Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/f3cr88yivxk7Bgm731ewrTZYRmE.roa
File: f3cr88yivxk7Bgm731ewrTZYRmE.roa (raw, json)
Hash identifier: KBvRmTnbWWNTOespy+pTserzrz+QFhMRF5nah9piKuY=
Subject key identifier: 7F:77:2B:F3:CC:A2:BF:19:3B:06:09:BB:DF:57:B0:AD:36:58:46:61
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368FD18DA5DDBC92BFB67DA0F64B636
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/f3cr88yivxk7Bgm731ewrTZYRmE.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202271
IP address blocks: 185.108.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fd:18:da:5d:db:c9:2b:fb:67:da:0f:64:b6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f772bf3cca2bf193b0609bbdf57b0ad36584661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:0c:e8:bd:6a:42:58:c9:03:e1:78:85:cf:
6a:14:9e:08:a3:b2:81:4e:d7:71:7b:ff:4d:eb:2a:
26:57:69:bb:f3:f1:52:6d:3b:c0:3b:f8:de:35:42:
5c:92:d9:78:ed:42:63:dc:f9:3b:7b:5a:12:bd:20:
00:7b:1d:bf:78:fa:c6:00:7c:f5:d4:89:20:66:ef:
24:d1:d4:aa:f6:b4:73:0c:93:59:c4:38:2c:88:2e:
ce:fd:67:e9:34:2d:0c:3a:21:5c:29:74:55:5c:ad:
5b:a4:a7:64:e3:5e:65:85:78:ac:3e:bf:d7:48:9c:
fb:26:7d:3c:a3:af:2e:ca:7d:bb:e1:5d:f4:67:3d:
e0:a9:60:7c:a0:b2:e2:95:8b:ed:89:9c:43:a7:ab:
27:86:db:af:c1:78:2f:56:0e:af:fa:2c:c2:16:1e:
8e:5f:d9:06:82:ea:f0:7e:6e:3b:b7:dc:2f:3b:83:
5a:22:5a:1e:70:04:c8:55:99:3b:e1:02:53:00:3f:
b4:0d:88:25:c8:09:eb:fe:c7:37:a4:b7:fc:f9:44:
63:bd:a9:95:93:2b:e8:8c:fd:6f:6a:2e:ab:d3:69:
9b:37:03:ed:a5:50:3f:ac:c3:44:44:ac:c0:19:dc:
70:f9:c2:65:36:8d:82:c5:09:64:4e:dc:9f:41:c5:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:77:2B:F3:CC:A2:BF:19:3B:06:09:BB:DF:57:B0:AD:36:58:46:61
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/f3cr88yivxk7Bgm731ewrTZYRmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.5.0/24
Signature Algorithm: sha256WithRSAEncryption
95:88:bc:36:8d:19:28:ea:b4:48:e5:3c:68:06:a3:76:45:ea:
ef:62:00:82:1b:2e:d3:ac:16:79:40:59:b5:dd:03:58:67:e4:
d3:7a:31:06:b0:0d:bd:ef:ce:66:0b:c5:a2:cc:53:98:6b:35:
82:d0:eb:90:07:93:b8:65:ab:7f:fd:23:4d:22:7e:c3:5e:e5:
56:81:cd:01:d0:38:01:73:40:14:0c:e2:9e:11:9a:61:78:91:
bd:25:6f:e4:65:e8:d3:5f:55:0d:eb:63:94:09:3f:23:3a:0f:
91:cc:54:96:d3:1c:c2:88:06:b0:d8:17:b6:2d:e8:08:82:1a:
5a:dd:21:f0:12:ab:76:b5:3f:8f:c9:7e:fb:ec:f1:a4:a9:34:
ac:78:b5:8e:1f:7b:f7:df:8e:07:00:50:55:fd:0f:30:2d:66:
4b:76:f4:bc:a4:76:64:a6:1d:d3:3a:f2:3c:34:7c:25:88:9c:
86:e5:50:47:3d:7b:d1:e4:03:c1:e3:cb:c7:b2:9c:e5:ce:27:
6e:2c:6a:a9:f9:5f:2a:cb:49:28:8a:e5:34:08:81:c5:fa:4f:
e8:9f:0e:25:5d:46:5c:ef:f0:96:4b:c4:9f:18:ed:e4:38:f8:
24:84:b4:26:b8:99:5e:90:71:4c:d5:ed:6e:b9:53:19:41:db:
0e:ca:f7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:10 2026 by rpki-client