Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/fL71-L22cKxM7CZQLZouesgJu3U.roa
File: fL71-L22cKxM7CZQLZouesgJu3U.roa (raw, json)
Hash identifier: sUDVv41sxROa/YEaIzj5YrqXpRn04S1uEQsUbtMaqsM=
Subject key identifier: 7C:BE:F5:F8:BD:B6:70:AC:4C:EC:26:50:2D:9A:2E:7A:C8:09:BB:75
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 019DAF8D4E39B67D4339866A4D42CE6667E3
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/fL71-L22cKxM7CZQLZouesgJu3U.roa
Signing time: Tue 21 Apr 2026 10:19:26 +0000
ROA not before: Tue 21 Apr 2026 10:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.179.128.0/17 maxlen: 17
92.235.0.0/19 maxlen: 19
92.235.32.0/21 maxlen: 21
92.235.40.0/21 maxlen: 21
92.235.56.0/21 maxlen: 21
92.235.96.0/19 maxlen: 19
92.235.128.0/17 maxlen: 17
2001:67c:794::/48 maxlen: 48
2a13:e240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:8d:4e:39:b6:7d:43:39:86:6a:4d:42:ce:66:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Apr 21 10:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cbef5f8bdb670ac4cec26502d9a2e7ac809bb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:ee:d4:c1:eb:6a:64:ea:3f:a4:95:8c:1a:
81:6a:ec:60:2c:de:61:2e:0c:47:81:91:0f:67:d0:
3d:a5:2b:c6:22:e0:4c:ce:ae:be:82:07:76:2b:2c:
48:15:7e:54:83:2b:3e:b7:e0:dd:22:17:a7:8c:3c:
68:85:39:30:d6:72:76:54:92:53:7f:da:a8:e9:51:
b7:82:fc:09:ea:4e:a7:d8:21:11:f0:f9:c3:60:6a:
6e:5a:45:e8:cb:19:8b:f9:f0:a2:e0:71:6b:f8:09:
7c:c9:fe:ef:67:24:5e:f3:c1:93:25:87:54:0e:4c:
a7:2c:71:62:5a:88:9c:5d:7d:e2:2b:95:dc:2a:3a:
5a:01:07:e5:2d:2c:cf:b9:04:c2:50:a0:52:4f:62:
c5:ad:88:77:1b:76:ed:c8:c7:6b:85:52:66:b7:4c:
8c:af:79:d5:c6:aa:d4:f0:a6:60:2d:41:0a:b8:4d:
a6:97:3d:cd:91:b8:f0:8b:5c:30:c1:ea:29:fd:91:
fe:7b:f2:5c:9e:90:20:36:72:d8:16:b0:87:3a:94:
cd:bd:2f:98:1d:98:74:35:2a:d0:53:84:b7:38:80:
99:b3:17:7d:91:bd:a5:6b:09:ee:20:fe:20:18:88:
19:97:04:30:b9:a9:f5:bd:7a:37:c5:98:f5:f8:12:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:F5:F8:BD:B6:70:AC:4C:EC:26:50:2D:9A:2E:7A:C8:09:BB:75
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/fL71-L22cKxM7CZQLZouesgJu3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.128.0/17
92.235.0.0-92.235.47.255
92.235.56.0/21
92.235.96.0-92.235.255.255
IPv6:
2001:67c:794::/48
2a13:e240::/32
Signature Algorithm: sha256WithRSAEncryption
49:d7:25:79:69:e0:5f:1d:a5:52:bf:50:78:b4:d0:aa:a2:9d:
e8:cf:3e:6b:9c:db:d9:e4:17:3b:0d:c2:35:04:da:ea:f5:47:
bb:56:44:59:4a:9a:7d:b1:8d:65:38:64:9b:6c:7b:1c:7c:46:
94:7c:c8:6f:63:81:a2:be:30:c3:c6:3a:bc:2d:6a:3e:9a:39:
0c:fb:f3:6a:64:9f:4a:24:d6:fd:90:4d:a4:0d:41:a2:cb:d8:
6d:27:8d:33:47:e9:5f:1a:b7:3b:01:32:16:1a:4a:4c:ec:13:
64:7f:84:c3:6b:2d:bc:be:cd:be:09:87:1b:2e:28:b3:50:e4:
af:d9:18:ca:d8:b5:8c:12:09:83:40:50:c3:6c:7c:03:51:66:
13:8b:94:c9:e5:8d:88:6d:13:8a:d2:1a:d3:41:b4:df:94:1c:
06:4c:a4:82:5e:15:9e:f6:a6:77:d2:01:0e:13:be:97:1a:98:
68:53:f8:8c:44:73:8d:08:4f:07:ed:e3:04:55:c5:ad:a2:b2:
b7:dd:f1:24:ba:58:c7:98:93:fa:60:0e:e5:73:b4:0c:b6:9c:
09:72:82:b4:7f:84:a6:69:a0:c2:52:de:3e:18:c5:82:91:42:
df:35:0b:3c:84:fa:3a:3a:ea:6b:bd:d7:6b:5e:61:8b:74:67:
bc:1f:0f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:44 2026 by rpki-client