Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/fhStwWaNQKTLHyycPf49R2E3Mcc.roa
File: fhStwWaNQKTLHyycPf49R2E3Mcc.roa (raw, json)
Hash identifier: wOTlIULCetJIXkkKlYCWj8RHGZG/Y/sVNvWMQkL0ALU=
Subject key identifier: 7E:14:AD:C1:66:8D:40:A4:CB:1F:2C:9C:3D:FE:3D:47:61:37:31:C7
Certificate issuer: /CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Certificate serial: 019F2368D9633FA498D29181F2A62A8C0DFA
Authority key identifier: 5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/fhStwWaNQKTLHyycPf49R2E3Mcc.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204680
IP address blocks: 192.67.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d9:63:3f:a4:98:d2:91:81:f2:a6:2a:8c:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e14adc1668d40a4cb1f2c9c3dfe3d47613731c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:e9:07:33:66:24:7d:ee:e2:8f:fe:3c:1a:
a7:52:a0:cd:4b:81:85:90:dc:fb:db:59:e5:4f:44:
a3:86:46:cc:98:ab:aa:ee:38:54:d2:f3:48:c0:0f:
5c:eb:1e:85:b8:03:db:6d:11:6f:c6:50:c9:3f:73:
a1:76:f4:a2:f8:c1:3f:db:9a:0f:a8:a0:f2:3f:16:
69:4d:d0:9d:0e:6a:dc:59:c2:f8:fd:7b:3b:ff:d3:
25:df:10:51:ee:76:da:46:39:66:c5:0d:5d:37:d9:
0c:53:da:7d:7e:4a:f0:da:ca:70:2c:23:f5:ab:94:
e2:a8:7a:de:1d:37:b4:f5:a2:3e:3e:6e:00:a7:ae:
d8:41:fb:dc:6b:80:15:9a:fc:2e:5e:97:33:9c:4b:
d8:83:88:1a:06:7c:ee:a7:8b:55:ec:2d:04:d3:54:
6e:70:0c:23:7a:c2:ff:e9:3f:74:17:6f:62:66:63:
fe:cd:16:df:54:60:89:29:f9:59:8c:29:be:ad:3b:
aa:f0:cd:68:c0:2f:db:d4:88:61:52:d2:25:90:b2:
f2:4b:28:3a:f2:2d:0c:44:eb:d2:e8:53:da:63:e1:
c6:91:ca:30:ea:8e:0a:2f:65:f4:b5:27:d3:e2:d3:
fb:8c:65:6f:2c:7a:4f:61:ba:71:3f:c0:ca:6e:df:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:AD:C1:66:8D:40:A4:CB:1F:2C:9C:3D:FE:3D:47:61:37:31:C7
X509v3 Authority Key Identifier:
keyid:5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/fhStwWaNQKTLHyycPf49R2E3Mcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.67.189.0/24
Signature Algorithm: sha256WithRSAEncryption
69:51:f2:e9:77:aa:08:29:4f:23:7f:31:1e:8f:32:4e:f7:44:
eb:ce:fa:6a:5b:8b:9d:4a:fe:39:bd:23:aa:ad:8e:3a:01:dc:
44:d4:a4:94:86:70:c8:10:8b:ef:50:ea:6d:61:76:8c:04:13:
7d:ab:ad:27:a1:e2:a3:a5:46:03:fe:a2:ee:15:96:c4:08:a8:
8d:ca:68:3f:df:21:b4:a7:2e:a4:de:b1:f0:a6:09:d7:7c:e2:
b5:ef:78:79:16:2c:db:a9:61:ab:2e:f5:44:0f:0f:b0:61:9d:
66:d8:75:ac:b5:5a:0a:b7:1e:cd:f7:ba:e9:dc:a7:c2:8f:ae:
b8:6f:d9:62:3a:35:e2:9d:24:76:08:c3:8b:68:09:e3:1e:a0:
c6:63:e4:05:8d:7c:95:90:98:b9:b3:8c:19:cd:9f:8b:8f:8a:
44:64:ab:1c:6e:e5:1f:7a:26:50:60:3c:43:57:85:3d:fc:97:
8a:2b:0a:c8:cf:f4:a2:3b:73:10:94:1d:1b:59:ea:85:d7:59:
3c:d0:d6:ce:fe:de:e9:9f:43:c6:d3:00:60:90:7d:15:1a:3b:
e5:60:9a:d6:ea:b7:cb:4e:a9:8d:f1:37:1a:4f:e8:8e:b5:65:
dd:29:8e:eb:a8:04:92:ec:46:f3:39:eb:b1:07:3e:d7:cb:7a:
dc:b0:56:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:03 2026 by rpki-client