Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/D-DYikPbzngI5Wf9wRJLqxONMwM.roa
File: D-DYikPbzngI5Wf9wRJLqxONMwM.roa (raw, json)
Hash identifier: wr7nFy0fymRZ0ZAaMgj44tGgBELKNglxMiYrGnS+YsU=
Subject key identifier: 0F:E0:D8:8A:43:DB:CE:78:08:E5:67:FD:C1:12:4B:AB:13:8D:33:03
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 019F80BD40F76A18D55ACF26E2B4C24D69B3
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/D-DYikPbzngI5Wf9wRJLqxONMwM.roa
Signing time: Mon 20 Jul 2026 18:15:14 +0000
ROA not before: Mon 20 Jul 2026 18:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8517
IP address blocks: 79.123.128.0/17 maxlen: 24
95.183.128.0/17 maxlen: 24
185.7.0.0/22 maxlen: 24
193.140.0.0/16 maxlen: 24
193.140.1.0/24 maxlen: 24
193.140.2.0/23 maxlen: 23
193.140.4.0/22 maxlen: 22
193.140.24.0/22 maxlen: 22
193.140.35.0/24 maxlen: 24
193.140.68.0/23 maxlen: 23
193.140.83.0/24 maxlen: 24
193.140.88.0/24 maxlen: 24
193.140.98.0/23 maxlen: 23
193.140.134.0/24 maxlen: 24
193.140.152.0/22 maxlen: 22
193.140.159.0/24 maxlen: 24
193.140.183.0/24 maxlen: 24
193.140.244.0/22 maxlen: 22
193.140.248.0/22 maxlen: 22
193.140.252.0/23 maxlen: 23
193.255.0.0/16 maxlen: 24
193.255.58.0/24 maxlen: 24
194.27.0.0/16 maxlen: 24
194.27.43.0/24 maxlen: 24
194.27.232.0/22 maxlen: 22
194.27.236.0/23 maxlen: 23
2001:a98::/32 maxlen: 32
2001:a98:1e::/48 maxlen: 48
2001:a98:20::/48 maxlen: 48
2001:a98:120::/48 maxlen: 48
2001:a98:130::/48 maxlen: 48
2001:a98:150::/48 maxlen: 48
2001:a98:160::/48 maxlen: 48
2001:a98:170::/48 maxlen: 48
2001:a98:180::/48 maxlen: 48
2001:a98:190::/48 maxlen: 48
2001:a98:1a0::/48 maxlen: 48
2001:a98:1b0::/48 maxlen: 48
2001:a98:1c0::/48 maxlen: 48
2001:a98:1d0::/48 maxlen: 48
2001:a98:1e0::/48 maxlen: 48
2001:a98:1f0::/48 maxlen: 48
2001:a98:200::/48 maxlen: 48
2001:a98:210::/48 maxlen: 48
2001:a98:220::/48 maxlen: 48
2001:a98:230::/48 maxlen: 48
2001:a98:240::/48 maxlen: 48
2001:a98:250::/48 maxlen: 48
2001:a98:260::/48 maxlen: 48
2001:a98:280::/48 maxlen: 48
2001:a98:290::/48 maxlen: 48
2001:a98:600::/48 maxlen: 48
2001:a98:1050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:bd:40:f7:6a:18:d5:5a:cf:26:e2:b4:c2:4d:69:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jul 20 18:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fe0d88a43dbce7808e567fdc1124bab138d3303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:1b:24:95:2d:c3:86:a1:3a:50:d9:0b:66:
bf:2f:b5:cb:71:5f:9a:1a:d5:71:f3:e2:37:d2:ac:
7a:74:dd:61:a1:09:6c:3b:45:6c:dd:d7:b0:c5:51:
9c:a3:e3:5b:11:aa:68:a8:14:f0:25:a5:4c:25:fd:
0a:51:c6:ac:8a:3a:77:1e:3f:2d:ef:da:06:43:42:
ef:87:c3:81:87:c7:56:91:45:3b:d5:ab:f4:60:ca:
fb:e9:2f:71:3c:19:73:d5:72:ff:79:e1:71:f0:ac:
dd:be:d6:4e:3c:8d:36:e9:a5:a6:91:48:05:ec:d7:
8e:f3:7a:dd:f3:68:3d:53:4e:4b:2e:e1:66:4c:16:
c6:2f:29:e0:75:1b:62:08:b1:eb:79:b7:f7:91:52:
17:46:8a:98:af:12:37:1f:f5:2f:b7:03:0e:ab:d5:
00:b9:d9:f1:e8:13:56:91:2a:06:88:61:d5:0d:52:
59:86:84:a9:70:e1:c4:48:79:52:ca:89:d9:3c:95:
8e:a4:c1:31:43:c2:11:9f:98:9b:2f:57:55:35:3a:
4b:9c:ab:e9:ac:2b:0a:7b:14:2e:e4:1e:82:6d:85:
8e:07:66:bf:fc:58:08:86:17:38:78:49:8a:43:49:
0d:98:37:ad:f4:ac:49:d3:24:c2:d6:ec:0b:e1:cc:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E0:D8:8A:43:DB:CE:78:08:E5:67:FD:C1:12:4B:AB:13:8D:33:03
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/D-DYikPbzngI5Wf9wRJLqxONMwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.123.128.0/17
95.183.128.0/17
185.7.0.0/22
193.140.0.0/16
193.255.0.0/16
194.27.0.0/16
IPv6:
2001:a98::/32
Signature Algorithm: sha256WithRSAEncryption
84:dd:02:63:db:f5:ce:2b:b3:2e:60:b2:4e:52:57:14:9c:5c:
e1:9c:fd:0f:42:aa:5d:e7:f5:7c:44:74:e9:ca:3e:19:56:09:
a2:15:8e:0e:4f:80:58:a2:c3:a1:48:9c:8a:93:77:c5:29:38:
04:75:98:da:e6:a5:3a:ec:88:17:1b:d7:c9:d7:be:75:e3:b0:
6a:f4:73:fa:4f:cd:d6:03:ea:39:6f:2d:67:7a:55:b6:1a:e2:
51:25:bd:37:f2:18:d1:b0:dc:29:47:61:5b:65:2c:f1:c5:43:
f3:be:ee:cf:98:76:28:aa:20:e5:27:cb:be:30:aa:44:ba:91:
b6:41:77:54:db:71:af:3c:4c:a5:c0:ef:df:92:4f:7c:9c:8b:
65:a1:f2:8b:81:09:6f:4e:0c:61:1b:a7:93:36:4d:15:13:eb:
c9:ca:dd:59:51:d1:b8:1c:ec:c3:90:36:9f:47:7b:c4:dd:bb:
fe:4d:25:3c:0e:75:43:93:cd:4e:78:62:b9:43:44:a2:1d:06:
4a:6b:f2:e6:47:86:b1:1e:5d:e7:43:d5:f0:da:d7:bc:67:ab:
ce:4c:6c:39:bf:75:e2:3a:3a:70:c2:af:a4:39:74:a5:b4:94:
ea:14:50:ff:12:ee:4b:6b:68:50:ee:20:29:b1:a7:8e:0c:15:
1f:19:ec:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:40 2026 by rpki-client