Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7a5b72-2335-4fa9-b3d3-b030161ff254/1/fbG2uM0awzIBRKPvWdOUWLAjeFE.roa
File: fbG2uM0awzIBRKPvWdOUWLAjeFE.roa (raw, json)
Hash identifier: R582S3/08U989l4oGNkgM3TZJyd3LwR1uClSlcMfzaI=
Subject key identifier: 7D:B1:B6:B8:CD:1A:C3:32:01:44:A3:EF:59:D3:94:58:B0:23:78:51
Certificate issuer: /CN=ed7c8a886348b106f56d884e840689e8a6c2ae3a
Certificate serial: 019EA3BC57A5047CB38BE27A823ACB5A0C25
Authority key identifier: ED:7C:8A:88:63:48:B1:06:F5:6D:88:4E:84:06:89:E8:A6:C2:AE:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XyKiGNIsQb1bYhOhAaJ6KbCrjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7a5b72-2335-4fa9-b3d3-b030161ff254/1/fbG2uM0awzIBRKPvWdOUWLAjeFE.roa
Signing time: Sun 07 Jun 2026 20:18:09 +0000
ROA not before: Sun 07 Jun 2026 20:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56447
IP address blocks: 84.38.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7a5b72-2335-4fa9-b3d3-b030161ff254/1/7XyKiGNIsQb1bYhOhAaJ6KbCrjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7a5b72-2335-4fa9-b3d3-b030161ff254/1/7XyKiGNIsQb1bYhOhAaJ6KbCrjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XyKiGNIsQb1bYhOhAaJ6KbCrjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a3:bc:57:a5:04:7c:b3:8b:e2:7a:82:3a:cb:5a:0c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7c8a886348b106f56d884e840689e8a6c2ae3a
Validity
Not Before: Jun 7 20:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7db1b6b8cd1ac3320144a3ef59d39458b0237851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:12:b0:9b:42:a2:47:08:57:a1:01:98:bf:
e6:14:ad:b5:b5:6e:32:07:5a:53:db:48:cf:f7:80:
9f:aa:35:14:aa:3b:8c:fc:c0:62:39:44:c4:8e:a4:
b6:59:64:63:64:77:42:57:5f:18:45:38:ed:f2:fa:
e5:90:75:12:5c:38:08:78:54:b2:ad:91:c6:73:6c:
9c:20:37:e8:1a:af:d7:91:8b:c9:2e:e4:fc:97:6d:
73:46:6b:9b:11:e4:5b:74:57:6d:d7:16:68:48:43:
8e:41:2c:02:e9:99:1b:57:f7:0c:96:c3:96:14:72:
b1:eb:68:dc:b9:e9:f6:c1:62:23:c4:3b:1a:e1:02:
16:e2:6f:ba:d5:fa:74:c2:62:87:57:07:09:65:c1:
c7:35:dd:50:ae:c8:0d:8e:62:60:7b:c2:1e:4b:a0:
06:bb:5c:8c:47:b8:3a:31:5a:2a:3f:8d:ba:7e:19:
f4:33:ee:45:74:a3:80:f6:37:f2:32:36:70:9a:0b:
e4:6b:8e:51:95:b2:20:25:70:8d:64:0a:f0:b6:e4:
17:ad:af:96:87:95:b3:20:b4:42:87:bd:0f:70:53:
b8:c3:f4:d4:cf:b9:b1:b2:98:04:11:1f:e1:44:e5:
52:56:81:b6:bf:e4:67:6a:d5:6c:86:07:a3:e4:ea:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:B6:B8:CD:1A:C3:32:01:44:A3:EF:59:D3:94:58:B0:23:78:51
X509v3 Authority Key Identifier:
keyid:ED:7C:8A:88:63:48:B1:06:F5:6D:88:4E:84:06:89:E8:A6:C2:AE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XyKiGNIsQb1bYhOhAaJ6KbCrjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7a5b72-2335-4fa9-b3d3-b030161ff254/1/fbG2uM0awzIBRKPvWdOUWLAjeFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7a5b72-2335-4fa9-b3d3-b030161ff254/1/7XyKiGNIsQb1bYhOhAaJ6KbCrjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.4.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:6e:a7:96:c8:b8:e9:34:c8:09:81:ce:27:1c:ec:bd:6f:ab:
fa:76:3b:c8:26:40:43:d6:1a:db:a6:9e:88:30:fe:65:43:97:
5b:cc:f6:26:15:fc:64:d2:60:6e:94:31:be:62:5b:cc:f0:af:
21:b8:3f:18:02:07:39:0a:ec:93:d1:1a:ca:04:02:00:53:1d:
c5:2d:a8:95:43:f5:14:30:b2:ac:42:02:2b:f0:75:5e:6e:ba:
51:7e:94:ab:8a:54:66:b3:99:d6:17:99:37:68:5b:65:6b:d6:
d1:5e:1c:77:3d:08:21:c5:ac:53:2e:1d:9e:6e:86:da:25:47:
49:07:8c:9b:06:fc:d6:76:70:22:0c:d0:21:6f:3f:f2:8f:19:
9a:bb:fd:8b:9e:49:6d:e5:38:78:09:0e:f9:eb:86:37:37:5a:
f0:cf:67:dd:5e:db:a4:35:cf:f2:3a:33:f3:44:43:7e:3e:a6:
c4:7c:c3:d7:ea:af:08:22:7d:37:73:76:aa:20:51:ca:91:5e:
18:58:a0:2c:9e:e0:f9:9f:35:f4:71:2d:65:ec:b6:84:b5:c4:
c6:31:62:b5:80:3c:ea:a5:d1:c5:67:76:98:fe:6e:3c:fb:88:
23:05:57:5d:88:af:91:98:be:c5:9c:b0:dc:af:b2:89:e8:29:
e7:7d:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:16 2026 by rpki-client