Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/1vRpnwT5aWEFUf7idoYyMgEId1A.roa
File: 1vRpnwT5aWEFUf7idoYyMgEId1A.roa (raw, json)
Hash identifier: n5E9zBhbTEAOt3MyaXx4rOi5mO2COvIRgHqBDBLt80c=
Subject key identifier: D6:F4:69:9F:04:F9:69:61:05:51:FE:E2:76:86:32:32:01:08:77:50
Certificate issuer: /CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Certificate serial: 019F2368B5F028E53523F03490C4ADDA7AAC
Authority key identifier: 8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/1vRpnwT5aWEFUf7idoYyMgEId1A.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200570
IP address blocks: 195.138.41.0/24 maxlen: 24
2a0e:45c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b5:f0:28:e5:35:23:f0:34:90:c4:ad:da:7a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6f4699f04f969610551fee27686323201087750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:08:6b:f7:56:a5:ae:c0:e5:22:19:2d:a1:
ff:08:e1:fe:51:b6:ab:9c:ba:d8:e2:43:4e:08:b5:
6d:21:3c:0f:c8:8c:c7:09:e8:6d:4f:97:9d:59:50:
98:03:f4:37:6e:08:9c:eb:f2:d6:21:22:87:7a:e1:
12:a6:8a:f1:74:a8:db:99:98:0c:98:b4:f3:19:12:
32:46:66:5c:82:3b:a1:eb:15:75:f0:fe:fa:05:1c:
85:dd:4b:c8:44:08:39:41:69:bf:47:4f:38:f7:da:
3e:0a:c2:fe:d7:23:8b:35:c2:c4:db:5e:32:79:6f:
30:ac:03:8c:32:eb:ca:4e:a3:a4:6c:4e:4d:66:72:
04:a2:3e:f4:7e:c3:3b:1d:b1:31:c4:af:48:66:54:
a6:89:d5:66:af:71:35:35:58:32:9b:4f:a3:4b:8b:
2d:a5:35:f4:e1:24:b8:8d:50:87:da:30:bd:54:b8:
97:86:28:79:4a:56:69:a5:b7:96:e4:ea:ed:38:12:
68:fe:ef:44:18:dc:54:53:39:0a:57:73:cb:98:c3:
c0:f3:b8:2f:67:71:fe:4e:cb:f4:d3:71:ab:8d:af:
4e:ca:c5:83:0a:2d:9f:4e:55:b1:63:1d:d9:87:f5:
fc:27:50:bd:ca:78:0f:6b:7a:16:bf:24:da:06:26:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F4:69:9F:04:F9:69:61:05:51:FE:E2:76:86:32:32:01:08:77:50
X509v3 Authority Key Identifier:
keyid:8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/1vRpnwT5aWEFUf7idoYyMgEId1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.41.0/24
IPv6:
2a0e:45c0::/29
Signature Algorithm: sha256WithRSAEncryption
ac:06:a0:c2:27:e5:b8:d2:fd:b6:79:f1:f1:2e:f3:6e:e6:a7:
37:1e:e6:59:9d:62:6f:26:cb:5d:03:8b:94:b1:50:c9:4f:d1:
51:38:30:ac:ba:12:fa:15:d3:18:9e:83:9c:e9:0c:1f:bc:5e:
21:e7:75:5c:64:63:fd:b2:78:d3:2a:bd:ad:06:82:af:84:40:
21:ae:e6:9c:80:7a:7a:3a:00:a9:7d:74:16:93:96:16:f9:3b:
93:15:b2:aa:20:7b:bd:ab:08:89:38:83:14:7f:65:e8:86:4b:
17:6c:ca:53:de:3f:a4:fb:03:dd:8f:60:c8:cc:69:55:18:5f:
1e:3c:22:fa:29:72:b6:a9:ac:5c:72:58:91:6c:6b:80:e4:44:
ed:4f:56:ed:47:50:52:ce:2d:9d:2a:c7:fb:3e:23:39:3c:68:
6a:3e:be:75:3c:0d:06:b4:7c:ba:27:6c:03:12:b0:2f:af:bb:
40:e3:62:65:9d:4a:b1:c6:35:4d:42:f9:ca:82:ae:04:b5:8a:
6b:c6:4c:2b:5e:a3:2e:5b:0d:08:59:00:65:30:40:54:e1:b6:
60:cb:8a:17:b4:03:98:56:2b:f6:52:a9:b4:ae:ad:ef:11:59:
ea:d6:8b:85:6c:78:2c:11:89:7a:6f:cd:be:10:f2:ee:90:8c:
56:df:ed:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:07:21 2026 by rpki-client