:7a:3b:8f:e6:8d:25:77:1e:22:d3:66:6d:6a:6f:b4:
f2:b4:16:3f:82:51:0f:88:10:93:42:a2:38:64:75:c9:74:2a:
24:9a:99:0c:98:c3:90:5f:86:1e:1e:1f:aa:a8:80:fb:96:c7:
85:37:ad:1a:63:f7:aa:07:7b:47:9e:24:77:f0:73:98:89:46:
b4:9a:e0:a8:1f:3d:4f:2a:06:34:29:5c:79:f2:fa:8d:e8:5a:
f7:3c:8e:a6:d8:95:b9:27:37:60:ef:82:80:53:b2:cc:b3:3e:
22:f0:c4:9f:a8:62:8c:4a:b5:39:44:fd:ca:06:e6:b9:5e:c3:
07:bf:02:f6:f7:05:7c:28:67:0a:37:65:2d:3d:70:1a:15:41:
dc:09:b3:72:fe:50:5c:ff:6e:00:eb:d9:8a:02:56:94:9d:4c:
f5:49:06:df:a5:79:14:f5:69:92:10:90:7b:21:95:7b:8a:02:
4f:99:de:e9:45:93:00:7f:66:19:23:66:32:6e:d8:f7:cf:6d:
67:32:59:60:73:d2:0b:de:2b:85:d6:07:41:48:4f:62:d0:42:
13:6f:0b:94
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ8iMP1W1y+S7UBApOX6jiKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OGI4MjVmMzZlOWNjMzMwMzE1Yzk0MGRlODAwY2JhYmNl
MzM5N2IwHhcNMjYwNzAyMDkzNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTk1YWEwN2ExODc5NTczOTY3MDE4MzdkMjQ1YWQ4MmUyZjFmY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WF2dIhdqDSAEebHkaTOu2VAuOHs
SbbBiKJMfWhMC25mcmYZizV1QRWvrjLDtIXeOXsZmA1eWVBilT/KC60YeOKCzHFm
VlwRQAPW+JoRlTP/omBT+IkS+T6CJ09FFxKU2LQIr3yNr0ustUmvkDvSJZmD7+z7
jclTWcX3L1WupT0pjbuFjKpgtkTzZfVjP4xMNc3Jo9MYCUk0EMS9h4p+VsZDRk+N
vhuI0tZgrGSChIBXpq3s2Ly8cWolmKXlP9I6QFf3QO1GLGcqALYYPPzxqa6rsVKm
6zKAwX/m6rkA1PsQG0Qa9aVN/BvcIW/+j7yHmR7vBsUVeRJXj2aSe/z3gQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFH6Vqgehh5VzlnAYN9JFrYLi8fzWMB8GA1UdIwQY
MBaAFMmLgl826cwzAxXJQN6ADLq84zl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUt
Yjg5YTUxMWMzYmJkLzEvZnBXcUI2R0hsWE9XY0JnMzBrV3RndUx4X05ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUtYjg5YTUxMWMzYmJk
LzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCHwOQAwQB
UEamAwQCuTfoAwQCuaoYAwQDvF8AAwQDwRxgMA0GCSqGSIb3DQEBCwUAA4IBAQAP
WpHS2DqaPDNMvySWhpp15RMlt501qCFmvPjeUvFiK3PPGxXRjlh6O4/mjSV3HiLT
Zm1qb7TytBY/glEPiBCTQqI4ZHXJdCokmpkMmMOQX4YeHh+qqID7lseFN60aY/eq
B3tHniR38HOYiUa0muCoHz1PKgY0KVx58vqN6Fr3PI6m2JW5Jzdg74KAU7LMsz4i
8MSfqGKMSrU5RP3KBua5XsMHvwL29wV8KGcKN2UtPXAaFUHcCbNy/lBc/24A69mK
AlaUnUz1SQbfpXkU9WmSEJB7IZV7igJPmd7pRZMAf2YZI2Yybtj3z21nMllgc9IL
3iuF1gdBSE9i0EITbwuU
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:44 2026 by rpki-client