Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/G_OuDbVtKVjP3d0tjZnHLsZ83sE.roa
File: G_OuDbVtKVjP3d0tjZnHLsZ83sE.roa (raw, json)
Hash identifier: pP2ZidmFasR/WmTJoaBDlilJcJecRSWLlBbfYiRpn4M=
Subject key identifier: 1B:F3:AE:0D:B5:6D:29:58:CF:DD:DD:2D:8D:99:C7:2E:C6:7C:DE:C1
Certificate issuer: /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial: 019F2368394DBA4468AF6E81E2EC3A479229
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/G_OuDbVtKVjP3d0tjZnHLsZ83sE.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207581
IP address blocks: 79.137.132.0/24 maxlen: 24
79.137.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:39:4d:ba:44:68:af:6e:81:e2:ec:3a:47:92:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bf3ae0db56d2958cfdddd2d8d99c72ec67cdec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:00:6d:13:3d:43:40:93:2a:c0:76:dd:23:
bf:74:61:78:dd:1c:57:01:5b:4c:bd:81:94:71:f9:
33:dc:ba:8d:bf:f0:66:a9:21:5c:5b:76:5e:e5:47:
23:fe:99:66:91:5c:1d:6e:8f:bf:97:8c:8a:60:5e:
c2:27:63:f3:77:0a:1a:7c:e8:6d:1a:c0:ff:6f:da:
cd:50:4a:56:f9:80:c5:72:e3:96:d7:5e:f3:54:cb:
9b:57:a3:86:7b:c3:ae:ab:2f:ff:bb:11:a2:c3:40:
2d:84:59:a3:1b:77:ea:42:2c:6d:bd:95:5d:23:f3:
65:f9:22:0a:10:53:f5:17:ce:9b:bf:80:38:54:8a:
d5:05:10:5f:6e:59:c5:1e:bb:b0:5d:32:94:24:cf:
bf:03:9a:82:8e:86:3d:33:1a:3c:04:0b:9f:9e:e8:
19:f7:a4:9a:15:fa:e1:9d:9e:53:b0:22:4d:03:14:
f2:6f:a4:01:00:b8:fe:72:10:f8:e5:76:5b:c1:ea:
2b:47:7d:dd:5e:00:1c:3f:49:d7:53:03:c5:fb:61:
e4:79:24:50:79:86:4e:4c:29:99:ea:e4:72:a5:13:
04:80:ec:31:20:75:98:c0:a2:84:f3:30:96:74:9f:
b6:aa:aa:e3:d7:8e:81:15:97:05:a4:39:20:8d:c7:
38:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F3:AE:0D:B5:6D:29:58:CF:DD:DD:2D:8D:99:C7:2E:C6:7C:DE:C1
X509v3 Authority Key Identifier:
keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/G_OuDbVtKVjP3d0tjZnHLsZ83sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.132.0/24
79.137.167.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c0:b6:0b:06:5a:58:6b:75:23:03:38:e9:df:cf:0f:bf:d6:
7d:d1:df:14:81:8f:b8:41:1d:11:e9:2a:e5:a8:6b:3a:76:b1:
e8:7a:1d:56:69:99:12:2f:1f:78:20:3e:56:c4:24:67:25:70:
26:c2:79:5e:d4:91:8e:ad:b3:e6:52:9f:b6:25:9f:0f:1b:b5:
80:aa:94:2c:6a:48:6b:df:5d:d4:db:c5:c0:0b:c4:68:35:33:
bf:6f:d8:ba:80:bc:38:55:04:88:f8:21:f6:66:af:74:93:e9:
fa:28:98:30:19:ef:da:58:6f:82:15:95:50:1f:40:b4:9a:f9:
97:9d:89:f0:8f:c8:35:94:52:a3:f2:87:2f:39:2c:af:11:85:
db:e0:8a:34:70:d2:7b:50:08:ed:9d:34:8c:09:93:f8:ef:28:
e0:8d:5d:c8:86:7a:cd:b6:e4:e8:03:ad:12:d4:94:72:ed:0a:
27:87:17:c1:d0:5c:52:d9:0d:52:6f:62:29:7a:cc:a9:c8:fa:
f3:23:a7:16:c2:b8:f2:41:72:1e:fd:48:c6:13:d0:27:5f:37:
46:94:4a:32:2b:6a:ad:d7:32:84:95:51:ad:2b:4f:45:79:37:
62:ea:4c:7e:f8:96:c0:14:e0:6d:c1:ca:42:be:44:cd:26:46:
77:08:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:55 2026 by rpki-client