Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/768i5q9Q1IPj0343NKNk7lOkYAg.roa
File: 768i5q9Q1IPj0343NKNk7lOkYAg.roa (raw, json)
Hash identifier: s9OQdsGX+sfyQxXWbx9LyVNNyjVCI8W1Nl9Y367w2nw=
Subject key identifier: EF:AF:22:E6:AF:50:D4:83:E3:D3:7E:37:34:A3:64:EE:53:A4:60:08
Certificate issuer: /CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
Certificate serial: 019F2368983211D53429B46DF4FAB4B561C0
Authority key identifier: 1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/768i5q9Q1IPj0343NKNk7lOkYAg.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39498
IP address blocks: 146.19.127.0/24 maxlen: 24
185.122.244.0/22 maxlen: 24
2a0d:6700::/29 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:98:32:11:d5:34:29:b4:6d:f4:fa:b4:b5:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efaf22e6af50d483e3d37e3734a364ee53a46008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:3d:68:05:7b:28:46:71:c3:85:f3:b0:dd:
b6:df:a0:ec:21:4b:4c:d8:0b:ba:89:7b:82:08:b2:
3d:20:35:6f:f2:19:e0:57:44:57:03:4c:e4:6e:13:
fa:b3:e0:f4:3e:7b:ac:8a:d3:36:93:b5:9d:9e:4c:
32:ec:97:b8:62:10:dc:8d:45:ac:95:1b:f8:cb:ff:
f7:92:4f:39:bc:e6:28:56:09:81:2b:cd:9a:38:e4:
bf:98:30:2a:f4:91:77:5f:fe:0a:35:e0:0d:74:d1:
72:70:d5:01:e5:06:de:f3:23:3c:a6:60:ef:10:9d:
27:de:9e:98:32:63:8c:80:fc:fc:d2:5b:0b:cb:1a:
a5:46:39:ea:8a:50:a9:cd:b5:59:f6:54:a3:b8:52:
83:23:4c:9c:99:aa:d9:bc:d8:4a:b6:26:ca:68:e4:
5b:ff:8f:91:cf:b3:b9:77:1a:5d:47:3f:69:83:fc:
3f:95:bd:a7:34:ba:38:cf:d8:c6:a3:e7:de:e1:48:
f1:52:9a:76:59:60:7f:62:29:ef:e7:45:2b:d7:cd:
57:72:26:e6:de:5b:9b:6d:a9:b4:c2:fb:c8:74:31:
f0:0b:01:43:37:6e:e9:18:7b:75:6e:61:98:dd:77:
da:75:bd:49:06:d6:0d:c2:49:70:9a:2c:8f:eb:1d:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AF:22:E6:AF:50:D4:83:E3:D3:7E:37:34:A3:64:EE:53:A4:60:08
X509v3 Authority Key Identifier:
keyid:1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/768i5q9Q1IPj0343NKNk7lOkYAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.127.0/24
185.122.244.0/22
IPv6:
2a0d:6700::/29
Signature Algorithm: sha256WithRSAEncryption
87:a7:54:19:4e:98:da:a2:66:d4:19:91:73:4a:d9:92:ba:89:
66:d6:3e:f1:f0:36:01:a8:ac:44:05:e4:0d:92:ab:e3:04:ca:
6e:5b:23:eb:41:9f:10:4f:5c:1e:f3:80:e2:ef:71:5d:48:ed:
03:c8:1d:8e:02:5d:6d:3c:86:a7:e6:49:86:e1:99:6b:70:99:
dd:f5:71:b6:0a:51:1e:a0:60:d0:e7:f4:e4:98:8d:c9:8f:2f:
a8:e7:38:95:0b:97:9c:79:cb:a3:cd:3c:e2:6b:02:5e:45:61:
3d:04:ca:55:e1:9b:b4:75:43:c2:40:04:9d:e7:d2:a6:8d:13:
3d:1a:4d:fc:42:3f:ae:11:9e:a5:10:57:6d:49:8b:2e:32:ef:
d0:a9:36:7c:6e:8f:f5:5c:44:07:04:16:b4:7a:b8:91:26:3d:
25:80:30:74:4c:22:0d:97:ec:8d:0d:44:37:8e:2a:3d:0a:6d:
e4:de:c4:ad:00:31:d9:74:42:be:38:2f:10:ce:37:af:ad:b5:
e4:47:ca:d6:b1:b7:a5:04:b6:a5:b0:5c:d2:37:22:d2:3e:d0:
bc:a5:84:3c:76:3e:83:90:c6:92:5e:f3:d2:0d:97:3c:fa:0e:
e8:af:26:e2:fd:d5:95:43:c6:7b:dd:0c:45:b6:3e:78:d1:ad:
9e:59:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:15:03 2026 by rpki-client