Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/d1jX94cFd3tk-Hm1ODBJTQjIun8.roa
File: d1jX94cFd3tk-Hm1ODBJTQjIun8.roa (raw, json)
Hash identifier: oZLsTmKqfymcNdDKMx79yAPIQPeIgqvN0Dz2E55v24c=
Subject key identifier: 77:58:D7:F7:87:05:77:7B:64:F8:79:B5:38:30:49:4D:08:C8:BA:7F
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019E1BD3F723B54442EB5BE9076B9E70D95B
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/d1jX94cFd3tk-Hm1ODBJTQjIun8.roa
Signing time: Tue 12 May 2026 10:55:36 +0000
ROA not before: Tue 12 May 2026 10:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201136
IP address blocks: 193.178.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d3:f7:23:b5:44:42:eb:5b:e9:07:6b:9e:70:d9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: May 12 10:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7758d7f78705777b64f879b53830494d08c8ba7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:dc:ba:05:1f:b5:17:66:65:fc:ef:16:2b:
7c:47:6e:ac:60:4a:bd:2a:05:db:97:78:1f:fe:b3:
b2:5b:13:af:47:b9:87:0b:b2:9f:73:50:ba:fa:29:
95:f5:7c:1f:17:02:c1:89:8b:97:be:cc:5d:58:a9:
27:4d:89:e3:03:03:26:9c:7d:eb:48:5e:96:28:a6:
55:15:1a:d3:e2:22:58:a1:f3:8a:4f:12:e2:10:f7:
4e:2c:14:4a:df:2a:cc:80:2a:c2:df:20:df:5a:ef:
49:b4:f1:6b:7a:1e:08:f5:dd:e0:05:0f:b2:75:68:
72:13:74:b2:c4:38:c6:30:22:17:ef:9a:9f:47:d7:
53:a8:22:38:6e:f6:0b:19:ab:4c:ac:bf:5c:7c:19:
12:4b:3f:e0:4d:c2:bf:3b:af:cd:fe:c7:3f:27:35:
a1:da:14:12:9c:5c:81:70:53:1e:03:cb:db:06:d7:
db:65:18:67:bd:4c:d7:5e:a1:e6:2b:c7:a9:d5:9a:
2c:7b:3c:06:87:13:ad:98:51:c5:56:5d:3c:ba:fe:
47:c8:06:73:7a:47:cb:1a:83:c5:6e:d8:73:b2:f9:
88:1c:e0:e7:09:a3:73:72:a3:b7:73:73:fe:83:82:
b0:6c:97:b4:cc:63:76:85:50:28:36:ce:08:5d:eb:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:58:D7:F7:87:05:77:7B:64:F8:79:B5:38:30:49:4D:08:C8:BA:7F
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/d1jX94cFd3tk-Hm1ODBJTQjIun8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0f:21:b7:77:2c:53:3d:ee:c4:6c:c1:7e:c5:30:8d:e8:be:
02:87:ab:d0:25:2c:be:64:2b:f0:e4:a7:3d:88:ef:f4:8b:8a:
2a:83:20:d7:43:d7:74:cb:00:33:18:5c:ba:54:92:0d:96:d6:
ab:91:4a:49:39:29:99:6c:26:9d:3d:ce:64:30:97:a2:e9:ef:
d2:eb:9b:b4:79:fa:11:65:6c:e6:79:ad:21:c4:7b:18:0e:62:
7f:a0:b0:18:2f:9f:c6:58:b6:fc:0b:be:1f:73:a4:df:9f:72:
35:4e:c3:9d:58:13:df:84:40:5a:e0:53:e2:99:1c:f2:f2:4a:
37:fe:c6:28:be:64:f6:1a:28:bf:65:d7:df:a4:a1:66:af:33:
22:65:43:0a:1f:a9:e0:5d:21:42:80:b6:5f:fb:45:c8:30:34:
1a:16:2e:fc:e6:85:72:36:88:9c:3c:99:71:d8:67:8c:1a:ba:
72:63:b0:4c:3c:43:b5:1f:91:4e:4e:e4:18:4d:cb:88:26:69:
eb:a2:84:08:a0:f1:cf:71:5d:83:c8:03:d8:03:f1:9f:0c:32:
75:14:fd:30:71:b4:07:a3:a4:12:94:fc:12:fd:8d:1c:1d:87:
2b:b1:a6:d3:89:a7:5d:aa:e0:ca:76:97:03:14:97:9a:ef:ab:
6d:98:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:26 2026 by rpki-client