Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/0RtwyRVvjIiWN2cWguOt53v2hjY.roa
File: 0RtwyRVvjIiWN2cWguOt53v2hjY.roa (raw, json)
Hash identifier: mzBpFhzZJKGkwbVMWM32gnUj/RPjVRzflr6kqw19bpA=
Subject key identifier: D1:1B:70:C9:15:6F:8C:88:96:37:67:16:82:E3:AD:E7:7B:F6:86:36
Certificate issuer: /CN=f3218fea06050299f702323832f06597d47b2b68
Certificate serial: 019F23691D85571807130D7FB8342DECECAD
Authority key identifier: F3:21:8F:EA:06:05:02:99:F7:02:32:38:32:F0:65:97:D4:7B:2B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yGP6gYFApn3AjI4MvBll9R7K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/0RtwyRVvjIiWN2cWguOt53v2hjY.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43425
IP address blocks: 194.50.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yGP6gYFApn3AjI4MvBll9R7K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:85:57:18:07:13:0d:7f:b8:34:2d:ec:ec:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3218fea06050299f702323832f06597d47b2b68
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d11b70c9156f8c889637671682e3ade77bf68636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:77:21:46:f8:95:3d:4f:20:25:0e:a2:e8:
c4:a4:a0:5e:cf:0f:d5:e1:d4:bf:70:63:3a:fa:96:
ee:da:94:2c:b3:05:50:25:51:45:2d:96:d5:e3:be:
d2:38:15:57:9f:ba:91:55:4d:ef:27:f6:56:77:4b:
1d:88:b2:3c:4e:62:ff:92:88:6f:38:4e:94:11:a7:
f5:4c:2c:b8:91:03:b6:f3:09:85:cb:05:ae:4c:79:
6d:9e:cd:e7:cf:4e:db:56:f1:df:33:9d:f9:80:49:
57:2c:a9:90:76:49:5f:ba:94:d3:12:69:6a:14:91:
c1:e6:d3:ad:ef:aa:b0:ba:13:68:d4:74:23:22:89:
5a:ac:9a:d8:3d:e7:21:a2:dc:f2:54:c5:cb:9f:11:
99:8e:2a:9c:53:5e:2b:09:db:18:f8:6a:5d:b9:8d:
2d:3c:83:8e:aa:80:91:58:30:cb:d2:d6:6d:bc:fe:
02:1c:e7:53:ac:08:20:1d:22:1b:87:b9:1c:af:08:
a0:d6:31:b5:99:9a:b0:14:db:39:f3:74:fb:4e:93:
54:d3:08:80:7b:d6:f4:60:f1:8d:77:2a:48:62:85:
3e:5a:48:29:f5:1f:db:c7:b5:4a:ae:9a:70:f4:7b:
ba:66:1e:5e:eb:93:c6:20:45:9d:fd:79:22:71:40:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1B:70:C9:15:6F:8C:88:96:37:67:16:82:E3:AD:E7:7B:F6:86:36
X509v3 Authority Key Identifier:
keyid:F3:21:8F:EA:06:05:02:99:F7:02:32:38:32:F0:65:97:D4:7B:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yGP6gYFApn3AjI4MvBll9R7K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/0RtwyRVvjIiWN2cWguOt53v2hjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.179.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7a:ed:6c:3c:0e:2c:bf:f0:04:69:53:6e:7b:c5:98:4b:5f:
08:14:c0:90:e6:d4:65:55:9d:7f:ee:9f:f0:7c:ea:74:4a:84:
4f:3e:6c:17:37:55:d6:86:cf:bf:cf:12:39:fb:94:0a:af:8e:
39:53:99:7e:38:d4:6d:88:7d:67:ee:b2:ac:a1:fe:15:f0:8a:
1b:1e:17:66:d9:01:39:ad:2d:08:8e:b6:8d:89:dd:b9:a8:ca:
14:ab:33:19:f3:0e:ac:b9:e1:d9:b6:c7:b5:5d:44:0a:e1:2b:
da:a5:42:8c:07:d4:9c:1d:f3:58:bc:f6:07:55:6c:33:59:ce:
c1:5e:e4:0e:fd:8c:13:c9:ff:a1:c7:f4:6a:bd:35:e8:27:5f:
14:b3:a1:bd:49:f3:38:82:c5:ab:87:77:49:2a:96:73:d2:15:
c2:cd:9c:e9:9d:1d:a6:5f:7d:57:da:f4:31:20:0e:08:ba:62:
1b:5c:cd:46:74:02:31:5a:19:17:ea:14:52:c2:84:53:3f:cb:
47:50:2a:e6:a5:77:55:ff:8f:49:6b:5e:a2:2f:21:6f:17:2b:
e0:e5:d4:0c:4f:d0:b3:7b:8e:0f:82:0a:73:0c:72:2b:d2:ff:
49:5e:eb:89:7c:8e:10:ca:20:85:9c:a8:a4:e3:8e:0f:2a:c2:
4f:ce:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:08:02 2026 by rpki-client