Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/fzPceL1lvbDYl84vLbJt7u3dpX0.roa
File: fzPceL1lvbDYl84vLbJt7u3dpX0.roa (raw, json)
Hash identifier: 4Pq/RlgA7v524hKtLDA2REIV5ykIY00EX9IWuD3lLn8=
Subject key identifier: 7F:33:DC:78:BD:65:BD:B0:D8:97:CE:2F:2D:B2:6D:EE:ED:DD:A5:7D
Certificate issuer: /CN=7aff4199068d7dbd081f3536fc2c2d7810336d79
Certificate serial: 019C445A53D2E25F49898D461775A31DD5AD
Authority key identifier: 7A:FF:41:99:06:8D:7D:BD:08:1F:35:36:FC:2C:2D:78:10:33:6D:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ev9BmQaNfb0IHzU2_CwteBAzbXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/fzPceL1lvbDYl84vLbJt7u3dpX0.roa
Signing time: Mon 09 Feb 2026 21:41:36 +0000
ROA not before: Mon 09 Feb 2026 21:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201435
IP address blocks: 185.163.112.0/24 maxlen: 24
185.163.113.0/24 maxlen: 24
185.163.114.0/24 maxlen: 24
185.163.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/ev9BmQaNfb0IHzU2_CwteBAzbXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/ev9BmQaNfb0IHzU2_CwteBAzbXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ev9BmQaNfb0IHzU2_CwteBAzbXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:5a:53:d2:e2:5f:49:89:8d:46:17:75:a3:1d:d5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aff4199068d7dbd081f3536fc2c2d7810336d79
Validity
Not Before: Feb 9 21:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f33dc78bd65bdb0d897ce2f2db26deeeddda57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:85:63:21:9d:01:1a:22:9c:c3:54:4f:66:
b1:1c:62:1c:51:33:b5:bd:1a:e4:75:6c:16:ff:f3:
ea:c2:2b:af:ad:90:c0:25:c3:fe:e0:13:c3:1c:55:
bb:11:27:eb:db:92:81:35:00:75:6e:7c:cd:6b:68:
59:12:bb:32:58:00:04:cd:27:bf:a0:d1:b0:04:3a:
c1:dc:2a:5f:10:aa:75:45:6d:59:ac:5c:d1:e7:bd:
ce:9a:1c:e8:67:8c:2f:65:22:85:67:fb:e7:29:87:
79:c6:59:01:a3:43:93:cb:0a:8e:11:91:fe:b5:97:
c2:ab:c7:9f:98:09:18:c0:89:05:a3:0a:5e:73:c1:
4d:c3:b3:ed:66:88:ee:95:ed:32:6a:3f:cc:36:1c:
45:5a:f0:c0:5a:9f:58:fd:36:06:69:9e:e5:63:d3:
96:de:5a:59:2f:d2:bc:3b:50:84:3b:cf:31:28:98:
63:a0:c7:3d:37:c8:86:77:75:76:ee:fd:9e:29:5e:
53:5f:ae:1b:ed:eb:45:14:71:b7:f0:8b:51:70:03:
59:5a:e8:3f:b9:0d:c2:95:a5:26:26:76:10:4b:3e:
18:0c:31:a7:99:21:3b:26:e8:94:b2:1c:fc:a4:21:
4e:0d:3c:5f:6b:2d:d3:a6:3e:74:1a:b9:d2:62:77:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:DC:78:BD:65:BD:B0:D8:97:CE:2F:2D:B2:6D:EE:ED:DD:A5:7D
X509v3 Authority Key Identifier:
keyid:7A:FF:41:99:06:8D:7D:BD:08:1F:35:36:FC:2C:2D:78:10:33:6D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ev9BmQaNfb0IHzU2_CwteBAzbXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/fzPceL1lvbDYl84vLbJt7u3dpX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/ev9BmQaNfb0IHzU2_CwteBAzbXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.112.0/22
Signature Algorithm: sha256WithRSAEncryption
90:20:21:da:ae:0b:a4:b6:99:fc:16:11:71:04:99:81:7d:61:
b5:31:45:6f:ea:50:68:b0:ea:a6:c5:fd:dd:e5:fe:7c:42:41:
15:9d:50:b2:fb:dd:31:6c:cc:ae:00:59:2b:a5:f7:9a:d8:9b:
a2:d5:ea:0d:0a:b3:df:b6:a2:c8:f2:79:29:5a:58:10:7c:ac:
3b:87:de:49:15:6b:51:a9:84:85:73:7e:b1:d1:41:ea:a8:32:
67:1c:2f:a4:54:31:9a:36:aa:34:ee:a6:6d:2f:9d:fb:d8:0b:
a6:82:93:d1:57:1e:d0:c5:26:d3:51:53:b1:11:3a:9f:c6:03:
30:36:44:b8:cc:2a:e5:18:99:5d:da:a6:0c:b6:90:f4:b1:a4:
63:af:7e:f3:05:ae:95:69:6d:c6:39:55:69:c5:a2:a6:1d:ba:
19:4d:4a:63:88:f5:9f:fd:a9:a8:66:da:ff:5e:58:7b:c4:a5:
c0:70:29:04:08:c7:57:c9:17:a0:3a:b5:f4:63:5f:99:71:2d:
70:56:c5:8b:0f:b3:39:57:e9:4a:8c:4b:e5:59:98:f2:cb:64:
4b:1b:81:81:21:30:11:a3:19:76:55:5e:49:ef:c0:ce:d6:ca:
7c:dc:7c:82:2d:2f:03:c3:d2:da:d9:08:ac:a7:6c:52:30:e1:
7a:58:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:49:18 2026 by rpki-client