Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/PEiD2fXY8MTybS2F517gf0un5yo.roa
File: PEiD2fXY8MTybS2F517gf0un5yo.roa (raw, json)
Hash identifier: QNquho6Cc22D4ZGcJ11pg3kLKNMl0b+Ez3eOGTC66KI=
Subject key identifier: 3C:48:83:D9:F5:D8:F0:C4:F2:6D:2D:85:E7:5E:E0:7F:4B:A7:E7:2A
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019F6F0CA200A3FFC9C7812F99501D6FB79C
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/PEiD2fXY8MTybS2F517gf0un5yo.roa
Signing time: Fri 17 Jul 2026 07:48:46 +0000
ROA not before: Fri 17 Jul 2026 07:48:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208203
IP address blocks: 72.251.252.0/22 maxlen: 24
2a0f:ab00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:0c:a2:00:a3:ff:c9:c7:81:2f:99:50:1d:6f:b7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Jul 17 07:48:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c4883d9f5d8f0c4f26d2d85e75ee07f4ba7e72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:de:ba:b6:a7:64:91:b3:08:e7:ea:9e:99:
5e:3d:b4:6a:65:0b:36:0f:d6:7c:83:84:de:42:03:
89:7c:64:aa:5c:70:bf:eb:de:15:60:0b:cb:13:30:
ce:ed:a1:2e:3d:95:43:18:a8:e0:32:8b:ca:87:ee:
e3:dd:5e:0e:d7:f7:9f:9f:8d:e3:10:7d:b7:dd:a7:
84:8e:3d:73:bf:77:73:c5:ee:bd:dd:7b:d4:66:2f:
df:a9:71:96:8d:da:3e:f8:78:21:16:ef:3d:f4:42:
54:74:6b:f5:8c:4c:3c:38:d6:03:46:a0:9c:f4:6e:
54:bd:de:cd:86:3b:b8:fe:01:b5:c4:0a:56:58:8e:
0d:f8:ba:4a:8b:78:25:5e:32:38:22:5c:9f:c7:34:
a4:d7:fe:4f:af:26:14:10:a8:89:e7:be:4d:c0:01:
c6:21:d6:da:f1:a4:83:64:c4:3b:6a:ea:28:6e:38:
fa:9f:cd:32:26:db:e2:d6:bd:e0:e5:c1:41:36:a7:
8f:49:9c:46:4b:a2:45:fc:db:5a:83:f9:38:aa:98:
6e:fc:a5:9d:e3:60:76:3d:ef:14:6c:dc:00:87:be:
f0:ca:7a:13:d9:d2:fb:fc:42:1d:31:4d:8a:84:19:
69:55:ca:85:c4:a6:04:fa:c0:67:9a:fb:8e:3a:11:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:83:D9:F5:D8:F0:C4:F2:6D:2D:85:E7:5E:E0:7F:4B:A7:E7:2A
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/PEiD2fXY8MTybS2F517gf0un5yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.251.252.0/22
IPv6:
2a0f:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
28:02:4b:3a:36:ee:a7:fc:78:20:42:c1:80:ef:43:42:23:57:
56:22:40:c9:f8:5f:46:1e:6a:29:f0:73:95:12:db:15:ec:00:
26:e4:4a:8f:23:49:cd:fa:40:3e:1a:4e:04:40:ef:9a:91:44:
9b:75:65:47:9a:fc:89:ea:b0:a7:45:70:f3:1e:03:b0:b5:a5:
70:3d:17:47:13:72:4a:5c:b9:e7:47:cb:3c:c9:7f:69:3d:94:
1c:8a:dc:c3:03:e5:31:d9:48:89:8e:c4:75:b4:e1:dd:2b:68:
b6:45:a2:ed:84:4f:4e:5c:dd:a2:e0:b8:57:b3:b7:44:8d:7a:
18:6e:47:29:6b:75:e4:da:bc:97:9f:3b:e2:3f:86:07:cd:0e:
dc:1a:c4:ab:d4:0b:2a:16:a2:e6:e5:94:44:03:7c:9f:65:e0:
ae:e9:26:f0:72:88:73:91:f5:e9:d8:35:4c:27:27:61:ec:bc:
84:c6:23:8c:34:6a:8a:af:73:ce:de:cc:24:d8:4e:80:ac:c9:
ae:a6:54:14:4e:6c:89:a0:be:18:af:26:2c:9f:71:28:3e:eb:
6b:da:73:48:95:01:ce:fe:0e:7c:a3:1d:2c:46:b6:57:7b:2d:
a1:d1:78:75:d6:a7:6c:7c:ec:b9:4e:bc:24:e1:bd:c9:ac:89:
50:76:d6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:09:29 2026 by rpki-client