Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/e95uvzijUfA8PskqB29MCQITY0c.roa
File: e95uvzijUfA8PskqB29MCQITY0c.roa (raw, json)
Hash identifier: 5t2e4qTsbvRPuZzQuH0LgBYqoRjK8h1rvy0dZQHvLOQ=
Subject key identifier: 7B:DE:6E:BF:38:A3:51:F0:3C:3E:C9:2A:07:6F:4C:09:02:13:63:47
Certificate issuer: /CN=a9a1d6b275e4639d08191b7c46ab239428287746
Certificate serial: 019F236835AE4BBFC24007F5BD7486B21064
Authority key identifier: A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/e95uvzijUfA8PskqB29MCQITY0c.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42442
IP address blocks: 185.19.172.0/22 maxlen: 24
2a00:4720::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:35:ae:4b:bf:c2:40:07:f5:bd:74:86:b2:10:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a1d6b275e4639d08191b7c46ab239428287746
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bde6ebf38a351f03c3ec92a076f4c0902136347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:e1:cc:0e:2f:7f:cf:b1:cd:51:b6:a0:c6:
36:47:2b:cf:3a:4b:30:8c:d8:20:31:ba:94:c3:91:
0f:44:f7:c1:ae:35:63:6d:b5:94:f2:8c:84:ff:0f:
7a:85:2c:f0:52:56:d3:60:05:3c:22:3a:59:ef:ba:
86:e7:0c:7e:9b:02:90:8f:91:4e:11:ca:b8:42:01:
38:ae:57:62:c7:b8:b6:a3:2b:10:23:b4:d2:71:95:
44:ee:17:a0:7e:13:ad:e9:a8:01:ce:d1:5a:ac:b8:
a4:dd:d6:2e:06:dc:4d:f9:ae:4d:27:ea:98:d4:0b:
2e:98:f2:aa:1c:70:45:d0:c4:eb:b0:31:f8:64:ba:
d6:ef:b4:b2:bc:42:d0:22:1a:75:db:91:09:38:4a:
f7:12:f8:69:89:22:79:a8:a5:75:c3:f6:77:02:55:
c3:5b:6f:a5:88:13:1b:0e:a2:ad:de:b7:02:ef:db:
9f:20:93:04:f2:98:bf:38:59:b6:ed:e4:08:2e:68:
1b:3c:0d:c5:4b:a7:fd:0e:eb:32:a6:2d:6f:9b:81:
1f:4d:a1:fa:ce:1c:c7:b4:13:72:7c:00:d3:74:31:
12:86:e9:28:cb:9b:41:9a:c9:b0:e9:b5:27:6c:03:
aa:2d:46:47:b5:12:c9:99:60:29:61:cb:9a:0d:2b:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DE:6E:BF:38:A3:51:F0:3C:3E:C9:2A:07:6F:4C:09:02:13:63:47
X509v3 Authority Key Identifier:
keyid:A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/e95uvzijUfA8PskqB29MCQITY0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.172.0/22
IPv6:
2a00:4720::/32
Signature Algorithm: sha256WithRSAEncryption
68:2c:50:38:4b:f2:29:13:9b:25:53:a7:4b:7c:23:6a:4c:6f:
82:a2:4b:61:a6:23:c7:03:4c:80:d0:a4:e1:24:6c:e0:f6:e8:
9c:04:d6:64:e5:82:97:9d:b9:63:bb:3d:0f:1e:44:aa:77:55:
7c:e4:99:ac:30:a3:6d:14:f5:1c:03:43:8c:f1:32:ac:b0:68:
6e:da:e0:0e:aa:ce:40:6e:4a:0a:62:fc:86:e1:07:45:d6:7f:
35:9c:3c:d5:16:27:8f:f9:f2:ec:5c:44:3f:26:0d:2e:6e:5d:
c0:b7:9e:7e:7d:59:64:bb:de:92:bc:86:dc:ee:2e:5f:a5:f2:
f4:ab:37:17:1d:57:f2:a8:12:76:1d:c9:0d:74:b6:3b:fd:7c:
39:d1:c8:2a:4a:b3:65:a9:de:d0:ed:f8:ae:a1:da:11:a1:52:
3a:7e:61:ba:11:4a:b3:27:78:ee:f0:c5:a2:b9:8d:dd:a2:52:
c3:29:81:bb:44:a6:26:7d:c3:dc:16:3f:65:be:60:f3:bd:11:
eb:a8:4f:8d:ac:1d:f9:9e:1f:4e:a4:4e:09:5e:1f:c2:59:20:
de:61:5c:b6:43:87:e5:5a:76:43:04:e6:94:d1:77:29:73:f5:
13:5b:09:82:48:73:12:e0:78:b3:70:67:77:4d:fa:d3:18:d7:
c4:d5:2e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:26 2026 by rpki-client